TROJ_DELF.RM[virus found]
-->modify registry data("n/a","Software\Microsoft\Windows NT\CurrentVersion\Windows\","load") success
-->delete file("C:\WINDOWS\System32\explorer.exe","","") success
-->delete process("Explorer.exe","","") success
-->delete file("C:\WINDOWS\System32\htdll.dll","","") success
-->create process("Explorer.exe","","") success
Execute pattern count(1), Virus found count(1), Virus clean count(1), Clean failed count(0)
|