微点报的两个 大家看看（有了微点不用找病毒打包的工具了）

kingsheet

微点
木马名称：Trojan.Win32.Agent.aqpn

程序：
D:\IE2.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

miss-cuogo

谢谢斑竹对微点的肯定~~

yjwfdc

2009-06-05 11:17:17    创建文件      操作:允许
进程路径:D:\suspect一般启发\ie2.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Application Data\system32.exe
触发规则:所有程序规则->040_行为防御->*\system32.*


2009-06-05 11:17:18    运行应用程序      操作:允许
进程路径:C:\WINDOWS\system32\cmd.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Application Data\system32.exe
触发规则:所有程序规则->006_Application Datax->C:\Documents and Settings\*\Application Data\*


2009-06-05 11:17:29    修改文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Application Data\system32.exe
文件路径:C:\WINDOWS\system32\shdoclc.dll
触发规则:所有程序规则->115_系统dll_x->%windir%\system32\shdoclc.dll


2009-06-05 11:17:52    修改文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Application Data\system32.exe
文件路径:(隐藏文件>C:\WINDOWS\system32\dllcache\shdoclc.dll
触发规则:所有程序规则->120_系统驱动_x->%windir%\system32\dllcache\*


2009-06-05 11:17:57    修改文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Application Data\system32.exe
文件路径:C:\WINDOWS\system32\dllcache\shdoclc.dll
触发规则:所有程序规则->120_系统驱动_x->%windir%\system32\dllcache\*


2009-06-05 11:17:57    删除文件      操作:允许
进程路径:D:\suspect一般启发\ie2.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Application Data\system32.exe
触发规则:所有程序规则->040_行为防御->*\system32.*

sam.to

Hello,


ie.exe_ - Trojan-Downloader.Win32.Pif.po,
ie2.exe_ - Trojan.BAT.Taskkill.f

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

BING126

McAfee 报了1个。。

609180550

360杀毒 报1杀1

myshin

出了WINDOWS 7 7200我也打算换微点用下