朋友的机器上杀出来 的

我爱舒畅

昨天在朋友的机器上KV08杀出来的,当时的病毒库是1月10号还不知是20号

1688388728

2008-05-06 19:19:15    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹\遗失的美好 海豚湾恋人.exe
文件路径:C:\WINDOWS\system32\Inet2.dll
触发规则:所有程序规则->文件规则->%systemdrive%\*.dll

wangjay1980

TO KL

Hello,

#gyr=h+#LT.exe_ - Trojan-PSW.Win32.OnLineGames.adpl

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.
[:1:]

[ 本帖最后由 wangjay1980 于 2008-5-6 23:01 编辑 ]

hellobaby

RS:0

qigang

RS20.43.12未杀！

28654621

运行了 自动退出

28654621

新建文件夹.rar      417.54/417.54KB     100.00%    在线扫描      它是一个“木马”   2008-5-6 20:02:39    2008-5-6 20:03:02

Kitman

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://bbs.kafan.cn/attachment.p ... de&t=1210075830
Information:         Contains detection pattern of the Windows virus W32/Almanahe.B

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.37, VDF 7.0.4.7

hahacomcn

Begin scan in 'C:\Documents and Settings\haha\桌面\新建文件夹.rar'
C:\Documents and Settings\haha\桌面\新建文件夹.rar
  [0] Archive type: RAR
发  --> ￐ￂﾽﾨￎￄﾼ?ﾼ￐\ￒￅￊﾧﾵￄￃ￀ﾺￃ ﾺﾣ￫￠ￍ￥￁ﾵ￈ￋ.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Almanahe.B
      [NOTE]      A backup was created as 'ada7ac38.qua'  ( QUARANTINE )

红心王子

程序:
C:\DOCUMENTS AND SETTINGS\\桌面\新建文件夹\新建文件夹\遗失的美好 海豚湾恋人.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\INET2.DLL
是否删除木马程序及其衍生物?