某帖挖的[MD5: 4BEE5C 67049D DD2AAE]

wangfeng66

C:\��5.rar\svcos.exe - infected with Trojan.PWS.Gamania.5026
C:\��5.rar\user320.dll - infected with Trojan.DownLoader.34885
C:\��5.rar\use1.dll - infected with Trojan.DownLoader.34884

Archive contains 3 infected items

DRWEB 4.44   Kill 3

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

woai_jolin

2007-10-13 22:25:57        文件保护(创建文件)     操作:阻止
进程路径:G:\V\svcos.exe
文件路径:C:\WINDOWS\sysdn.ini
2007-10-13 22:25:57        文件保护(创建文件)     操作:阻止
进程路径:G:\V\svcos.exe
文件路径:C:\WINDOWS\sysdn.ini
2007-10-13 22:25:57        文件保护(创建文件)     操作:阻止
进程路径:G:\V\svcos.exe
文件路径:C:\program files\internet explorer\KVMonXP1.exe
2007-10-13 22:25:57        文件保护(创建文件)     操作:阻止
进程路径:G:\V\svcos.exe
文件路径:C:\program files\internet explorer\KVMonXP1.exe
2007-10-13 22:25:57        文件保护(创建文件)     操作:阻止
进程路径:G:\V\svcos.exe
文件路径:C:\program files\internet explorer\KVMonXP1.exe
2007-10-13 22:25:58        文件保护(创建文件)     操作:阻止
进程路径:G:\V\svcos.exe
文件路径:C:\WINDOWS\sysdn.ini
2007-10-13 22:25:58        文件保护(创建文件)     操作:阻止
进程路径:G:\V\svcos.exe
文件路径:C:\WINDOWS\sysdn.ini
2007-10-13 22:25:58        文件保护(创建文件)     操作:阻止
进程路径:G:\V\svcos.exe
文件路径:C:\program files\internet explorer\use1.dll
2007-10-13 22:25:58        文件保护(创建文件)     操作:阻止
进程路径:G:\V\svcos.exe
文件路径:C:\WINDOWS\sysdn.ini
2007-10-13 22:26:00        应用程序保护(运行应用程序)     操作:阻止
进程路径:G:\V\svcos.exe
文件路径:C:\WINDOWS\system32\rundll32.exe
命令行:"C:\program files\internet explorer\use1.dll" mymain
2007-10-13 22:26:01        文件保护(创建文件)     操作:阻止
进程路径:G:\V\svcos.exe
文件路径:C:\Delme.bat

woai_jolin

Scan Progress: Manual Scan
Items Scanned:                      3
Items Detected:                     1
Items Quarantined:               0
Scanning:                                 Completed


Click View Results to see the list of detected items. Click Finish to return to the main Scan pane.



                                                                                                                 View Results                   Finish


Scan Details

Total Detections:               1                               Registry Keys Scanned:    0
Processes Scanned:          0                               Registry Keys Detected:   0
Processes Detected:         0                               Cookies Scanned:              0
Files Scanned:                   3                               Cookies Detected:             0
Files Detected:                  1

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 516
Paranoia Database - 10427
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\svcos.exe - Suspected MalwareDetector:Generic.PSW.4
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\user320.dll - Suspected Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\use1.dll - OK

3 Files scanned
0 Infected files found
2 Suspected files found
0 Files cured
0 Files deleted