毒网太多，睡觉去了

zane_xzz

[MD5: F484A0 375C90 CB926B 779539 5164BC]

1688388728

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=122985 is infected with Trojan-Downloader.Win32.Agent.ue virus

微点卫士

微点：
木马名称:Trojan-Downloader.Win32.Agent.jmb

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\444.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.StartPage.acm

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\RSS.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

洗澡去了

scottxzt

Begin scan in 'C:\Documents and Settings\dell\桌面\桌面.rar'
C:\Documents and Settings\dell\桌面\桌面.rar
  [0] Archive type: RAR
  --> 444.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> rss.dll
      [DETECTION] Is the Trojan horse TR/Starter.AEP
  --> 06014.htm
      [DETECTION] Contains signature of the HTML script virus HTML/Dldr.Agent.ET
  --> 0733.htm
      [DETECTION] Contains signature of the exploits EXP/Shellcode.A.2
      [INFO]      The file was successfully wiped!
      [INFO]      The file was deleted!

The EQs

Scan performed at: 2007-9-3 22:00:31
Scanning Log
NOD32 version 2499 (20070903) NT
Command line: C:\Documents and Settings\Don johnson\桌面\桌面.rar
Operating memory - is OK

Date: 3.9.2007  Time: 22:00:34
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\桌面.rar
C:\Documents and Settings\Don johnson\桌面\桌面.rar ?RAR ?444.exe - Win32/TrojanDownloader.Agent.UE trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\桌面.rar ?RAR ?rss.dll - probably a variant of Win32/StartPage trojan
Number of scanned files: 6
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 22:00:35 Total scanning time: 1 sec (00:00:01)

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2754
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\444.exe - Suspicious of MalwareSpy.Trojan-Downloader.Delf.1
C:\Documents and Settings\uhthn\Desktop\New Folder\pp.htm - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\rss.dll - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\06014.htm - Suspicious of Trojan-Downloader.VBS.Agent.2
C:\Documents and Settings\uhthn\Desktop\New Folder\0733.htm - OK

5 Files scanned
0 Infected files found
2 Suspicious files found
0 Files cured
0 Files deleted