中了mysetup.exe病毒，谁知道怎么办？

playinnet

用8.5i企业版的默认规则，从来没有中过毒。最近用同事的u盘，中了mysetup.exe病毒，无法清除。请高手指点。

疯虫

  
这年头...autorun.inf 都不禁.. 咖啡白用了..
PS:至于如何解决此病毒. 百度下.

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\MySetup.rar'
F:\病毒样本\MySetup.rar
  [0] Archive type: RAR
  --> MySetup.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!

yashoo

我晕楼上的，扫完样本就走人了

自由

发到样本区,很多人会帮你的.闪人
已检测到: 木马程序 Trojan-Downloader.Win32.Delf.bnx        URL: http://bbs.kafan.cn/attachment.php?aid=103902/MySetup.exe/FSG

[ 本帖最后由 自由 于 2007-7-22 23:00 编辑 ]

promised

2007-07-22 22:59:38        创建文件
操作:阻止
进程路径:C:\ABC\MySetup\MySetup.exe
文件路径:C:\windows\system32\SoftDLL.dll
2007-07-22 22:59:38        创建文件
操作:阻止
进程路径:C:\ABC\MySetup\MySetup.exe
文件路径:C:\ABC\MySetup\DeleteFileDos.bat
2007-07-22 22:59:38        修改注册表内容
操作:阻止
进程路径:C:\ABC\MySetup\MySetup.exe
注册表路径:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
注册表名称:{A781A1EC-975E-4718-AF5E-A3F552D55C41}
2007-07-22 22:59:38        创建文件
操作:阻止
进程路径:C:\ABC\MySetup\MySetup.exe
文件路径:C:\windows\system32\MySetup.exe
2007-07-22 22:59:38        创建文件
操作:阻止
进程路径:C:\ABC\MySetup\MySetup.exe
文件路径:C:\windows\system32\MySetup.exe
2007-07-22 22:59:38        创建文件
操作:阻止
进程路径:C:\ABC\MySetup\MySetup.exe
文件路径:C:\windows\system32\MySetup.exe

The EQs

[:27:] [:27:] [:27:]
Scan performed at: 2007-7-22 23:01:20
Scanning Log
NOD32 version 2411 (20070721) NT
Command line: C:\Documents and Settings\EQ2\桌面\MySetup.rar
Operating memory - is OK

Date: 22.7.2007  Time: 23:01:27
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\MySetup.rar
C:\Documents and Settings\EQ2\桌面\MySetup.rar ?RAR ?MySetup.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 23:01:27 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

playinnet

晕。这些家伙一个个扫完了就闪，太不厚道了。后来我下载了dr.web绿色版的在安全模式下杀毒，把一个dll闪了(名字记不清了），再用winara把setup.exe全部删除。重启，好了。