下载时遇到的

remind_me

hxxp://www.lanf.net/down/downinfo/15.html

看看还有没有别的～～

Exported events:
2007-11-3 12:14 [Guard] Malware found
      Virus or unwanted program 'HEUR/Exploit.HTML [HEUR/Exploit.HTML]'
      detected in file 'F:\Temporary Internet Files\Content.IE5\YEQFOTWV\ee4[1].htm.
      Action performed: Deny access


Exported events:
2007-11-3 12:12 [Guard] Malware found
      Virus or unwanted program 'EXP/Ani.Gen [EXP/Ani.Gen]'
      detected in file 'F:\Temporary Internet Files\Content.IE5\ENYDH6YE\ah[1].c.
      Action performed: Delete file

查杀临时文件夹：Dldr 是downloader 的意思吧？

Begin scan in 'F:\Temporary Internet Files'
F:\Temporary Internet Files\Content.IE5\ENYDH6YE\du7[1].htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.FakeBaidu
      [INFO]      The file was deleted!
F:\Temporary Internet Files\Content.IE5\ENYDH6YE\ee2[1].htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Jopen
      [INFO]      The file was deleted!
F:\Temporary Internet Files\Content.IE5\ENYDH6YE\index[2].htm
      [DETECTION] Contains detection pattern of the VBS script virus VBS/Dldr.Agent.uis
      [INFO]      The file was deleted!
F:\Temporary Internet Files\Content.IE5\ENYDH6YE\webxl[1].js
      [DETECTION] Contains detection pattern of the exploits EXP/Thunder.3
      [INFO]      The file was deleted!
F:\Temporary Internet Files\Content.IE5\LHQL91QG\ki[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Agen.E.32
      [INFO]      The file was deleted!
F:\Temporary Internet Files\Content.IE5\LHQL91QG\s999[1].js
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Agent.SG
      [INFO]      The file was deleted!
F:\Temporary Internet Files\Content.IE5\YEQFOTWV\ee2[1].htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Jopen
      [INFO]      The file was deleted!
F:\Temporary Internet Files\Content.IE5\YEQFOTWV\index[2].htm
      [DETECTION] Contains detection pattern of the VBS script virus VBS/Dldr.Agent.uis
      [INFO]      The file was deleted!

[ 本帖最后由 remind_me 于 2007-11-3 12:20 编辑 ]

promised

以前就处理过
-->
http://abc.djxcn.com/abc/svcos.exe
http://268ip.com/down2.exe
http://268ip.com/down1.exe
http://268ip.com/Baidu1.cab

啊弥陀佛

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SVCOS.EXE
病毒程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\KK.DLL
是否删除木马程序及其衍生物?
木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DOWN1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\BAIDU1\BAIDU.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

微点砍掉