病毒

kp2006

快杀

[ 本帖最后由 kp2006 于 2007-3-12 02:07 编辑 ]

The EQs

Scan performed at: 2007-3-12 2:02:21
Scanning Log
NOD32 version 2107 (20070311) NT
Command line: C:\Documents and Settings\EQ2\桌面\6.rar
Operating memory - is OK

Date: 12.3.2007  Time: 02:02:25
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\6.rar
C:\Documents and Settings\EQ2\桌面\6.rar ?RAR ?6.exe - a variant of Win32/Agent.NAU worm
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 02:02:28 Total scanning time: 3 sec (00:00:03)

The EQs

第二个文件无法运行。。。。

The EQs

Time        Module        Object        Name        Threat        Action        User        Information
2007-3-12 2:08:26        AMON        file        C:\Documents and Settings\EQ2\桌面\smss\smss.exe        Win32/TrojanDownloader.Agent.BDL trojan        quarantined - deleted - error while cleaning - operation unavailable for this type of object                Event occurred on a newly created file. The file was moved to quarantine. You may close this window.

The EQs

第二个文件又是误报？？

The EQs

DrWeb

4.33

03.11.2007

Trojan.Starter.125

Panda	9.0.0.4	03.10.2007	Suspicious file
Prevx1	V2	03.11.2007	Generic.Malware

		[td]
		[td]
VBA32	3.11.2	03.10.2007	Trojan.Starter.125
		[td]

[ 本帖最后由 EQ2 于 2007-3-12 02:17 编辑 ]

jlennon

我的熊猫就不报

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-11
Start time: 2007-3-12 3:13
Engine(s): KAV engine (AVK 17.3208), BD-Engine (BD 17.2388)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 6.exe
        In archive: C:\Documents and Settings\Administrator\桌面\6.rar
        Status: Virus detected
        Virus: Worm.Win32.Agent.t (KAV engine), Win32.Worm.Agent.M (BD-Engine)
Object: 6.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: Worm.Win32.Agent.t (KAV engine), Win32.Worm.Agent.M (BD-Engine)
Object: smss.exe
        In archive: C:\Documents and Settings\Administrator\桌面\smss[1].part1.rar
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.Agent.bdl (KAV engine)
Object: smss[1].part1.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: Trojan-Downloader.Win32.Agent.bdl (KAV engine)
Analysis complete: 2007-3-12 3:13
    5 files checked
    2 infected files detected
    0 suspected files detected

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\smss'
C:\Documents and Settings\Administrator\My Documents\smss\
  smss.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.bdl
      [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\6.rar'
C:\Documents and Settings\Administrator\My Documents\
  6.rar
    [0] Archive type: RAR
    --> 6.exe
        [DETECTION] Contains signature of the worm WORM/Agent.T.8
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\setup.rar'
C:\Documents and Settings\Administrator\My Documents\
  setup.rar
    [0] Archive type: RAR
    --> setup.exe

Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files alongside their results can be found below:File ID         Filename         Size (Byte)        Result
221071         setup.exe         20.480         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
setup.exe         UNDER ANALYSIS


The file 'setup.exe' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

hsjj2005

费尔