2

dearhaoji

http://facaizhifuok.cn/root/svcos.exe
http://zhichibjoy.cn/root/svcos.exe

syfwxmh

kaspersky kill all
trojan-tropper

Kitman

Avira
TR/Crypt.XDR.Gen X2

leonfg

火狐：
位于 facaizhifuok.cn 的站点已经被报告为攻击网站，而且已根据您的安全首选项而阻止。

ESET
2008-11-01 0:34:58        HTTP filter        file        http://zhichibjoy.cn/root/svcos.exe        probably a variant of Win32/Genetik trojan        connection terminated - quarantined        CHINESE-GUNDAM\GUNDAM        Threat was detected upon access to web by the application: C:\Program Files\Mozilla Firefox\firefox.exe.
2008-11-01 0:34:36        HTTP filter        file        http://facaizhifuok.cn/root/svcos.exe        probably a variant of Win32/Genetik trojan        connection terminated - quarantined        CHINESE-GUNDAM\GUNDAM        Threat was detected upon access to web by the application: C:\Program Files\Mozilla Firefox\firefox.exe.

黄金马甲出租

HB系列

C:\DOCUMENTS AND SETTINGS\TOM\桌面\SVCOS.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\TOM\LOCAL SETTINGS\TEMP\316640_EX.TMP
2) C:\DOCUMENTS AND SETTINGS\TOM\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\YPY38Z0H\0[1].EXE
3) C:\DOCUMENTS AND SETTINGS\TOM\LOCAL SETTINGS\TEMP\CHO1.TMP
4) C:\WINDOWS\SYSTEM32\HBMHLY.DLL
5) C:\WINDOWS\SYSTEM32\SYSTEM.EXE
是否删除木马程序及其衍生物?