[凝逸反毒]继续19个新马

显示全部楼层 · 发表于 2007-8-19 22:40:19

[凝逸.扫描记录]
MD5[86EF49 9B240B 334652 874EEF D72201 9BB4B4 51A502 4BDFE3 9969CB BB6C23 274827 9944C1 9E8EEA F16594 9D184D AFD989 510C9A 37D50D 77AA4D 86ef49 9b240b 334652 874eef d72201 9bb4b4 51a502 4bdfe3 9969cb bb6c23 274827 9944c1 9e8eea f16594 9d184d afd989 510c9a 37d50d 77aa4d ]
f:\070815\剪切文件2\86EF49_1[2].exe,木马
f:\070815\剪切文件2\9B240B_1[4].exe,木马
f:\070815\剪切文件2\334652_mm[2].exe,木马
f:\070815\剪切文件2\874EEF_(1)vip[1].exe,木马
f:\070815\剪切文件2\D72201_(1)mm[2].exe,木马
f:\070815\剪切文件2\9BB4B4_(2)1[1].exe,木马
f:\070815\剪切文件2\51A502_avp[1].exe,木马
f:\070815\剪切文件2\4BDFE3_0[1].exe,木马
f:\070815\剪切文件2\9969CB_20070616admin2[1].exe,木马
f:\070815\剪切文件2\BB6C23_(2)mm[2].exe,木马
f:\070815\剪切文件2\274827_mm[3].exe,木马
f:\070815\剪切文件2\9944C1_(2)1[2].exe,木马
f:\070815\剪切文件2\9E8EEA_a[1].exe,木马
f:\070815\剪切文件2\F16594_s168[1].exe,木马
f:\070815\剪切文件2\9D184D_bd[1].exe,木马
f:\070815\剪切文件2\AFD989_system.dll,木马
f:\070815\剪切文件2\510C9A_msdeg32.dll,木马
f:\070815\剪切文件2\37D50D_wr-1-633.exe~,木马
f:\070815\剪切文件2\77AA4D_lyloader.exe,木马
f:\070815\剪切文件2\86ef49_1[2].exe,木马
f:\070815\剪切文件2\9b240b_1[4].exe,木马
f:\070815\剪切文件2\334652_mm[2].exe,木马
f:\070815\剪切文件2\874eef_(1)vip[1].exe,木马
f:\070815\剪切文件2\d72201_(1)mm[2].exe,木马
f:\070815\剪切文件2\9bb4b4_(2)1[1].exe,木马
f:\070815\剪切文件2\51a502_avp[1].exe,木马
f:\070815\剪切文件2\4bdfe3_0[1].exe,木马
f:\070815\剪切文件2\9969cb_20070616admin2[1].exe,木马
f:\070815\剪切文件2\bb6c23_(2)mm[2].exe,木马
f:\070815\剪切文件2\274827_mm[3].exe,木马
f:\070815\剪切文件2\9944c1_(2)1[2].exe,木马
f:\070815\剪切文件2\9e8eea_a[1].exe,木马
f:\070815\剪切文件2\f16594_s168[1].exe,木马
f:\070815\剪切文件2\9d184d_bd[1].exe,木马
f:\070815\剪切文件2\afd989_system.dll,木马
f:\070815\剪切文件2\510c9a_msdeg32.dll,木马
f:\070815\剪切文件2\37d50d_wr-1-633.exe~,木马
f:\070815\剪切文件2\77aa4d_lyloader.exe,木马
感染:0/文件:38
扫描完成|文件:38|耗时:1081

----------
[凝逸反毒] (http://hi.baidu.com/503165656)
[凝逸.扫描病毒引擎-日志] 2007.8.19 22:38:51

[凝逸反毒] [病毒库列表]
病毒总数=18328
20070726_dw0001.axx | 病毒数:12691
20070726_kv0001.axx | 病毒数:1115
20070729_ny0001.axx | 病毒数:1319
20070801_ny0002.axx | 病毒数:302
20070802_ny0003.axx | 病毒数:384
20070802_ny0004.axx | 病毒数:196
20070811_ny0005.axx | 病毒数:469
20070816_ny0006.axx | 病毒数:1233
20070816_ny0007.axx | 病毒数:49
20070819_ny0008.axx | 病毒数:570
初始化成功

文件:F:\070815\剪切文件2\86EF49_1[2].exe | 感染:virus [459>20070819_ny0008.axx]3(2.3)
操作:删除文件
文件:F:\070815\剪切文件2\9B240B_1[4].exe | 感染:virus [463>20070819_ny0008.axx]3(1.1)
操作:删除文件
文件:F:\070815\剪切文件2\334652_mm[2].exe | 感染:Win32.HLLW.Wace [101>20070819_ny0008.axx]3(4.6)
操作:删除文件
文件:F:\070815\剪切文件2\874EEF_(1)vip[1].exe | 感染:BINARYRES [104>20070819_ny0008.axx]3(2.2)
操作:删除文件
文件:F:\070815\剪切文件2\D72201_(1)mm[2].exe | 感染:Win32.HLLW.Wace [105>20070819_ny0008.axx]3(5.6)
操作:删除文件
文件:F:\070815\剪切文件2\9BB4B4_(2)1[1].exe | 感染:virus [466>20070819_ny0008.axx]3(1.1)
操作:删除文件
文件:F:\070815\剪切文件2\51A502_avp[1].exe | 感染:virus [468>20070819_ny0008.axx]3(1.1)
操作:删除文件
文件:F:\070815\剪切文件2\4BDFE3_0[1].exe | 感染:Win32.HLLW.Autoruner.295 [106>20070819_ny0008.axx]3(5.5)
操作:删除文件
文件:F:\070815\剪切文件2\9969CB_20070616admin2[1].exe | 感染:Trojan.PWS.Gamania.3422 [107>20070819_ny0008.axx]3(1.1)
操作:删除文件
文件:F:\070815\剪切文件2\BB6C23_(2)mm[2].exe | 感染:Win32.HLLW.Wace [108>20070819_ny0008.axx]3(6.6)
操作:删除文件
文件:F:\070815\剪切文件2\274827_mm[3].exe | 感染:Win32.HLLW.Wace.8 [109>20070819_ny0008.axx]3(2.2)
操作:删除文件
文件:F:\070815\剪切文件2\9944C1_(2)1[2].exe | 感染:virus [470>20070819_ny0008.axx]3(1.1)
操作:删除文件
文件:F:\070815\剪切文件2\9E8EEA_a[1].exe | 感染:virus [471>20070819_ny0008.axx]3(4.4)
操作:删除文件
文件:F:\070815\剪切文件2\F16594_s168[1].exe | 感染:Win32.HLLW.Autoruner.175 [111>20070819_ny0008.axx]3(1.1)
操作:删除文件
文件:F:\070815\剪切文件2\9D184D_bd[1].exe | 感染:virus [472>20070819_ny0008.axx]3(3.3)
操作:删除文件
文件:F:\070815\剪切文件2\AFD989_system.dll | 感染:virus [473>20070819_ny0008.axx]2(1.1)
操作:删除文件
文件:F:\070815\剪切文件2\510C9A_msdeg32.dll | 感染:Trojan.Goner.65 [112>20070819_ny0008.axx]2(1.1)
操作:删除文件
文件:F:\070815\剪切文件2\37D50D_wr-1-633.exe~ | 感染:Trojan.DownLoader.26881 [113>20070819_ny0008.axx]2(9.9)
操作:删除文件
文件:F:\070815\剪切文件2\77AA4D_lyloader.exe | 感染:Trojan.Inject.364 [115>20070819_ny0008.axx]3(1.1)
操作:删除文件
扫描完成|病毒:19 文件:21|耗时:4476
----------

显示全部楼层 · 发表于 2007-8-19 22:44:37

AVK杀18

显示全部楼层 · 发表于 2007-8-19 22:53:29

突然回潮..

Scan performed at: 2007-8-19 22:49:11
Scanning Log
NOD32 version 2469 (20070818) NT
Command line: F:\剪切文件1.rar F:\剪切文件2.rar
Operating memory - is OK

Date: 19.8.2007 Time: 22:49:13
Anti-Stealth technology is enabled.
Scanned disks, folders and files: F:\剪切文件1.rar; F:\剪切文件2.rar
F:\剪切文件1.rar ?RAR ?51A502_avp[1].exe - Win32/Virut.NAK virus - was a part of the deleted object
F:\剪切文件1.rar ?RAR ?77AA4D_lyloader.exe - a variant of Win32/PSW.Agent.NEC trojan
F:\剪切文件1.rar ?RAR ?874EEF_(1)vip[1].exe - probably a variant of Win32/Genetik trojan
F:\剪切文件1.rar ?RAR ?334652_mm[2].exe - Win32/Drowor.NAC virus - was a part of the deleted object
F:\剪切文件1.rar ?RAR ?37D50D_wr-1-633.exe~ - Win32/TrojanDownloader.Small.EQN trojan
F:\剪切文件2.rar ?RAR ?9969CB_20070616admin2[1].exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
F:\剪切文件2.rar ?RAR ?9E8EEA_a[1].exe ?UPX v12_m2 - unpack error
F:\剪切文件2.rar ?RAR ?BB6C23_(2)mm[2].exe - Win32/Drowor.NAC virus
F:\剪切文件2.rar ?RAR ?D72201_(1)mm[2].exe - Win32/Drowor.NAC virus
F:\剪切文件2.rar ?RAR ?F16594_s168[1].exe - a variant of Win32/PSW.OnLineGames.NBR trojan
Number of scanned files: 21
Number of threats found: 9
Number of files cleaned: 2
Time of completion: 22:49:17 Total scanning time: 4 sec (00:00:04)

显示全部楼层 · 发表于 2007-8-19 22:54:04

显示全部楼层 · 发表于 2007-8-19 22:54:32

Start of the scan: 2007年8月19日  22:53

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\剪切文件1.rar
  [0] Archive type: RAR
  --> 510C9A_msdeg32.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
  --> 51A502_avp[1].exe
   [DETECTION] Contains code of the Windows virus W32/Virut.P
  --> 77AA4D_lyloader.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.1
  --> 86EF49_1[2].exe
   [DETECTION] Is the Trojan horse TR/Dldr.Age.13946.A
  --> 874EEF_(1)vip[1].exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
  --> 274827_mm[3].exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> 334652_mm[2].exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> 37D50D_wr-1-633.exe~
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    The file was deleted!
H:\AV-TEST\剪切文件2.rar
  [0] Archive type: RAR
  --> 9969CB_20070616admin2[1].exe
   [DETECTION] Is the Trojan horse TR/Agent.7551
  --> 9B240B_1[4].exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> 9BB4B4_(2)1[1].exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> 9D184D_bd[1].exe
   [DETECTION] Is the Trojan horse TR/Dldr.Age.13946.A
  --> BB6C23_(2)mm[2].exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> D72201_(1)mm[2].exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> F16594_s168[1].exe
   [DETECTION] Is the Trojan horse TR/Autorun.BK
  --> 9944C1_(2)1[2].exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
   [INFO]    The file was deleted!

End of the scan: 2007年8月19日  22:54
Used time: 00:20 min

The scan has been done completely.

   1 Scanning directories
   21 Files were scanned
   16 viruses and/or unwanted programs were found
   0 classified as suspicious:
   2 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   5 Files not concerned
   2 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-8-19 23:04:31

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.04
nvcbin.def revision 5.90.00 of 2007/08/17 08:03:55 (830940 variants)
nvcmacro.def revision 5.90.00 of 2007/08/06 19:46:49 (20358 variants)
Total number of variants: 851298
Command line: "@C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~OD32.tmp"
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning files in the directory: F:\v\
      0 ms F:\v\274827_mm[3].exe                                     Security Risk W32/Suspicious_U.gen ()
      0 ms F:\v\274827_mm[3].exe:Zone.Identifier
      0 ms F:\v\334652_mm[2].exe                                     Security Risk W32/Suspicious_U.gen ()
      0 ms F:\v\334652_mm[2].exe:Zone.Identifier
   15 ms F:\v\37D50D_wr-1-633.exe~                                  Trojan W32/DLoader.DBBL ()
      0 ms F:\v\37D50D_wr-1-633.exe~:Zone.Identifier
      0 ms F:\v\4BDFE3_0[1].exe                                        Trojan W32/Delf.AKKV ()
      0 ms F:\v\4BDFE3_0[1].exe:Zone.Identifier
   16 ms F:\v\510C9A_msdeg32.dll                                     Security Risk W32/Suspicious_U.gen ()
      0 ms F:\v\510C9A_msdeg32.dll:Zone.Identifier
   219 ms F:\v\51A502_avp[1].exe
   15 ms F:\v\51A502_avp[1].exe:Zone.Identifier
      0 ms F:\v\77AA4D_lyloader.exe                                  Security Risk W32/Suspicious_U.gen ()
      0 ms F:\v\77AA4D_lyloader.exe:Zone.Identifier
      0 ms F:\v\86EF49_1[2].exe                                        Security Risk W32/Suspicious_U.gen ()
      0 ms F:\v\86EF49_1[2].exe:Zone.Identifier
   16 ms F:\v\874EEF_(1)vip[1].exe                                  Trojan W32/Malware.AEKX ()
      0 ms F:\v\874EEF_(1)vip[1].exe:Zone.Identifier
      0 ms F:\v\9944C1_(2)1[2].exe                                     Security Risk W32/Suspicious_U.gen ()
      0 ms F:\v\9944C1_(2)1[2].exe:Zone.Identifier
      0 ms F:\v\9969CB_20070616admin2[1].exe                         Security Risk W32/Suspicious_U.gen ()
      0 ms F:\v\9969CB_20070616admin2[1].exe:Zone.Identifier
      0 ms F:\v\9B240B_1[4].exe                                        Security Risk W32/Suspicious_U.gen ()
   16 ms F:\v\9B240B_1[4].exe:Zone.Identifier
      0 ms F:\v\9BB4B4_(2)1[1].exe                                     Security Risk W32/Suspicious_U.gen ()
      0 ms F:\v\9BB4B4_(2)1[1].exe:Zone.Identifier
      0 ms F:\v\9D184D_bd[1].exe                                     Security Risk W32/Suspicious_U.gen ()
      0 ms F:\v\9D184D_bd[1].exe:Zone.Identifier
   141 ms F:\v\9E8EEA_a[1].exe
      0 ms F:\v\9E8EEA_a[1].exe:Zone.Identifier
      0 ms F:\v\AFD989_system.dll
      0 ms F:\v\AFD989_system.dll:Zone.Identifier
      0 ms F:\v\BB6C23_(2)mm[2].exe                                  Security Risk W32/Suspicious_U.gen ()
      0 ms F:\v\BB6C23_(2)mm[2].exe:Zone.Identifier
      0 ms F:\v\D72201_(1)mm[2].exe                                  Security Risk W32/Suspicious_U.gen ()
      0 ms F:\v\D72201_(1)mm[2].exe:Zone.Identifier
   219 ms F:\v\F16594_s168[1].exe
      0 ms F:\v\F16594_s168[1].exe:Zone.Identifier
- File F:\v\274827_mm[3].exe quarantined.
- File F:\v\274827_mm[3].exe deleted.
- File F:\v\334652_mm[2].exe quarantined.
- File F:\v\334652_mm[2].exe deleted.
- File F:\v\37D50D_wr-1-633.exe~ quarantined.
- File F:\v\37D50D_wr-1-633.exe~ deleted.
- File F:\v\4BDFE3_0[1].exe quarantined.
- File F:\v\4BDFE3_0[1].exe deleted.
- File F:\v\510C9A_msdeg32.dll quarantined.
- File F:\v\510C9A_msdeg32.dll deleted.
- File F:\v\77AA4D_lyloader.exe quarantined.
- File F:\v\77AA4D_lyloader.exe deleted.
- File F:\v\86EF49_1[2].exe quarantined.
- File F:\v\86EF49_1[2].exe deleted.
- File F:\v\874EEF_(1)vip[1].exe quarantined.
- File F:\v\874EEF_(1)vip[1].exe deleted.
- File F:\v\9944C1_(2)1[2].exe quarantined.
- File F:\v\9944C1_(2)1[2].exe deleted.
- File F:\v\9969CB_20070616admin2[1].exe quarantined.
- File F:\v\9969CB_20070616admin2[1].exe deleted.
- File F:\v\9B240B_1[4].exe quarantined.
- File F:\v\9B240B_1[4].exe deleted.
- File F:\v\9BB4B4_(2)1[1].exe quarantined.
- File F:\v\9BB4B4_(2)1[1].exe deleted.
- File F:\v\9D184D_bd[1].exe quarantined.
- File F:\v\9D184D_bd[1].exe deleted.
- File F:\v\BB6C23_(2)mm[2].exe quarantined.
- File F:\v\BB6C23_(2)mm[2].exe deleted.
- File F:\v\D72201_(1)mm[2].exe quarantined.
- File F:\v\D72201_(1)mm[2].exe deleted.

===================================================================================================

The scanning started: 2007/08/19 23:04:26
            ended: 2007/08/19 23:04:27
Logged on as       : Administrator
on hostname       : 2FF87FC2B9AB46F

Scanning results:
Total number of files found..............................:    38
Number of files scanned..................................:    38
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    15

Copyright (c) 1993-2005 Norman ASA.

显示全部楼层 · 发表于 2007-8-19 23:17:17

C:\Documents and Settings\uhthn\Desktop\11\4BDFE3_0[1].exe : is suspected of Embedded.Trojan-PSW.Win32.Delf.wh
C:\Documents and Settings\uhthn\Desktop\11\510C9A_msdeg32.dll : infected Trojan-PSW.Win32.OnLineGames.agb
C:\Documents and Settings\uhthn\Desktop\11\77AA4D_lyloader.exe : infected Trojan-PSW.Win32.OnLineGames.agb
C:\Documents and Settings\uhthn\Desktop\11\86EF49_1[2].exe : is suspected of Trojan-Spy.Delf.10 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\11\874EEF_(1)vip[1].exe : infected Virus.Win32.AutoRun.gp
C:\Documents and Settings\uhthn\Desktop\11\274827_mm[3].exe : is suspected of Trojan-Spy.Delf.10 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\11\334652_mm[2].exe : is suspected of Trojan-Spy.Delf.10 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\11\37D50D_wr-1-633.exe~ : infected Trojan-Downloader.Win32.Small.eqn
C:\Documents and Settings\uhthn\Desktop\11\9BB4B4_(2)1[1].exe : is suspected of Trojan-Spy.Delf.10 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\11\9D184D_bd[1].exe : is suspected of Trojan-Spy.Delf.10 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\11\9E8EEA_a[1].exe : infected MalwareScope.Trojan-PSW.Game.7
C:\Documents and Settings\uhthn\Desktop\11\BB6C23_(2)mm[2].exe : is suspected of Trojan-Spy.Delf.10 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\11\D72201_(1)mm[2].exe : is suspected of Trojan-Spy.Delf.10 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\11\F16594_s168[1].exe : is suspected of Trojan-PSW.Game.18 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\11\9944C1_(2)1[2].exe : is suspected of Trojan-Spy.Delf.10 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\11\9B240B_1[4].exe : is suspected of Trojan-Spy.Delf.10 (paranoid heuristics)

Directories    : 0    Files in archives:    Files on disks:
Archives:                - total    : 0    - total    : 19
- scanned       : 0    -  scanned : 0    - scanned    : 19
- contain viruses : 0    -  infected : 0    - infected : 5
- deleted       : 0    -  suspicious : 0    - suspicious  : 11

显示全部楼层 · 发表于 2007-8-19 23:19:34

毒霸总共15个

显示全部楼层 · 发表于 2007-8-19 23:50:28

卡巴7才5个？希望用卡巴的试试··

显示全部楼层 · 发表于 2007-8-19 23:51:10

剪切1
微点：
木马名称:Trojan.Win32.Genetik.blx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\874EEF_(1)VIP[1].EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.ind

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYMANGR.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\77AA4D_LYLOADER.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\LYLOADER.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\MSDEG32.DLL
3) C:\WINDOWS.0\SYSTEM32\MSDEG32.DLL
是否删除木马程序及其衍生物?
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\510C9A_MSDEG32.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\86EF49_1[2].EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM\INTERNAT.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\274827_MM[3].EXE
可疑程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM\INTERNAT.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\274827_MM[3].EXE.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\274827_MM[3].EXE
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\274827_MM[3].EXE.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\334652_MM[2].EXE
可疑程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM\INTERNAT.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\334652_MM[2].EXE.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\WINDOWS.0\SYSTEM\INTERNAT.EXE
是否删除木马程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\334652_MM[2].EXE
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\剪切文件1\334652_MM[2].EXE.BAT
是否删除可疑程序?

4BDFE3_0[1].exe 51A502_avp[1].exe不是有效的WIN32应用程序

[病毒样本] [凝逸反毒]继续19个新马

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源