中了清除比较烦的一个木马

显示全部楼层 · 发表于 2008-9-9 15:08:48

MS7号的卡巴2009没有查出，现在不知，

显示全部楼层 · 发表于 2008-9-9 15:17:24

To Kl

显示全部楼层 · 发表于 2008-9-9 15:18:13

--> afdyvnr.exe
[DETECTION] Is the TR/Downloader.Gen Trojan

显示全部楼层 · 发表于 2008-9-9 15:19:55

显示全部楼层 · 发表于 2008-9-9 15:28:44

金山0

显示全部楼层 · 发表于 2008-9-9 15:49:29

Begin scan in 'C:\auto.rar'
C:\auto.rar
[0] Archive type: RAR
--> afdyvnr.exe
   [DETECTION] Is the TR/Downloader.Gen Trojan
[NOTE]    The file was moved to '493a2ae0.qua'!

End of the scan: 2008年9月9日  15:48
Used time: 00:04 Minute(s)

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-9-9 15:57:12

木马名称:Trojan.Win32.Genetik.icm

程序:
D:\VIRUS\AUTO\AFDYVNR.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-9-9 16:00:50

NOD32: 可能是 Win32/Genetik 特洛伊木马的变种通过删除清除 - 已隔离
NT AUTHORITY\SYSTEM
在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2008-9-9 16:49:54

费尔 Trojan.Delf.efn.ooqk

显示全部楼层 · 发表于 2008-9-9 16:57:15

KO！

[病毒样本] 中了清除比较烦的一个木马