[MD5: 9FC5FA] 一个

红心王子

都来玩玩

wangjay1980

detected: virus Worm.Win32.Skipi.b        URL: http://bbs.kafan.cn/attachment.php?aid=126438/tayoty/tayoty.scr

Nblock

Trojan horse program generates files as below:
1) C:\WINDOWS\SYSTEM32\WNDRIVS32.EXE
2) C:\WINDOWS\SYSTEM32\MSHTMLDAT32.EXE
3) C:\WINDOWS\SYSTEM32\WINLGCVERS.EXE
Delete Trojan program and its ramification or not?

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\tayoty.zip'
C:\Documents and Settings\Administrator\My Documents\
  tayoty.zip
    [0] Archive type: ZIP
    --> tayoty/tayoty.scr
        [DETECTION] Contains detection pattern of the worm WORM/Skipi.B.1
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

残缺的唯美

Scan performed at: 2007-9-11 12:53:40
Scanning Log
NOD32 version 2520 (20070911) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\tayoty.zip

Date: 11.9.2007  Time: 12:53:41
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\tayoty.zip
D:\Documents and Settings\EKINCHENG\桌面\tayoty.zip ?ZIP ?tayoty/tayoty.scr - Win32/Persky.F worm - was a part of the deleted object
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 12:53:41 Total scanning time: 0 sec (00:00:00)

东京时空

taihuxian

Worm/Skipi.B.1

1688388728

检测到：病毒 Worm.Win32.Skipi.b        URL: http://bbs.kafan.cn/attachment.php?aid=126438/tayoty/tayoty.scr

king6808

F:\9.11\tayoty.zip >>ZIP >>tayoty/tayoty.scr - Win32/Persky.F 蠕虫

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4209
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\tayoty.scr

C:\Documents and Settings\uhthn\Desktop\tayoty.scr - Infected with PDB-a80 Malware program - Deleted

1 Files scanned
1 Infected files found
0 Suspicious files found
0 Files cured
1 Files deleted