crsss.exe感染网页的下载者及产物[MD5: 315A8C 2EEA51 45DAC0]

promised

C:\ABC\1\crsss.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\1\crsss.exe
C:\ABC\1\ht.exe
C:\ABC\1\ht.exe\FILE:0000
>>> Virus 'Mal/PWS-K' found in file C:\ABC\1\ht.exe\FILE:0000
>>> Virus 'Mal/Behav-152' found in file C:\ABC\1\ht.exe
>>> Virus 'Mal/Dropper-H' found in file C:\ABC\1\ht.exe
C:\ABC\1\InfoMs.sys
C:\ABC\1\InfoMs.sys\FILE:0000
>>> Virus 'Mal/PWS-K' found in file C:\ABC\1\InfoMs.sys\FILE:0000
>>> Virus 'Mal/Behav-152' found in file C:\ABC\1\InfoMs.sys
>>> Virus 'Mal/Dropper-H' found in file C:\ABC\1\InfoMs.sys
C:\ABC\1\InfoMs.tdm
>>> Virus 'Mal/Emogen-I' found in file C:\ABC\1\InfoMs.tdm
>>> Virus 'Mal/PWS-K' found in file C:\ABC\1\InfoMs.tdm

Graybird

Starting the file scan:

Begin scan in 'E:\样本.rar'
E:\样本.rar
  [0] Archive type: RAR
  --> InfoMs.tdm
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.vzw Backdoor server programs
  --> crsss.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> ht.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.vzw Backdoor server programs
      [INFO]      The file was deleted!

zwl2828

C:\Users\Wesley\Desktop\样本.rar » RAR » InfoMs.tdm - probably a variant of Win32/Spy.Delf.PG trojan
C:\Users\Wesley\Desktop\样本.rar » RAR » ht.exe - probably a variant of Win32/Spy.Delf.PG trojan

wangjay1980

deleted: Trojan program Trojan-PSW.Win32.Delf.ahq        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/InfoMs.tdm
deleted: Trojan program Trojan-Downloader.Win32.Delf.bny        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/crsss.exe//NSPack//PE-Crypt.Morf
deleted: Trojan program Trojan-PSW.Win32.Delf.ahq        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/ht.exe//PE_Patch.UPX//UPX

sam.to

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.bny        檔案: C:\Documents and Settings\kato9096\桌面\167826\crsss.exe//NSPack//PE-Crypt.Morf
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Delf.ahq        檔案: C:\Documents and Settings\kato9096\桌面\167826\ht.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Delf.ahq        檔案: C:\Documents and Settings\kato9096\桌面\167826\InfoMs.tdm

kis7杀清光

欠妳緈諨

啊弥陀佛

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\INFOMS.TDM
是木马程序!
已成功阻止其运行,是否要删除此文件?