mg_16248.scr[md5:bd8749]

mofunzone

File:           img_16248.scr
Status:        
INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5:         bd8749b5c9249841f8c81b2aa17fc941
Packers detected:        
PE_PATCH, UPACK
Bit9 reports:         File not found
Scanner results
Scan taken on 22 Jun 2007 04:43:34 (GMT)
A-Squared        
Found nothing
AntiVir        
Found W32/Selfish.a
ArcaVir        
Found Heur.Win32
Avast        
Found nothing
AVG Antivirus        
Found PSW.Banker3.POH
BitDefender        
Found nothing
ClamAV        
Found nothing
Dr.Web        
Found Trojan.MulDrop.6379
F-Prot Antivirus        
Found nothing
F-Secure Anti-Virus        
Found Trojan-Downloader.Win32.Agent.bur
Fortinet        
Found nothing
Kaspersky Anti-Virus        
Found Trojan-Downloader.Win32.Agent.bur
NOD32        
Found nothing
Norman Virus Control        
Found W32/Suspicious_U.gen
Panda Antivirus        
Found Trj/Nabload.BNP
Rising Antivirus        
Found nothing
VirusBuster        
Found Packed/Upack
VBA32        
Found nothing

小邪邪

咖啡：PWS-Banker.dldr (特洛伊)

aziok

Virus or unwanted program 'W32/Selfish.a [W32/Selfish.a]'
detected in file 'C:\Documents and Settings\????\桌面\img_16248.scr.
Action performed: Deny access

红心王子

监控拦截

KAV-Longhorn

Kaspersky Internet Security 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=91046 is infected with Trojan-Downloader.Win32.Agent.bur virus

a256886572008

運行img_16248.scr，發現下列行為，被EQ-Secure RC2攔截！

2007-06-22 14:52:43    运行应用程序      操作:允许
进程路径:C:\windows\Explorer.EXE
文件路径:D:\桌面\virus\img_16248\img_16248.scr
命令行:/S
规则:应用程序规则->系統程序->%windir%\Explorer.EXE


2007-06-22 14:52:43    创建文件      操作:阻止
进程路径:D:\桌面\virus\img_16248\img_16248.scr
文件路径:C:\Documents and Settings\Hung  Jui Hung\Local Settings\Temp\edhb.bat
规则:所有程序规则->全局設置_可執行文件1_普通模式->%SystemDrive%\*.bat

1.他會在C:\Documents and Settings\Hung  Jui Hung\Local Settings\Temp\產生
   edhb.bat

imdino

Panda 2008 beta 自动拦截

Virus detected: Trj/Nabload.BNP           06/22/07 14:52:19       Deleted               Location: http://bbs.kafan.cn/attachment.php?aid=91046

1688388728

病毒: Trojan-Downloader.Win32.Agent.bur
文件: img_16248[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\VM1NGYS8
进程: GreenBrowser.exe

promised

taihuxian

Virus: Trojan-Downloader.Win32.Agent.bur

Virus found while downloading Web content.

Address: bbs.kafan.cn