NOD322.7居然查不出来！

renzituo

用EQ，此病毒与系统和谐相处。没什么破坏。不知是不是后门~

罗拉的路

毒霸拦截~~之~~

Sebastian

Avira
BDS/FlyAgent.IU
TR/Peed.A.1084
TR/Peed.A.1080

aerbeisi

peed fly 易语言？

继灰鸽子后，nod32第二短板。

kingmuro

已检测：木马程序 Backdoor.Win32.FlyAgent.iu        文件：D:\My Documents\桌面\test\2CEB039\2CEB39\2CEB39\6F2A02.EXE

失落的手链

瑞星2010
Worm.Win32.Agent.ark

dreams521

解压缩后,微点主防报警:

微点扫描后又找到一个:

schumi小粉

应该是E语言写出来的autoruner吧，记得第一次我GF电脑中毒的时候就是装的nod32，现在变种还是很多的~~杀不出也情有可原啊~~

2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\wenzilian[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\tmh_iframe_comm[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\qqshow_header[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\ping[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\mall[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\live[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\autoaddress[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\AD2v1.7.6[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\RXA1WD12\mall_tips[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\RXA1WD12\common[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\NOG1HLHS\total_sidebar[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\NOG1HLHS\total_main[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\GCGNRL4C\ttselect[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\5WXA2WHA\flash0905[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\GCGNRL4C\ttselect[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\mall[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\live[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\5WXA2WHA\flash0905[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\qqshow_header[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\NOG1HLHS\total_main[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\NOG1HLHS\total_sidebar[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\autoaddress[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\wenzilian[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\AD2v1.7.6[1].js
2009-07-12 15:19:43    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\ping[1].js
2009-07-12 15:19:42    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\RXA1WD12\common[1].js
2009-07-12 15:19:42    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\RXA1WD12\mall_tips[1].js
2009-07-12 15:19:42    文件保护(创建文件)     操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\TMP75AQL\tmh_iframe_comm[1].js
2009-07-12 15:19:41    应用程序保护(修改其它进程内存)     操作:阻止
进程路径:C:\WINDOWS\explorer.exe
目标进程:C:\Documents and Settings\Administrator\桌面\新建文件夹\2CEB039\2CEB39\2CEB39\6F2A02.EXE

王子带着刀

a-squared 免费版本 4.5
上次更新: 2009-7-12 15:44:02
扫描设置:
Scan type: N/A
对象: C:\Documents and Settings\Administrator\桌面\2CEB039.part2.rar, C:\Documents and Settings\Administrator\桌面\2CEB039.part3.rar, C:\Documents and Settings\Administrator\桌面\2CEB039.part1.rar
扫描文件: 开
启发式扫描: 关
ADS 扫描: 开
扫描开始于: 2009-7-12 16:17:58
C:\Documents and Settings\Administrator\桌面\2CEB039.part3.rar/shell.fne  已检测: Trojan.Peed!IK
C:\Documents and Settings\Administrator\桌面\2CEB039.part3.rar/spec_a.fne  已检测: Trojan.Peed!IK
C:\Documents and Settings\Administrator\桌面\2CEB039.part1.rar/6F2A02.EXE  已检测: Trojan.Dloader!IK
C:\Documents and Settings\Administrator\桌面\2CEB039.part1.rar/cnvpe.fne  已检测: Trojan.Peed!IK
C:\Documents and Settings\Administrator\桌面\2CEB039.part1.rar/dp1.fne  已检测: Trojan.Win32.Pakes!IK
C:\Documents and Settings\Administrator\桌面\2CEB039.part1.rar/eAPI.fne  已检测: Virus.Trojan.Win32.BHO!IK
C:\Documents and Settings\Administrator\桌面\2CEB039.part1.rar/internet.fne  已检测: Trojan-Dropper.Agent!IK

[ 本帖最后由 王子带着刀 于 2009-7-12 16:18 编辑 ]

sam.to

既然查不出,请楼主上报去