下载的一包

mofunzone

http://bbs.kafan.cn/redirect.php?tid=258148&
这个帖子中样本下载的东西，貌似有重复的，自己处理吧
antivir挂到郁闷

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\WINDOWS'
C:\Documents and Settings\morgan\My Documents\WINDOWS\
  beep.sys
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aol
      [NOTE]      The file was deleted!
  beep2.sys
  clb3E8.tmp
  clbdll.dll
      [DETECTION] Is the Trojan horse TR/Agent.45056.138
      [NOTE]      The file was deleted!
  clbdriver.sys
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aol
      [NOTE]      The file was deleted!
  d.exe
  ddos1[1].exe
  ddos[1].exe


End of the scan: 2008年5月26日  20:58
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
      8 Files were scanned
      3 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      3 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      0 Archives were scanned
      0 Warnings
      3 Notes

傻猪猪米走鸡

C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\beep.sys - Win32/Rootkit.Agent.AII 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\beep2.sys - 正常
C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\clb3E8.tmp - 正常
C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\clbdll.dll - 正常
C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\clbdriver.sys - Win32/Rootkit.Agent.AII 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\d.exe - 正常
C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\ddos1[1].exe - 正常
C:\Documents and Settings\Administrator\桌面\WINDOWS.rar > RAR > WINDOWS\ddos[1].exe - 正常
C:\Documents and Settings\Administrator\桌面\WINDOWS.rar:Zone.Identifier - 正常

woai_jolin

Time        Module        Object        Name        Threat        Action        User        Information
2008/5/27 13:36:29        DMON        archive        http://bbs.kafan.cn/attachment.p ... f5&t=1211866561        a variant of Win32/Rootkit.Agent.AII trojan        quarantined - deleted        Jason-PC\Jason

solcroft

* avast! Report
* This file is generated automatically
*
* Task 'Simple user interface' used
* Started on Tuesday, May 27, 2008
* VPS: 080527-0, 27/05/2008
*

C:\Documents and Settings\Limited User\Desktop\WINDOWS\beep.sys [L] Win32:DNSChanger-VJ [Trj] (0)
C:\Documents and Settings\Limited User\Desktop\WINDOWS\clbdll.dll [L] Win32:DNSChanger-VJ [Trj] (0)
C:\Documents and Settings\Limited User\Desktop\WINDOWS\clbdriver.sys [L] Win32:DNSChanger-VJ [Trj] (0)
C:\Documents and Settings\Limited User\Desktop\WINDOWS\d.exe [L] Win32:Zbot-WX [Trj] (0)
C:\Documents and Settings\Limited User\Desktop\WINDOWS\ddos[1].exe [L] Win32:Zbot-WX [Trj] (0)
Infected files: 5
Total files: 8
Total folders: 1
Total size: 218.1 KB

*
* Task stopped: Tuesday, May 27, 2008
* Run-time was 2 second(s)

tracydk

红心王子

Date,Virus Name,Virus Type,User,Filename,Scan Type
2008-5-27 14:50:20,Rootkit.Agent.aol.ueqb,木马,Administrator,D:\我的文档\桌面\新建文件夹\WINDOWS\clbdriver.sys,Manual scan
2008-5-27 14:50:20,TrojanAgent.45056.138.bxwg.dll,木马,Administrator,D:\我的文档\桌面\新建文件夹\WINDOWS\clbdll.dll,Manual scan
2008-5-27 14:50:20,Rootkit.Agent.aol.ueqb,木马,Administrator,D:\我的文档\桌面\新建文件夹\WINDOWS\beep.sys,Manual scan

我是小行

VirSCAN.org Scanned Report :
Scanned time   : 2008/05/27 18:04:44 (CST)
Scanner results: 31%的杀软(11/36)报告发现病毒
File Name      : WINDOWS.rar
File Size      : 126618 byte
File Type      : RAR archive data, v1d, os
MD5            : b40d762e307a3ad78fedb5b2491d62d4
SHA1           : 43895d0bebff31370e92a46491e440747e6d21f3
Online report  : http://virscan.org/report/b08853801fc87131b2933475db7199ab.html

Scanner        Engine Ver      Sig Ver           Sig Date    Time   Scan result
a-squared      3.5.0.18        2008.05.26        2008-05-26  5.21   -
安博士V3       2008.05.26.01   2008.05.26        2008-05-26  2.74   -
AntiVir        7.8.0.19        7.0.4.97          2008-05-27  12.75  Rkit/Agent.aol
Arcavir        1.0.4           200805261627      2008-05-26  9.33   -
AVAST          1.0.8           080527-0          2008-05-27  15.21  Win32:Zbot-WX [Trj]
AVG            7.5.51.442      269.24.1/1468     2008-05-26  10.41  BackDoor.Generic9.APSY
BitDefender    7.60825.1243258 7.19202           2008-05-27  0.00   -
CA (VET)       9.0.0.143       31.4.5823         2008-05-26  12.74  -
ClamAV         0.93            7252              2008-05-27  0.09   -
Comodo         2.11            2.0.0.537         2008-05-27  2.15   -
CP Secure      1.1.0.715       2008.05.27        2008-05-27  23.62  -
Dr.WEB         4.44.0.9170     2008.05.27        2008-05-27  23.96  Trojan.NtRootKit.1158
ewido          4.0.0.2         2008.05.26        2008-05-26  12.63  -
F-PROT         4.4.1.52        20080526          2008-05-26  8.02   -
F-SECURE       5.51.6100       2008.05.27.01     2008-05-27  19.66  Rootkit.Win32.Agent.aol [AVP]
飞塔           2.81-3.11       9.134             2008-05-27  3.56   Suspicious
ViRobot        20080526        2008.05.26        2008-05-26  1.06   -
IKARUS         T3.1.01.26      2008.05.27.70821  2008-05-27  14.39  Virus.Rootkit.Win32.Agent.aol
江民杀毒       11.00.703       2008.05.27 09:20:322008-05-27 09:20:322.90   -
卡巴斯基       5.5.10          2008.05.27        2008-05-27  33.84  Rootkit.Win32.Agent.aol
金山毒霸       2008.1.14.15    2008.5.27.11      2008-05-27  2.05   -
迈克菲         5.2.00          5303              2008-05-26  9.20   -
Microsoft      1.3520          2008.05.27        2008-05-27  14.93  VirTool:WinNT/Pasich.A
MKS_VIR        2.01            2008.05.27        2008-05-27  4.44   -
NORMAN         5.92.08         5.92.00           2008-05-26  7.79   -
熊猫卫士       9.04.03.0001    2008.05.22        2008-05-22  1.04   -
趋势           8.700-1004      5.300.03          2008-05-27  0.00   -
Prevx          V2              20080527          2008-05-27  40.60  -
QuickHeal      9.00            2008.05.26        2008-05-26  0.94   -
瑞星           20.0            20.46.10.00       2008-05-27  5.20   -
SOPHOS         2.74.1          4.30              2008-05-27  5.64   Mal/Generic-A
赛门铁克       1.3.0.24        20080526.004      2008-05-26  5.48   -
nProtect       2008-05-23.00   1496819           2008-05-23  8.60   Generic.Malware.FYVd!w.62B88F30
The Hacker     6.2.92          v00320            2008-05-26  1.76   -
VBA32          3.12.6.6        20080526.2148     2008-05-26  20.75  -
VirusBuster    4.3.19:9        9.130.5/11.0      2008-05-26  1.44   -

挪威的冬天

金山毒霸 0

Palkia

rs 0

allinwonderi

MISS. MS Only one sample