一个````````````````````````

Nblock

程序:
E:\WNSBB\WNSBB.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\WNSBB.EXE
是否删除木马程序及其衍生物?

Graybird

The file 'wnsbb.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

sharkkong

ACCESS DENIED
The requested URL could not be retrieved

--------------------------------------------------------------------------------

While trying to retrieve the URL: http://bbs.kafan.cn/attachment.php?aid=203670

The folowing error was encountered:

The requested object is INFECTED. The following viruses Heur.Trojan.Generic were found

Please contact your service provider if you feel this is incorrect.



--------------------------------------------------------------------------------

Generated Tue Feb 19 18:31:24 2008 by Kaspersky Anti-Virus 7.0

挪威的冬天

信息        2008-02-19  18:47:57        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-02-19  18:47:57        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件3个                       
信息        2008-02-19  18:47:57        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-02-19  18:47:57        C:\Users\挪威的冬天\Desktop\wnsb.rar\wnsbb\wnsbb.exe        Win32.Troj.Unknown.a.81920        跳过，未处理

qigang

rising20.32.12未知！

sam.to

Hello,

wnsbb.exek - Trojan-Downloader.Win32.Agent.jgx

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

墨色丹青

红伞报了```

rest1min

江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.703
        病毒库日期 2008-02-19
        更新日期 2008-02-19

扫描目标 C:\Documents and Settings\Administrator\桌面\wnsb.rar

开始时间 2008-02-19 20:24:17

在 C:\Documents and Settings\Administrator\桌面\wnsb.rar->wnsbb\wnsbb.exe 中发现 Trojan/Agent.ajym 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :659                                 病毒体 :1         
                   删除 :1                                     解毒 :0         
    扫描速度(千字节/秒) :26860                             扫描时间 :00:00:07
    扫描文件速度(个/秒) :94

BING126

McAfee  MISS

悠柚

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://bbs.kafan.cn/attachment.php?aid=203670
Information:         Contains suspicious code HEUR/Malware

Generated by AntiVir WebGuard 8.0.6.0, AVE 8.1.0.8, VDF 7.0.2.159