Temp文件夹发现的～～

显示全部楼层 · 发表于 2007-4-18 07:39:05

AtiCimUn.exe---------->木马名称:Trojan-PSW.Win32.Agent.bww

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\BLACKSEEDER1.1
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Agent.bww

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\77169\IEXPL0RER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Agent.byj

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\77169\RUNDL132.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-4-18 07:39:26

微点还真厉害啊

全部干掉

显示全部楼层 · 发表于 2007-4-18 07:40:10

超级灌水

显示全部楼层 · 发表于 2007-4-18 07:56:18

费尔只报5个　其他2不是病毒吧都不能正常运行啊

显示全部楼层 · 发表于 2007-4-18 08:20:52

原帖由 jlennon 于 2007-4-18 07:40 发表
超级灌水

这也叫灌???

显示全部楼层 · 发表于 2007-4-18 08:24:03

我借此机会也灌了

显示全部楼层 · 发表于 2007-4-18 08:29:01

Scan performed at: 2007-4-18 8:28:44
Scanning Log
NOD32 version 2199 (20070417) NT
Command line: C:\Documents and Settings\EQ2\桌面\rundl132.rar C:\Documents and Settings\EQ2\桌面\UPX.rar C:\Documents and Settings\EQ2\桌面\AtiCimUn.rar C:\Documents and Settings\EQ2\桌面\c0nime.rar C:\Documents and Settings\EQ2\桌面\byetmr.rar C:\Documents and Settings\EQ2\桌面\IEXPL0RER(1).rar C:\Documents and Settings\EQ2\桌面\IEXPL0RER.rar
Operating memory - is OK

Date: 18.4.2007 Time: 08:28:50
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\rundl132.rar; C:\Documents and Settings\EQ2\桌面\UPX.rar; C:\Documents and Settings\EQ2\桌面\AtiCimUn.rar; C:\Documents and Settings\EQ2\桌面\c0nime.rar; C:\Documents and Settings\EQ2\桌面\byetmr.rar; C:\Documents and Settings\EQ2\桌面\IEXPL0RER(1).rar; C:\Documents and Settings\EQ2\桌面\IEXPL0RER.rar
C:\Documents and Settings\EQ2\桌面\rundl132.rar ?RAR ?rundl132.exe - a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\AtiCimUn.rar ?RAR ?AtiCimUn.exe - probably unknown WIN32 virus [7]
C:\Documents and Settings\EQ2\桌面\c0nime.rar ?RAR ?c0nime.exe - a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\byetmr.rar ?RAR ?byetmr.exe - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\IEXPL0RER.rar ?RAR ?IEXPL0RER.EXE - probably unknown NewHeur_PE virus [7]
Number of scanned files: 14
Number of threats found: 5
Number of files cleaned: 5
Time of completion: 08:28:54 Total scanning time: 4 sec (00:00:04)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-4-18 09:53:18

AtiCimUn运行后会释放一个已知病毒，本身是ati显卡的卸载程序；IEXPL0RER(1)是脚本，其他微点都卡鸟

显示全部楼层 · 发表于 2007-4-18 10:49:27

蜘蛛的

显示全部楼层 · 发表于 2007-4-18 10:50:48

金山报5个

[病毒样本] Temp文件夹发现的～～

回复 #9 tracydk 的帖子

回复 #15 tracydk 的帖子

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源