又找到几个

显示全部楼层 · 发表于 2009-6-12 01:59:22

郁闷

显示全部楼层 · 发表于 2009-6-12 02:19:37

2009/6/12 2:14:41 已清除木马程序 Trojan-Dropper.Win32.Agent.apdc G:\Temp\Virus\svcho.rar/svcho.exe

Miss 4,To KL

显示全部楼层 · 发表于 2009-6-12 02:36:03

Begin scan in 'C:\Documents and Settings\Administrator\桌面\ntserver'
C:\Documents and Settings\Administrator\桌面\ntserver\ntserver.dat
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\ntserver\Probe2.bin
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\ntserver\sessmgr.bin
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\ntserver\SetPoint.bin
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\ntserver\svcho.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-6-12 02:36:42

显示全部楼层 · 发表于 2009-6-12 07:44:50

Win32:Trojan-gen {Other}
Win32:Trojan-gen {Other}
Win32:Trojan-gen {Other}
Win32:Trojan-gen {Other}
Win32:Trojan-gen {Other}

显示全部楼层 · 发表于 2009-6-12 09:37:39

2009-2009-06-12 09:37:24 修改注册表内容    操作:阻止
进程路径:E:\virus\svcho.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
注册表名称:Personal
触发规则:所有程序规则->RD:07…系统和软件操作（黑白）->*\Software\Microsoft\Windows*\*

2009-06-12 09:37:24 修改注册表内容    操作:阻止
进程路径:E:\virus\svcho.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
注册表名称:Desktop
触发规则:所有程序规则->RD:07…系统和软件操作（黑白）->*\Software\Microsoft\Windows*\*

2009-06-12 09:37:24 创建文件    操作:阻止
进程路径:E:\virus\svcho.exe
文件路径:C:\Documents and Settings\cc\Application Data\Microsoft\Internet Explorer\Quick Launch\启动 Internet Explorer 浏览器.lnk
触发规则:所有程序规则->FD:04…创建文件的目录（黑白）->*\Quick Launch\*

2009-06-12 09:37:24 修改注册表内容    操作:阻止
进程路径:E:\virus\svcho.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
注册表名称:Personal
触发规则:所有程序规则->RD:07…系统和软件操作（黑白）->*\Software\Microsoft\Windows*\*

2009-06-12 09:37:24 修改注册表内容    操作:阻止
进程路径:E:\virus\svcho.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
注册表名称:Desktop
触发规则:所有程序规则->RD:07…系统和软件操作（黑白）->*\Software\Microsoft\Windows*\*

2009-06-12 09:37:24 修改文件    操作:阻止并结束进程
进程路径:E:\virus\svcho.exe
文件路径:E:\virus\svcho.exe
触发规则:所有程序规则->FD:02…有关文件创建修改组（含黑名单）->*\*.exe

2009-06-12 09:37:24 修改文件    操作:阻止并结束进程
进程路径:E:\virus\svcho.exe
文件路径:E:\virus\svcho.exe
触发规则:所有程序规则->FD:02…有关文件创建修改组（含黑名单）->*\*.exe

06-12 09:37:24 修改文件    操作:阻止并结束进程
进程路径:E:\virus\svcho.exe
文件路径:E:\virus\svcho.exe
触发规则:所有程序规则->FD:02…有关文件创建修改组（含黑名单）->*\*.exe

2009-06-12 09:37:24 修改文件    操作:阻止并结束进程
进程路径:E:\virus\svcho.exe
文件路径:E:\virus\svcho.exe
触发规则:所有程序规则->FD:02…有关文件创建修改组（含黑名单）->*\*.exe

显示全部楼层 · 发表于 2009-6-12 10:20:45

毒霸，三个病毒，两个风险

显示全部楼层 · 发表于 2009-6-12 10:26:41

2009-06-12 10:25:53 gxf 3436 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\Probe2.rar\Probe2.bin" file.
2009-06-12 10:25:56 gxf 3436 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\SetPoint.rar\SetPoint.bin" file.
2009-06-12 10:25:57 gxf 3436 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\ntserver.rar\ntserver.dat" file.
2009-06-12 10:25:57 gxf 3436 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\sessmgr.rar\sessmgr.bin\[Embedded_I#0ceab]" file.
2009-06-12 10:25:57 gxf 3436 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\sessmgr.rar\sessmgr.bin\[Embedded_I#16e93]" file.
2009-06-12 10:25:57 gxf 3436 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\sessmgr.rar\sessmgr.bin\[Embedded_I#43406]" file.
2009-06-12 10:25:57 gxf 3436 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\svcho.rar\svcho.exe\[Embedded_O#06000]\[Embedded_R#ECPLOR]" file.
2009-06-12 10:25:57 gxf 3436 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\svcho.rar\svcho.exe\[Embedded_O#06000]" file.
2009-06-12 10:25:57 gxf 3436 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\gxf\桌面\110\svcho.rar\svcho.exe" file.

显示全部楼层 · 发表于 2009-6-12 10:30:05

svcho.exe;C:\Documents and Settings\gxf\桌面\110\dr1;Trojan.DownLoad.37499

显示全部楼层 · 发表于 2009-6-12 10:47:37

2009-6-12 10:46:11:203 已开始的扫描
扫描类型 - 右键单击扫描

2009-6-12 10:46:51:703 在这台电脑上侦察到感染病毒
威胁软件名称 - Trojan-Downloader.Agent.ALI
类型 - 文件
风险级别 - 中
感染 - C:\Documents and Settings\gxf\桌面\110\rs1\ntserver\Probe2.bin

2009-6-12 10:46:52:421 已完成的扫描
扫描类型 - 右键单击扫描
进展项目 - 5
已检测到的威胁软件 - 1
已检测到的感染 - 1
忽略的感染 - 0

[病毒样本] 又找到几个

本帖子中包含更多资源

本帖子中包含更多资源

avast 4.8

drweb

pctools检测