先来三个，nod报，红伞过

allenhippo

去个毒网给我下了2X个文件，先来3个nod报红伞不报的。

aerbeisi

卡巴报了1个。

另外两个卡巴主动防御拦截

suspicous driver install

[ 本帖最后由 aerbeisi 于 2007-6-2 18:57 编辑 ]

zane_xzz

已检测到: 木马程序 Trojan-Proxy.Win32.Small.du        文件: C:\Documents and Settings\Administrator\桌面\virus.rar/virus\bt2[1].exe

蜘蛛报同一个病毒

[ 本帖最后由 zane_xzz 于 2007-6-2 18:53 编辑 ]

Giggs

已检测到: 木马程序 Trojan-Proxy.Win32.Small.du        URL: http://bbs.kafan.cn/attachment.php?aid=81021//virus/bt2[1].exe

观弈书童

bt2[1].exe - Win32/Agent.NIK 木马的变种
bt9[1].exe - Win32/Agent.NIK 木马的变种
btb[1].exe - Win32/Agent.NIK 木马的变种

小邪邪

l784588

avast 报了是Win32:Agent-HHP [Trj]

蓝色牛仔裤

[Scan path] C:\Documents and Settings\Administrator\桌面\virus.rar
>C:\Documents and Settings\Administrator\桌面\virus.rar\virus\bt2[1].exe infected with Trojan.Havedo
>C:\Documents and Settings\Administrator\桌面\virus.rar\virus\bt9[1].exe infected with Trojan.Havedo
>C:\Documents and Settings\Administrator\桌面\virus.rar\virus\btb[1].exe infected with Trojan.Havedo
C:\Documents and Settings\Administrator\桌面\virus.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 5
Infected objects found: 3
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 66 Kb/s
Scan time: 00:00:00

promised

?           Copyright (c) 1993-2007 by VBA Ltd.            ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯?
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\virus.rar:<RAR>\virus\bt2[1].exe : infected Trojan.Havedo
Program execution terminated by user


Directories       : 4       Files in archives:      Files on disks:
Archives:                   - total       : 6       - total       : 32
- scanned         : 4       -  scanned    : 6       - scanned     : 31
- contain viruses : 1       -  infected   : 1       - infected    : 1
- deleted         : 0       -  suspicious : 0       - suspicious  : 0

Startup    : 19:04:46 02-06-2007
End        : 19:04:52 02-06-2007
Total time : 00:00:06
终止批处理操作吗(Y/N)?

scottxzt

微点报未知间谍