后门一个,自称国产精品

f-secure报毒

水晶

卡巴斯基2009不报，金山毒霸2008杀  
病毒        2008-07-22  10:08:11        病毒在文件C:\Documents and Settings\Administrator\桌面\netwindows\Server.exe中        Worm.LovGate.gh.204800        处理成功（操作：删除）

88518

费尔不报

chenyilong58

Avira AntiVir Premium
Report file date: 2008年7月22日  11:39

Scanning for 1486584 virus strains and unwanted programs.

Licensed to:      Guenther Meier
Serial number:    1101440874-PEPWE-0001
Platform:         Windows Vista
Windows version:  (Service Pack 1)  [6.0.6001]
Boot mode:        Normally booted
Username:         Administrator
Computer name:    WIN-59WK49ABXS2

Version information:
BUILD.DAT     : 8.1.0.362      20011 Bytes   2008/7/11 12:37:00
AVSCAN.EXE    : 8.1.4.7       315649 Bytes   2008/6/26 02:57:54
AVSCAN.DLL    : 8.1.4.0        40705 Bytes   2008/5/26 01:56:42
LUKE.DLL      : 8.1.4.5       164097 Bytes   2008/6/12 06:44:20
LUKERES.DLL   : 8.1.4.0        12033 Bytes   2008/5/26 01:58:54
ANTIVIR0.VDF  : 6.40.0.0    11030528 Bytes   2007/7/18 04:33:34
ANTIVIR1.VDF  : 7.0.5.1      8182784 Bytes   2008/6/24 07:54:16
ANTIVIR2.VDF  : 7.0.5.144    1690624 Bytes   2008/7/21 12:39:54
ANTIVIR3.VDF  : 7.0.5.146      22016 Bytes   2008/7/21 02:00:26
Engineversion : 8.1.1.11  
AEVDF.DLL     : 8.1.0.5       102772 Bytes    2008/4/2 06:36:34
AESCRIPT.DLL  : 8.1.0.59      307579 Bytes   2008/7/18 13:18:36
AESCN.DLL     : 8.1.0.23      119156 Bytes   2008/7/17 03:36:30
AERDL.DLL     : 8.1.0.20      418165 Bytes   2008/4/25 01:24:52
AEPACK.DLL    : 8.1.2.1       364917 Bytes   2008/7/17 03:36:26
AEOFFICE.DLL  : 8.1.0.21      192891 Bytes   2008/7/18 13:18:30
AEHEUR.DLL    : 8.1.0.43     1339767 Bytes   2008/7/18 13:18:24
AEHELP.DLL    : 8.1.0.15      115063 Bytes   2008/5/29 06:08:42
AEGEN.DLL     : 8.1.0.29      307573 Bytes   2008/6/20 04:19:22
AEEMU.DLL     : 8.1.0.6       430451 Bytes    2008/5/7 09:04:34
AECORE.DLL    : 8.1.1.6       172405 Bytes   2008/7/17 11:42:14
AEBB.DLL      : 8.1.0.1        53617 Bytes   2008/4/24 02:50:42
AVWINLL.DLL   : 1.0.0.12       15105 Bytes    2008/7/9 02:40:06
AVPREF.DLL    : 8.0.2.0        38657 Bytes   2008/5/16 03:28:02
AVREP.DLL     : 7.0.0.1       155688 Bytes   2008/6/30 08:35:22
AVREG.DLL     : 8.0.0.1        33537 Bytes    2008/5/9 05:26:42
AVARKT.DLL    : 1.0.0.23      307457 Bytes   2008/2/12 02:29:24
AVEVTLOG.DLL  : 8.0.0.16      119041 Bytes   2008/6/12 06:27:50
SQLITE3.DLL   : 3.3.17.1      339968 Bytes   2008/1/22 11:28:04
SMTPLIB.DLL   : 1.2.0.23       28929 Bytes   2008/6/12 06:49:42
NETNT.DLL     : 8.0.0.1         7937 Bytes   2008/1/25 06:05:12
RCIMAGE.DLL   : 8.0.0.51     2564353 Bytes   2008/6/12 07:29:32
RCTEXT.DLL    : 8.0.51.0       86273 Bytes   2008/6/27 05:00:58

Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: F:\Users\ADMINI~1\AppData\Local\Temp\249e28da.avp
Logging..........................: low
Primary action...................: delete
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: off
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: high
Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR,

Start of the scan: 2008年7月22日  11:39

Starting the file scan:

Begin scan in 'F:\Users\Administrator\AppData\Local\Temp\netwindows.rar'
F:\Users\Administrator\AppData\Local\Temp\netwindows.rar
    [0] Archive type: RAR
    --> netwindows\Server.exe
      [DETECTION] Is the TR/Agent.ght.204800 Trojan
    [NOTE]      A backup was created as '48f956e4.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年7月22日  11:39
Used time: 00:04 Minute(s)

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes