1

killloop

软件名称	引擎版本	病毒库版本	病毒库时间	扫描结果	时间
a-squared	4.5.0.1	20090705150128	2009-07-05	Virus.Win32.Agent!IK	2.752
AntiVir	8.2.0.204	7.1.4.180	2009-07-03	-	0.609
Arcavir	2009	200907041246	2009-07-04	-	0.005
Authentium	5.1.1	200907041615	2009-07-04	W32/Heuristic-210!Eldorado (Heuristic)	2.446
AVAST!	4.7.4	090704-0	2009-07-04	Win32:Agent-TZK [Trj]	0.078
AVG	8.5.286	270.13.5/2219	2009-07-05	-	9.578
BitDefender	7.81008.3654120	7.26384	2009-07-05	Trojan.Generic.2062875	3.726
CA (VET)	9.0.0.143	31.6.6595	2009-07-03	Win32/MaranPWS!SFX trojan.	3.725
ClamAV	0.95.2	9537	2009-07-03	-	0.069
Comodo	3.9	1538	2009-07-02	-	0.917
CP Secure	1.1.0.715	2009.07.03	2009-07-03	Troj.Downloader.W32.CodecPack.epq	11.584
Dr.Web	4.44.0.9170	2009.07.05	2009-07-05	-	8.860
F-Prot	4.4.4.56	20090704	2009-07-04	Possible W32/Heuristic-210!Eldorado (damaged, not disinfectable)	2.729
F-Secure	5.51.6100	2009.07.05.01	2009-07-05	-	1.114
GData	19.6281/19.385	20090705	2009-07-05	Win32:Agent-TZK [Trj] [Engine:B]	4.502
Ikarus	T3.1.01.64	2009.07.05.72980	2009-07-05	Virus.Win32.Agent	3.441
Microsoft	1.4803	2009.07.05	2009-07-05	-	6.723
mks_vir	2.01	2009.07.05	2009-07-05	-	4.077
Norman	6.01.09	6.01.00	2009-07-04	-	4.007
nProtect	20090705.01	4827290	2009-07-05	-	9.226
Quick Heal	10.00	2009.07.03	2009-07-03	-	1.528
Sophos	2.88.0	4.43	2009-07-05	Mal/Generic-A	2.842
Sunbelt	5225	5225	2009-07-04	-	1.081
The Hacker	6.3.4.3	v00362	2009-07-04	-	0.759
VBA32	3.12.10.7	20090704.1432	2009-07-04	-	2.745
ViRobot	20090703	2009.07.03	2009-07-03	-	0.449
VirusBuster	4.5.11.10	10.107.36/1760558	2009-07-05	Packed/FSG	2.975
卡巴斯基	5.5.10	2009.07.05	2009-07-05	-	0.452
安博士V3	2009.07.05.01	2009.07.05	2009-07-05	-	1.030
安天	2.0.18	20090705.2596636	2009-07-05	-	0.120
江民杀毒	11.0.800	2009.07.05	2009-07-05	-	6.718
熊猫卫士	9.05.01	2009.07.04	2009-07-04	-	1.696
瑞星	20.0	21.36.62.00	2009-07-05	-	1.434
赛门铁克	1.3.0.24	20090704.006	2009-07-04	Trojan Horse	0.169
趋势科技	8.700-1004	6.246.09	2009-07-05	-	2.902
迈克菲	5.3.00	5666	2009-07-04	Generic.dx!ep	3.203
金山毒霸	2009.2.5.15	2009.7.5.15	2009-07-05	-	0.660
飞塔	2.81-3.117	10.569	2009-07-05	-	0.174

BING126

McAfee kill

黑衣~魂

持保留
生成LiveUpdate.exe+xunleicom.dll+i.exe

[ 本帖最后由 黑衣~魂 于 2009-7-5 23:14 编辑 ]

hj5abc

是捆绑，那个i.exe会在关闭聊天器后运行。

The file 'i.exe' has been determined to be 'UNDER ANALYSIS'.

黑衣~魂

soga
thanks

saga3721

程序：
C:\WINDOWS\SYSTEM32\XUNLEICOM.DLL
是可疑程序，是否阻止该进程继续运行?

C:\DOCUMENTS AND SETTINGS\\桌面\1.EXE
木马程序生成以下文件：
1) C:\WINDOWS\SYSTEM32\XUNLEICOM.DLL
2) C:\WINDOWS\SYSTEM32\LIVEUPDATE.EXE
是否删除木马程序及其衍生物?

dreams521