x3（avast全杀~）

左手

2009-02-13 22:16:37    运行应用程序      操作:阻止
进程路径:E:\virus\cstpz\avp.exe
文件路径:C:\WINDOWS\system32\verclsid.exe
命令行:/C {871C5380-42A0-1069-A2EA-08002B30309D} /I {000214E6-0000-0000-C000-000000000046} /X 0x401
触发规则:所有程序规则->禁止运行的高危程序（黑名单）->%windir%\system32\*


2009-02-13 22:16:37    修改注册表内容      操作:阻止
进程路径:E:\virus\cstpz\avp.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
注册表名称:Cookies
触发规则:所有程序规则->IE浏览器设置保护（黑名单）增强，多谢zhia->*\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders


2009-02-13 22:17:05    修改文件      操作:阻止并结束进程
进程路径:E:\virus\cstpz\avp.exe
文件路径:C:\Program Files\Avira\AntiVir PersonalEdition Classic\avadmin.exe
触发规则:所有程序规则->有关文件创建修改组（含黑名单）->*\*.exe

淡青呀有

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://bbs.kafan.cn/attachment.p ... a9&t=1234534735
Information:         Is the TR/Crypt.CFI.Gen Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.79, VDF 7.1.2.24

一个大大的提示框..提前祝你情人节快乐.

kingmuro

wai0903

Starting the file scan:

Begin scan in 'C:\Users\lamfamily\Desktop\3.rar'
C:\Users\lamfamily\Desktop\3.rar
    [0] Archive type: RAR
    --> cstpz\Autorun.inf.exe
      [DETECTION] Is the TR/Crypt.CFI.Gen Trojan
    --> cstpz\avp.exe
      [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
    --> cstpz\cstpz.sys
      [DETECTION] Is the TR/Rootkit.Gen Trojan
    [NOTE]      The file was deleted!


End of the scan: 2009年2月13日  23:34
Used time: 00:13 Minute(s)

The scan has been done completely.

      0 Scanning directories
      4 Files were scanned
      3 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

江湖的fans

瑞星
Worm.Mail.Ghost.f
Win32.Downloader.ag
Rootkit.Win32.Mnless.apa 　

luxiao200888

1 TO  AVG