8点再上报2x kaba heur的病毒样本！（4楼更新）

wrq

When accessing data from the URL, "http://bbs.kafan.cn/attachment.php?aid=478573&k=71822267755286e08b997b644ec7074c&t=1236305098"
a virus or unwanted program 'TR/Crypt.XPACK.Gen' [trojan] was found.
Action taken: Blocked file

黑衣~魂

DR.WEB
说明(必看).exe - infected with Trojan.DownLoader.970
智能翻译全套安装.exe - infected with Trojan.DownLoader.970
MISS-1-TO

wsmurderer

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\智能翻译全套安装.EXE
木马程序生成以下文件：
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\SMSES.EXE
2) C:\WINDOWS\SYSTEM32\KILLDLL.DLL
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\~FRM.EXE
4) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TMP.TMP
5) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\SVCHOS.EXE
是否删除木马程序及其衍生物?

wmcxdb

照片一张