一大包新样本

显示全部楼层 · 发表于 2007-9-13 16:55:23

大家扫扫看

显示全部楼层 · 发表于 2007-9-13 17:02:29

杀剩下的全是dll和一个autorun.inf
Scan performed at: 2007-9-13 17:01:23
Scanning Log
NOD32 version 2527 (20070913) NT
Command line: C:\Documents and Settings\Don johnson\桌面\system32
Operating memory - is OK

Date: 13.9.2007 Time: 17:01:27
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\system32\
C:\Documents and Settings\Don johnson\桌面\system32\auto.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\system32\AVPSrv.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\cmdbcs.dll - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\system32\D5DF1AB.EXE - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\system32\DbgHlp32.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\E7E7B222.DLL - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\system32\gzcqej.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\jvibtp.dll - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\system32\k11895828808.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\k118958288411.exe - a variant of Win32/PSW.Legendmir.NEP trojan
C:\Documents and Settings\Don johnson\桌面\system32\k11895835606.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\k11895835617.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\k118958356611.exe - a variant of Win32/PSW.Legendmir.NEP trojan
C:\Documents and Settings\Don johnson\桌面\system32\k118958396511.exe - a variant of Win32/PSW.Legendmir.NEP trojan
C:\Documents and Settings\Don johnson\桌面\system32\k118958451811.exe - a variant of Win32/PSW.Legendmir.NEP trojan
C:\Documents and Settings\Don johnson\桌面\system32\k118958813111.exe - a variant of Win32/PSW.Legendmir.NEP trojan
C:\Documents and Settings\Don johnson\桌面\system32\k11896433726.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\k11896437816.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\k11896437827.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\k11896437838.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\kl.exe - a variant of Win32/Mypis virus
C:\Documents and Settings\Don johnson\桌面\system32\Kvsc3.dll - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\system32\Kvsc3.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\LYLOADER.EXE - a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Don johnson\桌面\system32\LYLOADMR.EXE - a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Don johnson\桌面\system32\mppds.dll - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\system32\mppds.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\system32\msccrt.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\mxytyd.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\she.dll - probably a variant of Win32/Obfuscated trojan
C:\Documents and Settings\Don johnson\桌面\system32\SHQMANGR.DLL - probably a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Don johnson\桌面\system32\sminev.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\system32\upxdnd.dll - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\system32\upxdnd.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
Number of scanned files: 47
Number of threats found: 34
Number of files cleaned: 34
Time of completion: 17:01:32 Total scanning time: 5 sec (00:00:05)

显示全部楼层 · 发表于 2007-9-13 17:06:31

MicroVita AntiSpyware 100 C
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\system32\k118958451811.exe]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\system32\k118958451811.exe]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\system32\k118958813111.exe]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\system32\k118958813111.exe]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\system32\LYLOADMR.EXE]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\system32\MSDEG32.DLL]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\system32\SHQMANGR.DLL]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\system32\kl.exe]
                  …………引擎[2]发现病毒:Win32.NkHack.BDX.A
[C:\Documents and Settings\Administrator\桌面\virus\system32\she.dll]
                  …………引擎[2]发现病毒:Win32.NkHack.BDX.A
[C:\Documents and Settings\Administrator\桌面\virus\system32\autorun.inf]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\system32\auto.exe]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\system32\LYLOADER.EXE]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\system32\LYMANGR.DLL]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\system32\D5DF1AB.EXE]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\system32\k118958288411.exe]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\system32\k118958288411.exe]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\system32\k118958356611.exe]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\system32\k118958356611.exe]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\system32\k118958396511.exe]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\system32\k118958396511.exe]
                  …………引擎[2]发现病毒:Win32.Unknow
文件数:47 病毒数:20  比重:0.4255319148936
OK  扫描完毕！
好几天没更新就成这样了

[ 本帖最后由 FBAV 于 2007-9-13 17:08 编辑 ]

显示全部楼层 · 发表于 2007-9-13 17:12:43

还剩5个dll

Starting the file scan:

Begin scan in 'E:\病毒\system32[1].part1'
E:\病毒\system32[1].part1\auto.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\AVPSrv.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cev
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\AVPSrv.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cev
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\cmdbcs.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '474cff69.qua'!
E:\病毒\system32[1].part1\D5DF1AB.EXE
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\DbgHlp32.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\DiskMan32.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\E7E7B222.DLL
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\gvxyyo.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Zlob.ciy.1
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\gzcqej.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\jvibtp.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '4751ff72.qua'!
E:\病毒\system32[1].part1\k11895828808.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\k118958288411.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\k11895835606.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cgk.3
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\k11895835617.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zlob.ciy.1
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\k118958356611.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\k118958396511.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\k118958451811.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\k118958813111.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\k11896433726.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cgk.3
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\k11896437816.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cgk.3
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\k11896437827.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zlob.ciy.1
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\k11896437838.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\kl.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\Kvsc3.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '475bff75.qua'!
E:\病毒\system32[1].part1\Kvsc3.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\LYLOADER.EXE
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\LYLOADMR.EXE
   [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\LYMANGR.DLL
   [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\mppds.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '4758ff6f.qua'!
E:\病毒\system32[1].part1\mppds.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\msccrt.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '474bff72.qua'!
E:\病毒\system32[1].part1\msccrt.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\MSDEG32.DLL
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\mxytyd.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zlob.ciy.1
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\NVDispDrv.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Zlob.ciy.1
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\she.dll
   [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\SHQ.DLL
   [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\sminev.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zlob.ciy.1
   [INFO]    The file was deleted!
E:\病毒\system32[1].part1\upxdnd.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '4760ff70.qua'!
E:\病毒\system32[1].part1\upxdnd.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年9月13日  17:12
Used time: 00:15 min

The scan has been done completely.

   1 Scanning directories
   47 Files were scanned
   35 viruses and/or unwanted programs were found
   6 Files were classified as suspicious:
   35 files were deleted
   0 files were repaired
   6 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   12 Files not concerned
   0 Archives were scanned
   0 Warnings
   0 Notes

[ 本帖最后由曲中求于 2007-9-13 17:14 编辑 ]

显示全部楼层 · 发表于 2007-9-13 17:38:31

用的静寂模式。
AVAST直接拦截

显示全部楼层 · 发表于 2007-9-13 17:38:58

----------
            [凝逸反毒] (http://hi.baidu.com/503165656)
   [凝逸.扫描病毒引擎-日志]    2007.9.13 13:11:35
文件:F:\病毒样本区\误杀了的\非病毒-Packet.dll | 感染:virus [21>20070912_ny0017.axx]3(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\2-npptools.dll | 感染:virus [22>20070912_ny0017.axx]3(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\争系统\2-npptools.dll | 感染:virus [22>20070912_ny0017.axx]3(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\争系统\1\rmoc3260.dll | 感染:virus [224>20070913_ny0018.axx]3(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\争系统\1\pncrt.dll | 感染:virus [221>20070913_ny0018.axx]3(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\争系统\1\pndx5032.dll | 感染:virus [223>20070913_ny0018.axx]2(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\争系统\误报0700817\pndx5032.dll | 感染:virus [223>20070913_ny0018.axx]2(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\争系统\误报0700817\pndx5016.dll | 感染:virus [222>20070913_ny0018.axx]2(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\误杀了的新建文件夹\2-npptools.dll | 感染:virus [22>20070912_ny0017.axx]3(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\误杀了的新建文件夹\非病毒-Packet.dll | 感染:virus [21>20070912_ny0017.axx]3(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\误杀了的新建文件夹\1\rmoc3260.dll | 感染:virus [224>20070913_ny0018.axx]3(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\误杀了的新建文件夹\1\pncrt.dll | 感染:virus [221>20070913_ny0018.axx]3(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\误杀了的新建文件夹\1\pndx5032.dll | 感染:virus [223>20070913_ny0018.axx]2(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\误杀了的新建文件夹\误报0700817\pndx5032.dll | 感染:virus [223>20070913_ny0018.axx]2(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\误杀了的新建文件夹\误报0700817\pndx5016.dll | 感染:virus [222>20070913_ny0018.axx]2(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\误报0700817\pndx5032.dll | 感染:virus [223>20070913_ny0018.axx]2(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\误报0700817\pndx5016.dll | 感染:virus [222>20070913_ny0018.axx]2(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\1\rmoc3260.dll | 感染:virus [224>20070913_ny0018.axx]3(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\1\pncrt.dll | 感染:virus [221>20070913_ny0018.axx]3(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\1\pndx5032.dll | 感染:virus [223>20070913_ny0018.axx]2(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\BaoFeng\$SYSDIR\pndx5016.dll | 感染:virus [222>20070913_ny0018.axx]2(1.1)
操作:报告
文件:F:\病毒样本区\误杀了的\BaoFeng\$SYSDIR\pndx5032.dll | 感染:virus [223>20070913_ny0018.axx]2(1.1)
操作:报告
扫描完成|病毒:22 文件:657|耗时:150126
----------

----------
            [凝逸反毒] (http://hi.baidu.com/503165656)
   [凝逸.扫描病毒引擎-日志]    2007.9.13 17:38:25
文件:F:\070914\system32[1]\k118958451811.exe | 感染:virus [384>20070911_ny0016.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\k118958813111.exe | 感染:virus [384>20070911_ny0016.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\NVDispDrv.dll | 感染:Trojan.Popuper [129>20070911_ny0016.axx]3(4.5)
操作:删除文件
文件:F:\070914\system32[1]\auto.exe | 感染:BINARYRES [185>20070911_ny0016.axx]3(1.2)
操作:删除文件
文件:F:\070914\system32[1]\LYLOADER.EXE | 感染:Trojan.PWS.Wsgame.1229 [2>20070913_ny0018.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\LYMANGR.DLL | 感染:virus [340>20070911_ny0016.axx]2(1.1)
操作:删除文件
文件:F:\070914\system32[1]\sminev.exe | 感染:Trojan.Popuper [141>20070910_ny0015.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\mxytyd.exe | 感染:Trojan.Popuper [141>20070910_ny0015.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\DbgHlp32.exe | 感染:Trojan.PWS.Gamania.3930 [139>20070910_ny0015.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\AVPSrv.exe | 感染:Trojan.PWS.Gamania.3870 [135>20070910_ny0015.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\upxdnd.exe | 感染:Trojan.PWS.Gamania.3992 [146>20070913_ny0018.axx]3(2.2)
操作:删除文件
文件:F:\070914\system32[1]\msccrt.exe | 感染:BINARYRES [142>20070913_ny0018.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\mppds.exe | 感染:Trojan.PWS.Gamania.3990 [145>20070913_ny0018.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\Kvsc3.exe | 感染:Trojan.PWS.Gamania.3989 [148>20070913_ny0018.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\gzcqej.exe | 感染:virus [51>20070912_ny0017.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\AVPSrv.dll | 感染:Trojan.PWS.Gamania.3870 [9>20070911_ny0016.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\D5DF1AB.EXE | 感染:BINARYRES [185>20070911_ny0016.axx]3(1.2)
操作:删除文件
文件:F:\070914\system32[1]\gvxyyo.dll | 感染:Trojan.Popuper [129>20070911_ny0016.axx]3(4.5)
操作:删除文件
文件:F:\070914\system32[1]\k11895828808.exe | 感染:Trojan.PWS.Lineage.3471 [162>20070913_ny0018.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\k11895835606.exe | 感染:Trojan.PWS.Lineage.3216 [137>20070910_ny0015.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\k11895835617.exe | 感染:Trojan.Popuper [141>20070910_ny0015.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\k11896433726.exe | 感染:Trojan.PWS.Lineage.3216 [137>20070910_ny0015.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\k11896437816.exe | 感染:Trojan.PWS.Lineage.3216 [137>20070910_ny0015.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\k11896437827.exe | 感染:Trojan.Popuper [141>20070910_ny0015.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\k11896437838.exe | 感染:Trojan.PWS.Lineage.3471 [162>20070913_ny0018.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\k118958288411.exe | 感染:virus [384>20070911_ny0016.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\k118958356611.exe | 感染:virus [384>20070911_ny0016.axx]3(1.1)
操作:删除文件
文件:F:\070914\system32[1]\k118958396511.exe | 感染:virus [384>20070911_ny0016.axx]3(1.1)
操作:删除文件
扫描完成|病毒:28 文件:47|耗时:14651
----------

显示全部楼层 · 发表于 2007-9-13 17:45:35

F:\system32[1].rar >>RAR >>system32[1]\k118958451811.exe - Win32/PSW.Legendmir.NEP 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\k118958813111.exe - Win32/PSW.Legendmir.NEP 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\Kvsc3.dll - 可能是 Win32/Genetik 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\LYLOADMR.EXE - Win32/PSW.Agent.NEC 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\mppds.dll - 可能是 Win32/Genetik 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\SHQMANGR.DLL - 可能是 Win32/PSW.Agent.NEC 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\upxdnd.dll - 可能是 Win32/Genetik 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\kl.exe - Win32/Mypis 病毒的变种
F:\system32[1].rar >>RAR >>system32[1]\she.dll - 可能是 Win32/Obfuscated 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\auto.exe - 可能是 Win32/Genetik 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\LYLOADER.EXE - Win32/PSW.Agent.NEC 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\sminev.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\mxytyd.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\DbgHlp32.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\AVPSrv.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\upxdnd.exe - 可能是 Win32/PSW.OnLineGames.YA 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\msccrt.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\mppds.exe - 可能是 Win32/Genetik 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\Kvsc3.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\gzcqej.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\cmdbcs.dll - 可能是 Win32/Genetik 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\D5DF1AB.EXE - 可能是 Win32/Genetik 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\E7E7B222.DLL - 可能是 Win32/Genetik 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\jvibtp.dll - 可能是 Win32/Genetik 木马的一个变种
F:\system32[1].rar >>RAR >>system32[1]\k11895828808.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\k11895835606.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\k11895835617.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\k11896433726.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\k11896437816.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\k11896437827.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\k11896437838.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\k118958288411.exe - Win32/PSW.Legendmir.NEP 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\k118958356611.exe - Win32/PSW.Legendmir.NEP 木马的变种
F:\system32[1].rar >>RAR >>system32[1]\k118958396511.exe - Win32/PSW.Legendmir.NEP 木马的变种

显示全部楼层 · 发表于 2007-9-13 17:54:52

已删除：病毒 Virus.Win32.AutoRun.ma 文件　: D:\病毒库\system32[1]\auto.exe//ASPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.cev 文件　: D:\病毒库\system32[1]\AVPSrv.dll
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.cev 文件　: D:\病毒库\system32[1]\AVPSrv.exe//PE_Patch.UPX//UPX
已删除：病毒 Virus.Win32.AutoRun.ma 文件　: D:\病毒库\system32[1]\D5DF1AB.EXE//ASPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.cer 文件　: D:\病毒库\system32[1]\DbgHlp32.exe//PE_Patch.UPX//UPX
已删除：病毒 Virus.Win32.AutoRun.ma 文件　: D:\病毒库\system32[1]\E7E7B222.DLL
已删除：木马程序 Trojan-Downloader.Win32.Zlob.ciy 文件　: D:\病毒库\system32[1]\gvxyyo.dll
已删除：病毒 Heur.Invader (修改) 文件　: D:\病毒库\system32[1]\gzcqej.exe//PE_Patch.UPX
已删除：病毒 Heur.Invader (修改) 文件　: D:\病毒库\system32[1]\k11895828808.exe//PE_Patch.UPX
已删除：木马程序 Trojan-PSW.Win32.Delf.abw 文件　: D:\病毒库\system32[1]\k118958288411.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.cgj 文件　: D:\病毒库\system32[1]\k11895835606.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-Dropper.Win32.Killav.f 文件　: D:\病毒库\system32[1]\k11895835617.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.Delf.abw 文件　: D:\病毒库\system32[1]\k118958356611.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.Delf.abw 文件　: D:\病毒库\system32[1]\k118958396511.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.Delf.abw 文件　: D:\病毒库\system32[1]\k118958451811.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.Delf.abw 文件　: D:\病毒库\system32[1]\k118958813111.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.cgj 文件　: D:\病毒库\system32[1]\k11896433726.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.cgj 文件　: D:\病毒库\system32[1]\k11896437816.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-Dropper.Win32.Killav.f 文件　: D:\病毒库\system32[1]\k11896437827.exe//PE_Patch.UPX//UPX
已删除：病毒 Heur.Invader (修改) 文件　: D:\病毒库\system32[1]\k11896437838.exe//PE_Patch.UPX
已删除：病毒 Virus.Win32.Delf.bh 文件　: D:\病毒库\system32[1]\kl.exe//NSPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.cpm 文件　: D:\病毒库\system32[1]\Kvsc3.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.cny 文件　: D:\病毒库\system32[1]\LYLOADER.EXE//PE_Patch//UPack
已删除：病毒 Heur.Invader (修改) 文件　: D:\病毒库\system32[1]\LYLOADMR.EXE//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.cny 文件　: D:\病毒库\system32[1]\LYMANGR.DLL//UPack
已删除：病毒 Heur.Invader (修改) 文件　: D:\病毒库\system32[1]\msccrt.exe//PE_Patch.UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.cny 文件　: D:\病毒库\system32[1]\MSDEG32.DLL//UPack
已删除：木马程序 Trojan-Dropper.Win32.Killav.f 文件　: D:\病毒库\system32[1]\mxytyd.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-Downloader.Win32.Zlob.ciy 文件　: D:\病毒库\system32[1]\NVDispDrv.dll
已删除：病毒 Virus.Win32.Delf.bh 文件　: D:\病毒库\system32[1]\she.dll
已删除：木马程序 Trojan-Dropper.Win32.Killav.f 文件　: D:\病毒库\system32[1]\sminev.exe//PE_Patch.UPX//UPX
已删除：病毒 Heur.Invader (修改) 文件　: D:\病毒库\system32[1]\upxdnd.exe

显示全部楼层 · 发表于 2007-9-13 18:13:26

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4699
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\k118958451811.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\k118958813111.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\Kvsc3.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\LYLOADMR.EXE - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\mppds.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\msccrt.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\MSDEG32.DLL - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\NVDispDrv.dll - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\pncrt.dll - Suspicious of MalwareSpy.Win32.Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\pndx5016.dll - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\pndx5032.dll - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\rmoc3260.dll - Suspicious of Trojan-Downloader.VB.1
C:\Documents and Settings\uhthn\Desktop\New Folder\SHQ.DLL - Suspicious of Trojan-Downloader.VB.1
C:\Documents and Settings\uhthn\Desktop\New Folder\SHQMANGR.DLL - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\upxdnd.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\kl.exe - Suspicious of MalwareSpy.Win32.Trojan-Downloader.Delf.1
C:\Documents and Settings\uhthn\Desktop\New Folder\she.dll - Suspicious of MalwareSpy.Trojan-Downloader.Delf.1
C:\Documents and Settings\uhthn\Desktop\New Folder\autorun.inf - Infected with PDB-871 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\auto.exe - Infected with PDB-d14 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\LYLOADER.EXE - Infected with PDB-db5 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\LYMANGR.DLL - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\sminev.exe - Infected with PDB-61d Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\mxytyd.exe - Infected with PDB-61d Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\DbgHlp32.exe - Infected with PDB-94c Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\AVPSrv.exe - Infected with PDB-b38 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\upxdnd.exe - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\msccrt.exe - Suspicious of Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder\mppds.exe - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Kvsc3.exe - Suspicious of Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder\gzcqej.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\AVPSrv.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\cmdbcs.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\D5DF1AB.EXE - Infected with PDB-d14 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\DiskMan32.dll - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\E7E7B222.DLL - Suspicious of Trojan.Autorun.1
C:\Documents and Settings\uhthn\Desktop\New Folder\gvxyyo.dll - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\jvibtp.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\k11895828808.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\k11895835606.exe - Infected with PDB-f6c Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\k11895835617.exe - Infected with PDB-61d Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\k11896433726.exe - Infected with PDB-f6c Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\k11896437816.exe - Infected with PDB-f6c Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\k11896437827.exe - Infected with PDB-61d Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\k11896437838.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\k118958288411.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\k118958356611.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\k118958396511.exe - Suspicious of Trojan-PSW.OnLineGames.2

47 Files scanned
13 Infected files found
33 Suspicious files found
0 Files cured
13 Files deleted

显示全部楼层 · 发表于 2007-9-13 19:59:25

微点：
木马名称:Trojan-PSW.Win32.Legendmir.zl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K118958451811.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Legendmir.zl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K118958813111.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Agent.erz

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\LYLOADMR.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.cfl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\AUTO.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kqw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\LYMANGR.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Dropper.Win32.Killav.c

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\SMINEV.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Dropper.Win32.Killav.c

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\MXYTYD.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kle

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\DBGHLP32.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kei

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\AVPSRV.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.lan

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\MSCCRT.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.cgi

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\MPPDS.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kyy

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\KVSC3.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?木马名称:Trojan-PSW.Win32.OnLineGames.kpt

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\GZCQEJ.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.cfl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\D5DF1AB.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.lag

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K11895828808.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kmf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K11895835606.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Dropper.Win32.Killav.c

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K11895835617.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGames.kmf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K11896433726.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kmf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K11896437816.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Dropper.Win32.Killav.c

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K11896437827.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.lag

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K11896437838.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Legendmir.zl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K118958288411.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Legendmir.zl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K118958356611.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Legendmir.zl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\K118958396511.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\KL.EXE
被修改文件:
G:\ATI\SUPPORT\WXP-W2K-CATALYST-8-10-050119A-020581C\ATICIMUN.EXE
是否阻止文件被修改?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\KL.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\SYSTEM\SHE.DLL
是否删除病毒程序及其衍生物?
木马名称:Trojan-PSW.Win32.OnLineGames.kqw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYMANGR.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\LYLOADER.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\LYLOADER.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYMANGR.DLL
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\MSDEG32.DLL
4) C:\WINDOWS.0\SYSTEM32\MSDEG32.DLL
5) C:\WINDOWS.0\SYSTEM32\LYLOADER.EXE
是否删除木马程序及其衍生物?
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\MSDEG32.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEM32[1]\UPXDND.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\UPXDND.EXE
2) C:\WINDOWS.0\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?

消灭光EXE了

[病毒样本] 一大包新样本

本帖子中包含更多资源

32