Win32.HLLW.Autoruner

显示全部楼层 · 发表于 2009-5-20 22:12:26

dr.web
Autorun - infected with Win32.HLLW.Autoruner.4360
轉紳博,有過紅傘?
在紳博看到據說上報趨勢很久都沒有入庫,請幫忙協助

Antivirus	Version	Last Update	Result
a-squared	4.0.0.101	2009.05.20	Trojan.Peed!IK
AhnLab-V3	5.0.0.2	2009.05.20	Dropper/Flystud.1408353
AntiVir	7.9.0.168	2009.05.20	-
Antiy-AVL	2.0.3.1	2009.05.20	Trojan/Win32.Flystud
Authentium	5.1.2.4	2009.05.19	W32/Nuj.A.gen!Eldorado
Avast	4.8.1335.0	2009.05.19	Win32:Trojan-gen {Other}
AVG	8.5.0.336	2009.05.20	SHeur2.TFF
BitDefender	7.2	2009.05.20	Dropped:Trojan.Peed.Gen
CAT-QuickHeal	10.00	2009.05.20	Win32.Trojan-Dropper.Flystud.ko.5.Pack
ClamAV	0.94.1	2009.05.20	-
Comodo	1157	2009.05.08	TrojWare.Win32.TrojanDropper.Flystud.ps
DrWeb	5.0.0.12182	2009.05.20	-
eSafe	7.0.17.0	2009.05.19	Win32.TRDropper
eTrust-Vet	31.6.6513	2009.05.20	-
F-Prot	4.4.4.56	2009.05.19	W32/Nuj.A.gen!Eldorado
F-Secure	8.0.14470.0	2009.05.20	Trojan-Dropper.Win32.Flystud.ps
Fortinet	3.117.0.0	2009.05.20	PossibleThreat
GData	19	2009.05.20	Dropped:Trojan.Peed.Gen
Ikarus	T3.1.1.49.0	2009.05.20	Trojan.Peed
K7AntiVirus	7.10.739	2009.05.19	Trojan-Dropper.Win32.Flystud.ps
Kaspersky	7.0.0.125	2009.05.20	Trojan-Dropper.Win32.Flystud.ps
McAfee	5620	2009.05.19	W32/Autorun.worm.ev
McAfee+Artemis	5620	2009.05.19	W32/Autorun.worm.ev
McAfee-GW-Edition	6.7.6	2009.05.20	-
Microsoft	1.4602	2009.05.20	Backdoor:Win32/FlyAgent.F
NOD32	4091	2009.05.20	Win32/AutoRun.FlyStudio.GR
Norman	6.01.05	2009.05.20	W32/Lineage.BUEB
nProtect	2009.1.8.0	2009.05.20	-
Panda	10.0.0.14	2009.05.19	Generic Malware
PCTools	4.4.2.0	2009.05.20	-
Prevx	3.0	2009.05.20	High Risk Worm
Rising	21.30.20.00	2009.05.20	Worm.Win32.Agent.afl
Sophos	4.41.0	2009.05.20	Mal/EncPk-GF
Sunbelt	3.2.1858.2	2009.05.19	Trojan-Dropper.Win32.Flystud.ps
Symantec	1.4.4.12	2009.05.20	Adware.PigSearch
TheHacker	6.3.4.1.328	2009.05.20	Trojan/Dropper.Flystud.ps
TrendMicro	8.950.0.1092	2009.05.20	-
VBA32	3.12.10.5	2009.05.20	Trojan-Dropper.Win32.Flystud.ko
ViRobot	2009.5.20.1743	2009.05.20	Spyware.Flystud.Dr.1408353
VirusBuster	4.6.5.0	2009.05.20	-

Additional information

File size: 1350774 bytes

MD5...: 639aaacfc4f5655903ee406d18385274

[ 本帖最后由黑衣~魂于 2009-5-21 17:59 编辑 ]

显示全部楼层 · 发表于 2009-5-20 22:56:14

TrojanDropper.Flystud.x

显示全部楼层 · 发表于 2009-5-20 23:23:04

to Avira

显示全部楼层 · 发表于 2009-5-21 08:28:55

to analyser

显示全部楼层 · 发表于 2009-5-21 09:11:53

微点
木马名称：Trojan-Dropper.Win32.Flystud.pk

程序：
D:\AUTORUN[1]\AUTORUN
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2009-5-21 09:12:16

卡巴
检测到：木马程序 Trojan-Dropper.Win32.Flystud.ps 文件: D:\Autorun[1]\Autorun

显示全部楼层 · 发表于 2009-5-21 21:54:02

McAfee kill

显示全部楼层 · 发表于 2009-5-21 23:24:40

质量很差

显示全部楼层 · 发表于 2009-5-27 17:45:57

趋势现在是一塌糊涂，很多查不到的，比几年前差太多了

[病毒样本] Win32.HLLW.Autoruner

本帖子中包含更多资源

kv2008