网马 #2

solcroft

欠妳緈諨

NOD32还是FOUND NOTHING!怀疑我的NOD引擎是不是坏了

tracydk

Starting the file scan:

Begin scan in 'F:\样本\A1D29050.rar'
F:\样本\A1D29050.rar
  [0] Archive type: RAR
  --> A1D29050.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!

hahacomcn

Start of the scan: 2007年5月26日  15:32

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\file.zip'
C:\Documents and Settings\Administrator\桌面\file.zip
  [0] Archive type: ZIP
  --> file.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.bkm.5

LS的，你是不是扫错了文件呀。

seamonkey

detected: Trojan program Trojan-Downloader.Win32.Agent.bkm        URL: http://bbs.kafan.cn/attachment.php?aid=76164/file.exe

promised

jlennon

When opening file "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0TM3C9YN\file[1].zip" the virus "Win32:Agent-HDB [Trj]" from engine "Engine B" has been detected. File cleaned: no. File deleted: no. Quarantine: yes.

When opening file "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0TM3C9YN\file[1].zip" the virus "Trojan-Downloader.Win32.Agent.bkm" from engine "Engine A" has been detected. File cleaned: no. File deleted: no. Quarantine: no.

zongkai

咖啡报木马，Downloader-BBS

d9shun

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Jason\My Documents\Downloads\Compressed\file.zip'
C:\Documents and Settings\Jason\My Documents\Downloads\Compressed\file.zip
  [0] Archive type: ZIP
  --> file.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.bkm.5
      [INFO]      A backup was created as '46c3e603.qua'  ( QUARANTINE )
      [INFO]      The file was renamed to 'file.zip.VIR'!

蓝色牛仔裤

[Scan path] C:\Documents and Settings\Administrator\桌面\file.zip
>C:\Documents and Settings\Administrator\桌面\file.zip\file.exe infected with Trojan.DownLoader.22785
C:\Documents and Settings\Administrator\桌面\file.zip - archive contains infected objects