一个DLL文件。

风雪

Antivirus	Version	Last Update	Result
AhnLab-V3	2008.6.27.1	2008.06.30	-
AntiVir	7.8.0.59	2008.06.29	TR/Spy.Gen
Authentium	5.1.0.4	2008.06.29	W32/Downloader.A.gen!Eldorado
Avast	4.8.1195.0	2008.06.28	Win32:Agent-JZN
AVG	7.5.0.516	2008.06.29	-
BitDefender	7.2	2008.06.30	Trojan.Generic.287685
CAT-QuickHeal	9.50	2008.06.28	-
ClamAV	0.93.1	2008.06.30	-
DrWeb	4.44.0.09170	2008.06.29	DLOADER.Trojan
eSafe	7.0.17.0	2008.06.29	-
eTrust-Vet	31.6.5911	2008.06.27	-
Ewido	4.0	2008.06.27	-
F-Prot	4.4.4.56	2008.06.29	W32/Downloader.A.gen!Eldorado
F-Secure	7.60.13501.0	2008.06.26	-
Fortinet	3.14.0.0	2008.06.30	W32/Agnet.LMN!tr.dldr
GData	2.0.7306.1023	2008.06.30	Win32:Agent-JZN
Ikarus	T3.1.1.26.0	2008.06.30	Virus.Win32.Agent.JZN
Kaspersky	7.0.0.125	2008.06.30	-
McAfee	5327	2008.06.27	Downloader-BDX
Microsoft	1.3704	2008.06.30	Backdoor:Win32/Farfli.A.dll
NOD32v2	3225	2008.06.29	a variant of Win32/BHO.NDW
Norman	5.80.02	2008.06.27	-
Panda	9.0.0.4	2008.06.29	-
Prevx1	V2	2008.06.30	-
Rising	20.51.00.00	2008.06.30	-
Sophos	4.30.0	2008.06.30	Mal/Behav-010
Sunbelt	3.0.1176.1	2008.06.26	-
Symantec	10	2008.06.30	-
TheHacker	6.2.96.364	2008.06.28	-
TrendMicro	8.700.0.1004	2008.06.30	-
VBA32	3.12.6.8	2008.06.29	-
VirusBuster	4.5.11.0	2008.06.23	Backdoor.Ferfli.Gen.3
Webwasher-Gateway	6.6.2	2008.06.30	Trojan.Spy.Gen

奇怪了蜘蛛扫描器，扫描系统时候没有报。单独扫描文件报了。

wangjay1980

to kl

allinwonderi

[Found downloader]         <W32/Downloader.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\ww5k1cin.rar->ww5k1cin.dll

---------------------------------------------------------------------
Scan ended:        2008-6-30, 19:58:39
Duration:        0:00:00

Scan result:

Scanned files:                 6
Infected objects:         1
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

Nerazzurri

Win32:Agent-JZN [Trj]

BING126

McAfee                Downloader-BDX

qigang

RS20.51.02未杀！

电影结束了

E:\ww5k1cin.rar>>ww5k1cin.dll TrojanDownloader.Agent.airj.rhsi.dll   木马

wangjay1980

Hello.
New malicious software was found in the attached file.
Its detection will be included in the next update. Thank you for your help.
-----------------
Regards, Vladimir Lebedev
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


> Attachment: ww5k1cin.rar

ssy275

liuzhe2

kaba2009未杀！