1

tonger2003

aribeth199

detected: Trojan program Trojan-Downloader.Win32.Winlagons.iw        URL: http://bbs.kafan.cn/attachment.p ... 1211255725//smm.exe

挪威的冬天

金山毒霸 0

sqsszzq

卡8飘过

秋叶濛濛

Avk
Trojan-Downloader.Win32.Winlagons.iw (AVP引擎)
Dr.Web
Trojan.MulDrop.15725(和刚才那个一样）
Avira
Trojan horse TR/Agent.4096.209

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\smm.rar'
C:\Documents and Settings\morgan\My Documents\
  smm.rar
    [0] Archive type: RAR
      --> smm.exe
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/Agent.4096.209
            [WARNING]   Infected files in archives cannot be repaired!
        --> Object
      [NOTE]      The file was deleted!

无尽藏海

[扫描路径] E:\VIRUS\smm.rar
>E:\VIRUS\smm.rar\smm.exe 已被病毒感染 ：  Trojan.MulDrop.15725
E:\VIRUS\smm.rar - 发现压缩文件中有被感染的对象

star_xing

ACCESS DENIED
The requested URL could not be retrieved

--------------------------------------------------------------------------------

While trying to retrieve the URL: http://bbs.kafan.cn/attachment.p ... 45&t=1211262875

The folowing error was encountered:

The requested object is INFECTED. The following viruses Trojan-Downloader.Win32.Winlagons.iw were found

Please contact your service provider if you feel this is incorrect.



--------------------------------------------------------------------------------

Generated Tue May 20 13:56:28 2008 by 卡巴斯基反病毒软件 7.0

taiw_1144

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.329\SMM.EXE
木马程序生成以下文件:
1) C:\WINDOWS\WEILAI.MP3
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\63C0NQUH\YOO1[1].EXE
3) C:\WINDOWS\TEMP\0.JPG
4) C:\WINDOWS\SYSTEM32\FUOAVER0.DLL

Palkia

rs 0