Trojan-Downloader.Win32.Agent.bmo

绅博周幸

A-Squared	Found nothing
AntiVir	Found TR/Crypt.ULPM.Gen
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found Trojan.PWS.Agent.LK
ClamAV	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan-Downloader.Win32.Agent.bmo
Fortinet	Found nothing
Kaspersky Anti-Virus	Found Trojan-Downloader.Win32.Agent.bmo
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
VirusBuster	Found Trojan.OnlineGames.Gen!Pac.19
VBA32	Found nothing

kp2006

Kaspersky Anti-Virus 7.0 Beta
The requested URL http://bbs.kafan.cn/attachment.php?aid=69596 is infected with Trojan-Downloader.Win32.Agent.bmo virus

promised

bridgewr

微点搞定

wjjxqx

咖啡好像没反应~

tracydk

SYMANTEC PASS

小邪邪

原帖由 wjjxqx 于 2007-5-14 11:14 发表
咖啡好像没反应~

晕啊，你的那是什么咖啡？

默认就应该有反应的：

2007-5-14 11:24:57
已由访问保护规则禁止 svchost.exe
防病毒标准保护:禁止伪装 Windows 进程
已阻止的操作: 创建


默认的保护规则会直接阻止该文件进驻硬盘
连“肉体”都没有，更谈不上什么动作（发作）了

jlennon

The EQs

2

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\k.rar'
C:\Documents and Settings\morgan\My Documents\
  k.rar
    [0] Archive type: RAR
    --> svchost.exe
        [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!