2个小东西[MD5: 9F6F5C 66CE22]

微点卫士

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\060501QQ\17QQ8_CORALQQ.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IPLUS2006.EXE
2) C:\WINDOWS.0\SYSTEM32\CHS.EXE
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\17QQ8_CORALQQ.EXE
是否删除木马程序及其衍生物?

另外个微点也杀，不过现在怎么没反应了

moonsilver

rs报了个标准鸽子

残缺的唯美

壳阿壳  nod32  pass

The EQs

又是加了壳的东东。。。。nod32 pass

红心王子

2007-10-4        9:18:33        1191460713        Administrator        2584        Sign of "Win32:MianCrypt-gen [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\样本[1].part1.rar\1.EXE" file.  
2007-10-4        9:18:43        1191460723        Administrator        2584        Sign of "Win32:Agent-CNB [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\样本[1].part1.rar\17QQ8_CORALQQ.EXE\[ASPack]" file.  
2007-10-4        9:18:46        1191460726        Administrator        2584        Sign of "Win32:Delf-AKC [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\样本[1].part1.rar\17QQ8_CORALQQ.EXE" file.

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\��'
C:\Users\morgan\Documents\��\
  1.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [INFO]      The file was deleted!
  17QQ8_CORALQQ.EXE

king6808

已删除：病毒 Packed.Win32.NSAnti.r        文件: F:\10.4\样本[1].rar/样本[1]\1.EXE
已删除：木马程序 Trojan.Win32.Agent.bnq        文件: F:\10.4\样本[1].rar/样本[1]\17QQ8_CORALQQ.EXE//ASPack

29159011

大蜘蛛总共报了一个