邮箱莫名收到这个东西

hwfzh

邮箱莫名收到这个东西，好象是代理什么的 小a提示是网虫

Sherry.ai

居然不是鸽子Trojan-Dropper.Win32.Crypter.ga

[ 本帖最后由 935623508 于 2009-5-10 10:33 编辑 ]

einnawy

费尔报了

softkiller

微点 Spyware.genus is found, delete it or not?

program(s):
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\8.2.1.32\8.2.1.32.EXE
Trojan program(s) generates files as below:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TEMP\8.2.1.32.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TEMP\SERVER.EXE
Delete Trojan program(s) and its remains or not?

2009-05-10 10:30:48
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ DRVNAME  DRVNAME.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TEMP\SERVER.EXE

Palkia

to js kl

hwfzh

是误报吗？

kingmuro

2009-05-10 10:58:41        gxf        1664        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\8[1].2.1.32\8.2.1.32\8.2.1.32\8.2.1.32.exe" file.  
2009-05-10 10:58:46        gxf        1664        Sign of "Win32:Atraps-EP [Trj]" has been found in "C:\Documents and Settings\gxf\桌面\110\SERVER\SERVER.EXE" file.

悠柚

AVG SHeur2.ACMU

hj5abc

--> SERVER.EXE
      [DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
   

schumi小粉

McAfee 已自动阻止和删除 特洛伊木马程序。

关于此 特洛伊木马程序
已检测到: BackDoor-DVF (特洛伊木马程序), BackDoor-DVF (特洛伊木马程序)
位置: C:\Documents and Settings\Administrator\桌面\新建文件夹\SERVER\SERVER.EXE

McAfee 已自动阻止和删除 特洛伊木马程序。

关于此 特洛伊木马程序
已检测到: Artemis!14ECF60ABD18 (特洛伊木马程序), Artemis!14ECF60ABD18 (特洛伊木马程序)
位置: C:\Documents and Settings\Administrator\桌面\新建文件夹\8.2.1.32\8.2.1.32\8.2.1.32\8.2.1.32.exe