1枚，全盘扫描时发现的 E597AF

remind_me

卡巴7.0 扫出来的downloader……

%systemroot%\system32\zmje0x4lhm.dll   



[ 本帖最后由 promised 于 2007-10-6 18:00 编辑 ]

kp2006

kv2008

http://bbs.kafan.cn/attachment.php?aid=136225->zmje0x4lhm.dll trojandownloader.hmir.cz 2007-10-6 下午 05:50:10 已删除

Nerazzurri

扫描进行于：2007-10-6 18:08:19
扫描日志
NOD32版本 2575 (20071006) NT
命令行： F:\Documents and Settings\kafan\桌面\zmje0x4lhm.rar

日期： 6.10.2007  时间：18:08:22
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\Documents and Settings\kafan\桌面\zmje0x4lhm.rar
F:\Documents and Settings\kafan\桌面\zmje0x4lhm.rar >>RAR >>zmje0x4lhm.dll - Win32/TrojanDownloader.Agent.NPO 木马的变种
已扫描的文件数目：1
已发现的病毒数目：1
完成时间： 18:08:22 总扫描时间：0 秒 (00:00:00)

红心王子

2007-10-6        18:33:43        1191666823        SYSTEM        1276        Sign of "Win32:Agent-JZN [Trj]" has been found in "http://bbs.kafan.cn/attachment.php?aid=136225\zmje0x4lhm.dll" file.

wangfeng66

C:\\zmje0x4lhm.rar\zmje0x4lhm.dll - probably infected with DLOADER.Trojan

Archive contains an infected item

DRWEB 4.44

[ 本帖最后由 wangfeng66 于 2007-10-6 18:45 编辑 ]

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 325
Paranoia Database - 6878
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\zmje0x4lhm.dll

C:\Documents and Settings\uhthn\Desktop\zmje0x4lhm.dll - Suspected Trojan-Downloader.Agent.1

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files cured
0 Files deleted

changzheng2

AVIRA C
Archive type: RAR
  --> zmje0x4lhm.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious

king6808

已删除：木马程序 Trojan-Downloader.Win32.Hmir.av        文件　: G:\10.6\zmje0x4lhm.rar/zmje0x4lhm.dll