可疑

tonger2003

schumi小粉

C:\Documents and Settings\Administrator\桌面\新建文件夹\smService.rar > RAR > smService.exe - 可能是 Win32/Agent 特洛伊木马 的变种 - 是已删除对象的一部分

gomu887

红伞没报

lingbo110120

NOD报了

gomu887

附上VT报告







文件 smService.rar 接收于 2009.01.14 14:11:58 (CET)

反病毒引擎	版本	最后更新	扫描结果
a-squared	4.0.0.73	2009.01.14	Trojan-Spy.Wanglian.A!IK
AhnLab-V3	2009.1.13.3	2009.01.14	-
AntiVir	7.9.0.54	2009.01.14	-
Authentium	5.1.0.4	2009.01.14	-
Avast	4.8.1281.0	2009.01.13	Win32:Trojan-gen {Other}
AVG	8.0.0.229	2009.01.14	-
BitDefender	7.2	2009.01.14	Adware.Generic.42259
CAT-QuickHeal	10.00	2009.01.14	-
ClamAV	0.94.1	2009.01.14	-
Comodo	931	2009.01.14	-
DrWeb	4.44.0.09170	2009.01.14	Adware.Tomato
eSafe	7.0.17.0	2009.01.14	Win32.Trojan
eTrust-Vet	31.6.6307	2009.01.14	-
F-Prot	4.4.4.56	2009.01.14	-
F-Secure	8.0.14470.0	2009.01.14	-
Fortinet	3.117.0.0	2009.01.14	Misc/PUP
GData	19	2009.01.14	Adware.Generic.42259
Ikarus	T3.1.1.45.0	2009.01.14	Trojan-Spy.Wanglian.A
K7AntiVirus	7.10.584	2009.01.09	Trojan.Win32.Malware.1
Kaspersky	7.0.0.125	2009.01.14	-
McAfee	5494	2009.01.13	potentially unwanted program Generic PUP
McAfee+Artemis	5494	2009.01.13	potentially unwanted program Generic PUP
Microsoft	1.4205	2009.01.14	-
NOD32	3764	2009.01.14	probably a variant of Win32/Agent
Norman	5.93.01	2009.01.13	-
nProtect	2009.1.8.0	2009.01.14	Adware.Generic.42259
Panda	9.5.1.2	2009.01.13	Adware/SearchHook
PCTools	4.4.2.0	2009.01.14	-
Prevx1	V2	2009.01.14	Malicious Software
Rising	21.12.22.00	2009.01.14	-
SecureWeb-Gateway	6.7.6	2009.01.14	-
Sophos	4.37.0	2009.01.14	-
Sunbelt	3.2.1831.2	2009.01.09	-
Symantec	10	2009.01.14	Trojan Horse
TheHacker	6.3.1.4.219	2009.01.14	-
TrendMicro	8.700.0.1004	2009.01.14	TROJ_DROPPER.JUL
VBA32	3.12.8.10	2009.01.13	-
ViRobot	2009.1.14.1559	2009.01.14	-
VirusBuster	4.5.11.0	2009.01.13	-
附加信息
File size: 369487 bytes
MD5...: 3397030ff8ff7201866c7dc23c76aef4
SHA1..: 548cb2d8dda4d1d2e73cd2f2e5c7ab05820411c5
SHA256: 4a9864d3682de1832e18dec3e45be41780a519dd543f07eb7e7023ea3465b97b
SHA512: 7ead6f6295051dd95c346f10c94b302304ecb9d01c12f86b2129fe62f9c339b1<BR>c69e13e342fe1d4b371f62fe74b2de7026564547902dbd44cf6c65e2f3c3a4b9<BR>
ssdeep: 6144:rts+XwPc0h4Sof7k0JLrtbLoCxCPxjGW3UAs6t5E9651CzFCWUE3OxtMH0U<BR>qXMqJ:y+2c0h4SofHwPz3JsU51SFCPtc4XM1cd<BR>
PEiD..: -
TrID..: File type identification<BR>RAR Archive (83.3%)<BR>REALbasic Project (16.6%)
PEInfo: -
Prevx info: &lt;a href='http://info.prevx.com/aboutprogramtext.asp?PX5=396240B800BCD516E0B70DC7B8549A006C3FE3F8' target='_blank'&gt;http://info.prevx.com/aboutprogr ... A006C3FE3F8&amp;lt;/a&gt;

wangjay1980

番茄系统的吧

无尽藏海

The file 'smService.exe' has been determined to be 'FALSE POSITIVE'.In particular this means that this file is not malicious but a false alarm.Detection is removed from our virus definition file (VDF) with the version: 7.0.2.173.

chenjava

已经是老样本了

雨宫优子

SmService似乎是番茄工具条还是番茄藤（或许是番茄吧 ）的东西了
话说我系统刚刚装的时候就有


番茄的流氓行为...