会删除系统文件kernel32.dll的东西[B1FE4F6]

啊弥陀佛

微点砍掉

SONGBOWEN

Begin scan in 'C:\Documents and Settings\Administrator\桌面\1019\1019.exe'
C:\Documents and Settings\Administrator\桌面\1019\1019.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
启发……

SONGBOWEN

检测到：广告程序 not-a-virus:AdWare.Win32.AdMoke.oj        文件: C:\Documents and Settings\Administrator\桌面\1019\1019.exe//PE_Patch//UPack
广告程序

SONGBOWEN

26:11:2007 13:16:10 SEARCHTASK "USER_DEFINED" started...
scan item: C:\Documents and Settings\Administrator\桌面\1019\1019.exe
File scanned: C:\Documents and Settings\Administrator\桌面\1019\1019.exe - SIGNATURE FOUND "Trojan-Spy.Win32.Agent.pn"
26:11:2007 13:16:11 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 0
Files scanned: 1
Virus found: 1
----------------------------------------------------
间谍软件

SONGBOWEN

小红伞的回复
The file '1019.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Onlinegames.101940. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.01.05. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.