样本一个，过卡巴，BD。

The EQs

Scan performed at: 2007-3-1 19:03:04
Scanning Log
NOD32 version 2085 (20070228) NT
Command line: C:\Documents and Settings\EQ2\桌面\绅博GDATA_AntiVirenKit（中国）论坛_ZaRwD.rar
Operating memory - is OK

Date: 1.3.2007  Time: 19:03:09
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\绅博GDATA_AntiVirenKit（中国）论坛_ZaRwD.rar
C:\Documents and Settings\EQ2\桌面\绅博GDATA_AntiVirenKit（中国）论坛_ZaRwD.rar ?RAR ?ZaRwD.exe - a variant of Win32/Agent.NAU worm
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 19:03:09 Total scanning time: 0 sec (00:00:00)

jlennon

卡巴更新真是没话说，这才一会儿就可以查出了。
=====================================================

Virus check with AntiVirusKit
Version 17.0.6282
Virus signatures of 2/24/2007
Start time: 3/1/2007 20:23
Engine(s): Engine A (AVK 17.2920), Engine B (BD 17.2113)
Heuristic: On
Archives: On
System areas: On
Check system areas...
Check selected directories and files...
Object: ZaRwD.exe
In archive: C:\Documents and Settings\Administrator\桌面\绅博GDATA AntiVirenKit（中国）论坛_ZaRwD.rar
Status: Virus detected
Virus: Worm.Win32.Agent.t (Engine A)
Object: 绅博GDATA AntiVirenKit（中国）论坛_ZaRwD.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Worm.Win32.Agent.t (Engine A)
Analysis complete: 3/1/2007 20:23
    1 files checked
    1 infected files detected
    0 suspected files detected

pen

解压后双击运行，微点（3月1日升级）报未知木马

[ 本帖最后由 pen 于 2007-3-1 22:40 编辑 ]

玉龙雪山

卡巴斯基反病毒6.0
The requested URL http://www.kpfans.com/bbs/attachment.php?aid=38386 is infected with Worm.Win32.Agent.t virus

剑指七星

已经报了

eaco

金山右键扫描报

jnwjlyd

微点报了

八戒瘦了

小红伞的确强◎！！

猜不出你是谁

avast过

mmll888

Starting the file scan:

Begin scan in 'I:\绅博GDATA AntiVirenKit（中国）论坛_ZaRwD.rar'
I:\绅博GDATA AntiVirenKit（中国）论坛_ZaRwD.rar
  [0] Archive type: RAR
  --> ZaRwD.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.atw.4
      [INFO]      The file was deleted!