2xAgent

qianwenxiang

Joker

--> video0_0.cfg
      [DETECTION] Is the TR/Agent.avds Trojan
    --> video0_1.cfg
      [DETECTION] Is the TR/Agent.batr Trojan
    --> 11.php
      [DETECTION] Is the TR/Agent.avds Trojan
    --> 12.php
      [DETECTION] Is the TR/Agent.avds Trojan
    --> fanta.php
      [DETECTION] Is the TR/Agent.batr Trojan
    --> image_fanta.gif
      [DETECTION] Is the TR/Agent.avds Trojan
    [NOTE]      The file was successfully wiped!
    [NOTE]      The file was deleted!

woai_jolin

2009/1/11 11:30:44        Real-time file system protection        file        G:\v\fanta.php        Win32/TrojanDownloader.Agent.OPY trojan        cleaned by deleting - quarantined        Jason-PC\Jason        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2009/1/11 11:30:44        Real-time file system protection        file        G:\v\video0_1.cfg        Win32/TrojanDownloader.Agent.OPY trojan        cleaned by deleting - quarantined        Jason-PC\Jason        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

ghj89100062

http://new-york-images.com/cfg/a0af6f5433c199ec093737b7b257fb589b5d4126/video0.cfg   
http://images-earth.com/fanta/a0af6f5433c199ec093737b7b257fb589b5d4126/image_fanta.gif   
http://future-pictures.com/cfg/a0af6f5433c199ec093737b7b257fb589b5d4126/video0.cfg

woai_jolin

2009/1/11 11:32:09        Real-time file system protection        file        G:\c.exe        Win32/TrojanDownloader.Agent.OPY trojan        cleaned by deleting - quarantined        Jason-PC\Jason        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

qianwenxiang

严重撞车http://bbs.kafan.cn/thread-405048-1-1.html 样本重复了

江湖的fans

你吃饭貌似很勤的说

江湖的fans

C:\Documents and Settings\Administrator\桌面\午餐.rar>>c.exe        TrojanDownloader.Small.ailx.wvzy        木马        还未处理

ghj89100062

那些网址刚下载下来的呃~~

ghj89100062

原帖由 江湖的fans 于 2009-1-11 11:33 发表
你吃饭貌似很勤的说

考完放假比较有心情