过avast!的四个

solcroft

过了静态扫描，过不了behavior blocker

The EQs

Scan performed at: 2007-5-7 20:58:19
Scanning Log
NOD32 version 2247 (20070507) NT
Command line: C:\Documents and Settings\EQ2\桌面\install.zip
Operating memory - is OK

Date: 7.5.2007  Time: 20:58:24
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\install.zip
C:\Documents and Settings\EQ2\桌面\install.zip ?ZIP ?install.exe - Win32/TrojanDownloader.Agent.NKY trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\install.zip ?ZIP ?InstalaMe.exe - probably a variant of Win32/TrojanDownloader.Small.NRS trojan
Number of scanned files: 5
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 20:58:24 Total scanning time: 0 sec (00:00:00)

alleynsun

卡巴，杀了，

aoyang

过了静态扫描，过不了behavior blocker
这样还是不算被过了。
就好象一个木马，微点没入特征库，你也可以说过了微点的病毒库，但是你没过他的行为库。难道也说这个木马过了微点。
都这样，微点基本上挂的很惨[:27:]

tracydk

Begin scan in 'F:\样本\install.zip'
F:\样本\install.zip
  [0] Archive type: ZIP
  --> install.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.bls.6
  --> patch.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> InstalaMe.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!

taitan001

vba
F:\install.zip:<ZIP>\install.exe : infected Trojan-Downloader.Win32.Agent.bls
F:\install.zip:<ZIP>\LlaveaMe.exe : infected Trojan.Virtumod
F:\install.zip:<ZIP>\InstalaMe.exe : infected Trojan.Win32.Inject.br

小邪邪

.

taihuxian

promised

AVGAS都通杀
---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at:        21:55:33 2007-5-7

+ Scan result:       



D:\install.zip/LlaveaMe.exe -> Adware.Virtumonde : No action taken.
D:\install.zip/install.exe -> Downloader.Agent.bls : No action taken.
D:\install.zip/patch.exe -> Trojan.Agent.qt : No action taken.
D:\install.zip/InstalaMe.exe -> Trojan.Inject.br : No action taken.


::Report end

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\install.zip'
C:\Documents and Settings\morgan\My Documents\
  install.zip
    [0] Archive type: ZIP
    --> install.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Agent.bls.6
        [WARNING]   Infected files in archives cannot be repaired!
    --> LlaveaMe.exe
        [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Virtumonde.HC.7
        [WARNING]   Infected files in archives cannot be repaired!
    --> patch.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> InstalaMe.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!