exe

Palkia

will

卡巴、伞MISS
1X/to/Avira
1X/to/KL

瓜皮猫

to eset

hansyu

Panda Cloud Antivirus 启发

留侯

大蜘蛛clean，已上报。

倾枫锝渔♂

毒霸kill

jayavira

idp kill

kkgh

金山拦截

mxf147

部分日志

011-09-22 16:03:40         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         修改文件, 可疑病毒         C:\Documents and Settings\Administrator\Application Data\services.exe 
2011-09-22 16:03:47         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         创建进程, 可疑病毒         C:\WINDOWS\system32\netsh.exe 
2011-09-22 16:03:48         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         修改注册表项         HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell 
2011-09-22 16:03:48         C:\Program Files\COMODO\COMODO Internet Security\cfplogvw.exe         拦截文件         C:\WINDOWS\system32\netsh.exe 
2011-09-22 16:03:53         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         创建进程, 可疑病毒         C:\Documents and Settings\Administrator\Application Data\services.exe 
2011-09-22 16:03:58         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         创建进程         C:\WINDOWS\system32\netsh.exe 
2011-09-22 16:03:58         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         修改文件, 可疑病毒         \Device\NamedPipe\wkssvc 
2011-09-22 16:04:07         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         创建进程         C:\Documents and Settings\Administrator\Application Data\services.exe 
2011-09-22 16:04:07         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         修改注册表项         HKUS\S-1-5-21-823518204-1202660629-1801674531-500\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Personal 
2011-09-22 16:04:07         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         修改文件         \Device\NamedPipe\lsarpc 
2011-09-22 16:04:07         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         修改注册表项         HKUS\S-1-5-21-823518204-1202660629-1801674531-500\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\C\BaseClass 
2011-09-22 16:04:07         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         创建进程         C:\Documents and Settings\Administrator\Application Data\services.exe 
2011-09-22 16:04:07         C:\Documents and Settings\Administrator\桌面\Test\374DF19E77467928F46145B9F50CA425.exe         修改注册表项         HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell 

rasis

360

2011-09-22 17:32:35     发现安全威胁     恶意程序(HEUR/Malware.QVM18.Gen)         已删除此文件，如果您发现误删，可从隔离区恢复此文件。     d:\download\374df19e77467928f46145b9f50ca425.exe