排出新的一堆34个

promised

1

[ 本帖最后由 promised 于 2007-9-9 18:39 编辑 ]

残缺的唯美

Scan performed at: 2007-9-9 18:36:48
Scanning Log
NOD32 version 2515 (20070909) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\virus.rar

Date: 9.9.2007  Time: 18:36:50
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\virus.rar
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?0.exe - probably a variant of Win32/PSW.Delf.NHI trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?11.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?5.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?12.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?13.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?14.exe - Win32/Delf.NFD trojan - was a part of the deleted object
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?15.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?16.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?17.exe - a variant of Win32/PSW.OnLineGames.YA trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?18.exe - probably unknown NewHeur_PE virus [7]
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?19.exe - a variant of Win32/PSW.Legendmir.NEP trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?2.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?20.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?3.exe - probably unknown NewHeur_PE virus [7]
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?4.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?6.exe - probably a variant of Win32/AutoRun.Q worm
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?7.exe - probably unknown NewHeur_PE virus [7]
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?8.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?9.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?cs.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?dh.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?fy.exe - Win32/Delf.NFD trojan - was a part of the deleted object
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?jh.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?mh.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?mir.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?my.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?qj.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?qqhx.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?qst.exe - probably a variant of Win32/AutoRun.Q worm
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?tl.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?wd.exe - a variant of Win32/PSW.OnLineGames.YA trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?wow.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?zt.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
D:\Documents and Settings\EKINCHENG\桌面\virus.rar ?RAR ?zx.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 37
Number of threats found: 34
Number of files cleaned: 1
Time of completion: 18:37:00 Total scanning time: 10 sec (00:00:10)

Notes:
[7] File is probably infected with an unknown virus.

沸沸

瑞星扫描出17个

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.Agent.vcd
病毒： Trojan.PSW.Win32.OnlineGames.yjt
病毒： Trojan.PSW.Win32.OnlineGames.ykl
病毒： Trojan.PSW.Win32.OnlineGames.yhi
病毒： Trojan.PSW.Win32.LMir.yeu
病毒： Trojan.PSW.Win32.TLOnline.at
病毒： Trojan.PSW.Win32.OnlineGames.yie
病毒： Trojan.PSW.Win32.OnlineGames.yii
病毒： Trojan.Mnless.lpi        
病毒： Trojan.PSW.Win32.XYOnline.ho
病毒： Trojan.PSW.Win32.LMir.yet
病毒： Trojan.PSW.Win32.OnlineGames.yjv
病毒： Trojan.PSW.Win32.QQPass.trc
病毒： Trojan.PSW.Win32.OnlineGames.yji
病毒： Trojan.PSW.Win32.WoWar.wo

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.39.62

goodchipmka

NOD全秒。 。。 。

浪滔天

卡巴 7.0.0.125 高启发  
26个  （剩下的有6个启发扫描时卡住，这个问题啥时候能解决啊。。。。 ）

已隔离: 病毒 Heur.StartPage (变种)        文件: D:\virus\virus\1.exe//PEPatch
已隔离: 病毒 Heur.Trojan.Generic (变种)        文件: D:\virus\virus\8.exe//PE_Patch//UPack
已隔离: 病毒 Heur.Trojan.Generic (变种)        文件: D:\virus\virus\20.exe//PE_Patch//UPack
已删除: 病毒 Virus.Win32.AutoRun.kz        文件: D:\virus\virus\qst.exe//UPX
已删除: 病毒 Worm.Win32.QQPass.a        文件: D:\virus\virus\0.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Backdoor.Win32.Delf.awy        文件: D:\virus\virus\fy.exe
已删除: 木马程序 Backdoor.Win32.Delf.awy        文件: D:\virus\virus\14.exe
已删除: 木马程序 Trojan-Dropper.Win32.Killav.e        文件: D:\virus\virus\wd.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.Agent.po        文件: D:\virus\virus\7.exe//UPX
已删除: 木马程序 Trojan-PSW.Win32.Delf.aaw        文件: D:\virus\virus\wow.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.Lmir.blo        文件: D:\virus\virus\mir.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bos        文件: D:\virus\virus\3.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bwr        文件: D:\virus\virus\17.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cdb        文件: D:\virus\virus\tl.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cdb        文件: D:\virus\virus\5.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cdm        文件: D:\virus\virus\qqhx.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cdp        文件: D:\virus\virus\13.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cea        文件: D:\virus\virus\19.exe//ASPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cew        文件: D:\virus\virus\zx.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cew        文件: D:\virus\virus\11.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cey        文件: D:\virus\virus\jh.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cey        文件: D:\virus\virus\qj.exe//UPack
已删除: 木马程序 Trojan-Spy.Win32.Delf.acg        文件: D:\virus\virus\zt.exe//UPack
已删除: 木马程序 Trojan-Spy.Win32.Delf.agk        文件: D:\virus\virus\9.exe//UPack
已删除: 木马程序 Trojan-Spy.Win32.Delf.agv        文件: D:\virus\virus\cs.exe//UPack//#
已删除: 木马程序 Trojan-Spy.Win32.Delf.agw        文件: D:\virus\virus\15.exe//UPack

aziok

Starting the file scan:

Begin scan in  桌面\virus.rar
  [0] Archive type: RAR
  --> virus\0.exe
      [DETECTION] Contains detection pattern of the worm WORM/QQPass.A
  --> virus\1.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> virus\11.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\13.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdp.2
  --> virus\14.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> virus\15.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\16.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.boy
  --> virus\18.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\19.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> virus\2.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\20.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> virus\4.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdb
  --> virus\6.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> virus\7.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.PO.2
  --> virus\8.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\9.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.agk
  --> virus\cs.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\dh.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\fy.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> virus\jh.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\mh.exe
      [DETECTION] Is the Trojan horse TR/Agent.12853
  --> virus\mir.exe
      [DETECTION] Is the Trojan horse TR/PSW.Lmir.blo
  --> virus\my.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\qj.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\qqhx.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4216
  --> virus\qst.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> virus\tl.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdb
  --> virus\wd.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> virus\wow.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.aaw
  --> virus\zt.exe
      [DETECTION] Is the Trojan horse TR/Agent.13352
  --> virus\zx.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!


End of the scan: 2007年9月9日  19:07
Used time: 00:15 min

The scan has been done completely.

      0 Scanning directories
     36 Files were scanned
     19 viruses and/or unwanted programs were found
     15 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     17 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

aziok

14个HEUR/Malware 外加一个HEUR/Crypted

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3972
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\virus

C:\Documents and Settings\uhthn\Desktop\virus\0.exe - Infected with Win32.PDB-1148 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\1.exe - Suspicious of Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\virus\11.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\13.exe - Infected with PDB-1951 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\14.exe - Infected with Win32.PDB-900 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\15.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\16.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\17.exe - Infected with PDB-3952 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\18.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\19.exe - Infected with Win32.PDB-3519 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\2.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\20.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\3.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\4.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\5.exe - Infected with PDB-2530 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\6.exe - Suspicious of Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\virus\7.exe - Infected with PDB-1786 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\8.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\9.exe - Infected with PDB-693 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\cs.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\dh.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\fy.exe - Infected with Win32.PDB-3226 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\jh.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\mh.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\mir.exe - Infected with PDB-3740 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\my.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\qj.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\qqhx.exe - Infected with PDB-450 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\qst.exe - Suspicious of Win32.Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\virus\tl.exe - Infected with PDB-2897 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\wd.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\virus\wow.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\zt.exe - Infected with PDB-1716 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\virus\zx.exe - Suspicious of Trojan-PSW.Game.3

34 Files scanned
13 Infected files found
21 Suspicious files found
0 Files cured
13 Files deleted

微点卫士

微点：
蠕虫名称:Worm.Win32.QQPass.o

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\0.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kdz

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\13.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.Delf.boc

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\14.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kha

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\17.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kkk

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\19.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kdl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\5.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Agent.erg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\7.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kjl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\8.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kda

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\QQHX.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kku

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\TL.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Spy.Win32.Delf.dwx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\ZT.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\1.EXE
修改注册表项:
HKCU\Software\Microsoft\Internet Explorer\Main\stArT paGe
是否阻止?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\2.EXE
1) C:\DFD18804625.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\2.EXE
1) C:\DFD18804625.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\3.EXE
是否删除木马程序及其衍生物?
木马名称:未知间谍软件

程序:
C:\WINDOWS.0\IFC222.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\6.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSWIN64.JMP
2) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\WINSYS64.SYS
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\9.EXE
1) C:\DFD18873859.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\9.EXE
1) C:\DFD18873859.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\11.EXE
1) C:\DFD18885968.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\11.EXE
1) C:\DFD18885968.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\15.EXE
1) C:\DFD18899421.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\15.EXE
1) C:\DFD18899421.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\16.EXE
1) C:\DFD18911140.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\16.EXE
1) C:\DFD18911140.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\18.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\~SA76.TMP
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\20.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVZXMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVZXMON.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\CS.EXE
1) C:\DFD18941765.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\CS.EXE
1) C:\DFD18941765.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\DH.EXE
1) C:\DFD18952546.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\DH.EXE
1) C:\DFD18952546.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\JH.EXE
1) C:\DFD18966234.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\JH.EXE
1) C:\DFD18966234.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\MH.EXE
1) C:\DFD18976765.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\MH.EXE
1) C:\DFD18976765.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\MIR.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVCQMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVCQMON.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\MY.EXE
1) C:\DFD18994796.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\MY.EXE
1) C:\DFD18994796.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\WD.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\MSIMMS32.EXE
2) C:\WINDOWS.0\SYSTEM32\MSIMMS32.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\QJ.EXE
1) C:\DFD19014671.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\QJ.EXE
1) C:\DFD19014671.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\QST.EXE
由
E:\AUTORUN.INF
自启动运行!
并生成以下文件:
1) E:\AUTORUN.EXE
2) E:\AUTORUN.INF
以及可由此INF文件引导自启的文件:
E:\AUTORUN.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\WOW.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\DBHELP.DLL
2) C:\WINDOWS.0\WINRAR.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\ZX.EXE
1) C:\DFD19062890.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\ZX.EXE
1) C:\DFD19062890.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\FY.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\PACKET.DLL
2) C:\WINDOWS.0\SYSTEM32\WANPACKET.DLL
3) C:\WINDOWS.0\SYSTEM32\WPCAP.DLL
4) C:\WINDOWS.0\SYSTEM32\DRIVERS\SVCHOST.EXE
是否删除木马程序及其衍生物?


上报4，漏杀一个EXE的衍生物