受伤的总是ESET,[f08fd35]

绅博周幸

a-squared	3.0.0.123	2007.09.02	2007-09-02	-	4.392
Arcavir	1.0.4	200709031933	2007-09-03	-	1.213
AVAST	1.0.8	000772-1	2007-09-03	-	3.042
AVG	7.5.48.442	269.13.3/986	2007-09-03	BackDoor.Generic7.DJG	1.433
BitDefender	7.60825.833396	7.14613	2007-09-04	BehavesLike:Trojan.Downloader (suspected)	3.045
CA (VET)	8.4.0.24	31.1.5105	2007-09-03	-	0.870
ClamAV	0.91.1	4144	2007-09-04	Trojan.Packed-75	0.035
ewido	4.0.0.2	2007.09.03	2007-09-03	Downloader.QQHelper.rb	2.084
F-SECURE	5.51.6100	2007.09.04.01	2007-09-04	Trojan-Downloader.Win32.QQHelper.rb	2.546
IKARUS	T3.1.1.12	2007.09.04.69443	2007-09-04	Backdoor.Win32.Rbot.bpb	1.271
MKS_VIR	2.01	2007.09.03	2007-09-03	-	1.981
NOD32	2.70.8	2501	2007-09-03	-	0.076
nProtect	2007-09-04.00	41383	2007-09-04	BehavesLike:Trojan.Downloader	9.160
QuickHeal	9.00	2007.09.03	2007-09-03	Suspicious - DNAScan	2.249
SOPHOS	2.49.1	4.21	2007-09-04	-	2.368
The Hacker	6.1.9	v00177	2007/09/04	-	0.691
VBA32	3.12.2.3	20070903.1128	2007-09-03	-	0.686
VirusBuster	4.3.19:9	9.100.1/11.0	2007-09-03	-	1.265
冰岛杀毒	3.16.16	2007.09.03	2007-09-03	W32/Downloader.gen14	0.701
卡巴斯基	5.5.10	2007.09.04	2007-09-04	Trojan-Downloader.Win32.QQHelper.rb	0.049
大蜘蛛	4.33	2007.09.03	2007-09-03	-	4.828
小红伞	7.4.1.66	6.39.1.81	2007-09-03	TR/Dldr.QQHel.rb.46	2.334
江民杀毒	10.00.650	2007.09.03	2007-09-03	-	0.744
熊猫卫士	9.04.03.0001	2007.09.04	2007-09-04	Suspicious file	3.230
瑞星	19.0	19.39.11.00	2007-09-04	Trojan.DL.Win32.Agent.yaz	1.827
诺曼	5.91.05	5.90	2007-09-03	Sandbox: W32/Downloader	3.513
赛门铁克	1.3.0.24	20070903.017	2007-09-03	Trojan.Packed.16	0.295
趋势	8.500-1001	4.691.00	2007-09-03	-	0.042
迈克菲	5.1.00	5111	2007-09-03	W32/Gaobot.worm.gen.u	0.666
金山毒霸	2007.6.20.249	2007.9.4	2007-09-04	-	0.831

siman.yu

能过ＮＯＤ３２基本上都能过ＡＶＡＳＴ

moonsilver

Trojan.DL.Win32.Agent.yaz

真没意义。。。
下载回来的东西被nod咔嚓了

1688388728

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=123218 is infected with Trojan-Downloader.Win32.QQHelper.rb virus

gho

2007-9-4        17:12:38        Move failed (Clean failed)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\my_700602.exe        W32/Gaobot.worm.gen.u (Virus)

timhas266

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\my_700602.rar'
C:\Documents and Settings\tim\桌面\my_700602.rar
  [0] Archive type: RAR
  --> my_700602.exe
      [DETECTION] Is the Trojan horse TR/Dldr.QQHel.rb.46
      [INFO]      A backup was created as '473c3c67.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

小邪邪

咖啡报“高波”变种：W32/Gaobot.worm.gen.u

微点卫士

微点：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MY_700602.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:2546
远端地址:58.211.7.36(江苏·苏州)
远端端口:80
木马名称:Trojan.Win32.Genetik.cal

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TEMPORARY INTERNET FILES\CONTENT.IE5\SN0JEFMB\MMINSTALL[1]
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.cal

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TEMPAQ
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MY_700602.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TEMPAQ
是否删除木马程序及其衍生物?

ssy275