4

tonger2003

Graybird

Starting the file scan:

Begin scan in 'E:\桌面.rar'
E:\桌面.rar
  [0] Archive type: RAR
  --> uu.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 20.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> most.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> text.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年11月19日  09:19
Used time: 00:24 min

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      4 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

wangjay1980

detected: virus Heur.Worm.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/uu.exe//FSG//PEPatch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ibd        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/20.exe//PE_Patch//UPack//#//UPack

let11

程序:
D:\20.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\VIDEODEVICE.DLL
是否删除木马程序及其衍生物?
程序:
D:\MOST.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\8AE45E59.EXE
2) C:\WINDOWS\SYSTEM32\3F069252.DLL
是否删除木马程序及其衍生物?
程序:
D:\TEXT.EXE
由
C:\AUTORUN.INF
自启动运行!
并生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NEWTEMP.BAK
2) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NEWTEMP.DLL
3) C:\PEGEFILE.PIF
4) D:\PEGEFILE.PIF
5) C:\AUTORUN.INF
以及可由此INF文件引导自启的文件:
C:\PEGEFILE.PIF

是否删除木马程序及其衍生物?
程序:
C:\WINDOWS\SYSTEM32\RXPMON.EXE
是可疑程序!
试图修改系统时间!
是否阻止该进程继续运行?

Love=卡巴+费尔

费尔text.exe未报。

wangjay1980

Hello,

20.exe_ - Trojan-PSW.Win32.OnLineGames.idj,
most.exe_ - Virus.Win32.AutoRun.aeb,
text.exe_ - Virus.Win32.AutoRun.adz,
uu.exe_ - Virus.Win32.AutoRun.aea

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

傻猪猪米走鸡

D:\firefox下载的文件\桌面.rar » RAR » uu.exe - a variant of Win32/AutoRun.K worm
D:\firefox下载的文件\桌面.rar » RAR » 20.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
D:\firefox下载的文件\桌面.rar » RAR » most.exe - a variant of Win32/TrojanDownloader.Flux trojan
D:\firefox下载的文件\桌面.rar » RAR » text.exe - probably a variant of Win32/PSW.Delf.NHI trojan

yclidong

小A未报

hookon_miriam

刚更新，小A抱了

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Win32.Agent.zcp     
病毒： Trojan.PSW.Win32.Agent.vpj

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.19.01