1

tonger2003

ghj89100062

2009-3-2 17:18:26        已删除: Trojan-Downloader.Win32.Agent.bhmm        C:\Documents and Settings\Administrator\桌面\a1.exe

328397663

Filename Result
a1.exe  MALWARE

The file 'a1.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Hijacker.Gen. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.This malware is detected by a special detection routine from the engine module.

ledled

名称: Trojan.Runner.Gen.2
类型: Mutant

描述:


文件:
c:\users\administrator\desktop\a1.exe

kingsheet

卡巴
The requested URL http://bbs.kafan.cn/attachment.p ... 66&t=1235987953 is infected with Trojan-Downloader.Win32.Agent.bhmm virus

wrq

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://bbs.kafan.cn/attachment.p ... 29&t=1235988413
Information:  Is the TR/Hijacker.Gen Trojan  


--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.98, VDF 7.1.2.100

Palkia

rs mnless.cfj

黑衣~魂

DR.WEB
a1.exe - probably infected with DLOADER.Trojan
a1.exe\data001 - infected with Trojan.DownLoad.28004
a1.exe\data002 - infected with Trojan.DownLoad.28004

Archive contains 3 infected items

zdlzp

程序：
C:\DOCUMENTS AND SETTINGS\\LOCAL SETTINGS\TEMP\RAR$EX00.003\A1.EXE
木马程序生成以下文件：
1) C:\DOCUMENTS AND SETTINGS\\LOCAL SETTINGS\TEMP\1C63FD.DLL
是否删除RootKit程序?

重启删除

leonfg

C:\Documents and Settings\GUNDAM\桌面\a1.rar » RAR » a1.exe - probably a variant of Win32/Genetik trojan