Encounter gjlbj. vya/Trojan. win32.agent. Kle, etc. 2

Encountered Trojan. win32.agent. Kle, etc. 2

EndurerOriginal
2008-05-15 th1Version

(Continued 1)

Let the netizens go to the following process:

Stop and disable services corresponding to o23

Use icesword to force the deletion of red files

Install rising Kaka Security Assistant to delete o22 and o23 items

Use WinRAR to delete windows temporary folders, ie temporary folders, and files that can be deleted in C:/Windows/prefetch.

Restart your computer ~

Some netizens said it was normal at the beginning, but once QQ was started, little red umbrella reported that the virus had been detected again ~

Ask netizens to uninstall QQ, restart the computer to safe mode, and delete QQ folders

Restart the computer and reinstall the computer. This time, the red umbrella will no longer report viruses ~

Some Virus File Information:

File Description: D:/test/becsmr.exe
Attribute: ---
An error occurred while obtaining the file version information!
Created at: 21:12:50
Modification time: 12:42:28
Size: 2560 bytes, 2.512 KB
MD5: 8acf186323e6dbd4f1fc9178d8db46d8
Sha1: 26eba683a65655da0f3604417e4ff0c76b4ee865
CRC32: 79cad196

File Description: D:/program files/virus/26517.dll
Attribute: ---
Language: Chinese (China)
File version: 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301)
Description: Windows NT base API client DLL
Copyright: (c) Microsoft Corporation. All rights reserved.
Product Version: 5.1.2600.3119
Product Name: Microsoft (r) Windows (r) Operating System
Company Name: Microsoft Corporation
Internal name: Kernel32
Source File Name: Kernel32
Created at: 21:26:20
Modified on: 12:14:30
Size: 94720 bytes, 92.512 KB
MD5: 906b778f79eda8e22184ec6860a98cf8
Sha1: c581f853cf79b38b372466cfe047672a9388c6b4
CRC32: b02bb1e1

File Description: D:/program files/virus/gjlbj. vya
Attribute :----
An error occurred while obtaining the file version information!
Created at: 21:49:22
Modification time: 16:59:14
Size: 47426 bytes, 46.322 KB
MD5: 8c28be8bc12693b4a97b7b0a2e8f50bb
Sha1: 80e5bb598dff1f8594530604dda-f5892af10fac
CRC32: a6acd904

Kaspersky report:Trojan. win32.agent. Kle

File Description: D:/test/qtvyp. dll
Attribute: ---
Language: Chinese (China)
File version: 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301)
Description: Windows NT base API client DLL
Copyright: (c) Microsoft Corporation. All rights reserved.
Product Version: 5.1.2600.3119
Product Name: Microsoft (r) Windows (r) Operating System
Company Name: Microsoft Corporation
Internal name: Kernel32
Source File Name: Kernel32
Created at: 21:52:18
Modification time: 23:54:26
Size: 94720 bytes, 92.512 KB
MD5: 906b778f79eda8e22184ec6860a98cf8
Sha1: c581f853cf79b38b372466cfe047672a9388c6b4
CRC32: b02bb1e1