U盘病毒

显示全部楼层 · 发表于 2007-7-7 21:09:54

今天插mp3又有病毒 avast 貌似对付U盘病毒要卡上半天（18秒左右）

。我是点右键进入的，一点进去机子就卡住了。（avast的监控起作用了）

显示全部楼层 · 发表于 2007-7-7 21:11:25

Scan performed at: 2007-7-7 21:11:24
Scanning Log
NOD32 version 2383 (20070706) NT
Command line: C:\Documents and Settings\EQ2\桌面\Autorun.rar
Operating memory - is OK

Date: 7.7.2007 Time: 21:11:30
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\Autorun.rar
C:\Documents and Settings\EQ2\桌面\Autorun.rar ?RAR ?sxs.exe - a variant of Win32/PSW.QQPass.NBL trojan
C:\Documents and Settings\EQ2\桌面\Autorun.rar ?RAR ?RECYCLER\UExecute.exe - Win32/PSW.QQPass.MX trojan - was a part of the deleted object
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 21:11:30 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-7 21:11:28

detected: Trojan program Trojan-PSW.Win32.Delf.nx File: Autorun.rar/sxs.exe//FSG
detected: Trojan program Trojan-PSW.Win32.QQPass.mx File: Autorun.rar/RECYCLER\UExecute.exe

显示全部楼层 · 发表于 2007-7-7 21:12:07

卡巴
已检测到: 木马程序 Trojan-PSW.Win32.Delf.nx URL: http://bbs.kafan.cn/attachment.php?aid=97964/sxs.exe/FSG

显示全部楼层 · 发表于 2007-7-7 21:13:36

c:\ABC\Autorun.rar:\Autorun.inf
c:\ABC\Autorun.rar:\sxs.exe - Signature 'Trojan-PWS.Win32.Delf.nx' found
c:\ABC\Autorun.rar:\RECYCLER\UExecute.exe - Signature 'Trojan-PWS.Win32.QQPass.mx' found
c:\ABC\Autorun.rar

4 Files scanned
(1 Archiv with 3 files)
2 Signatures found
0 Suspect code-parts found
Used time: 0:00.031

显示全部楼层 · 发表于 2007-7-7 21:15:09

病毒: Trojan-PSW.Win32.Delf.nx, Trojan-PSW.Win32.QQPass.mx
文件: Autorun[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\QXL8YQ5H
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-7 21:20:26

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Pabug.bb
病毒： Worm.Agent.fk

用户来源：互联网

软件版本：19.30.52

显示全部楼层 · 发表于 2007-7-7 21:21:08

Starting the file scan:

Begin scan in 'F:\病毒样本\Autorun.rar'
F:\病毒样本\Autorun.rar
  [0] Archive type: RAR
  --> sxs.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQPas.LR.7.A
  --> RECYCLER\UExecute.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQPass.MX
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-7 23:11:41

avast灭之,报Win32:Trojan-gen. {Other}

显示全部楼层 · 发表于 2007-7-7 23:24:27

C:\Documents and Settings\uhthn\Desktop\Autorun.rar:<RAR>\sxs.exe : infected Trojan.PWS.Lineage
C:\Documents and Settings\uhthn\Desktop\Autorun.rar:<RAR>\RECYCLER\UExecute.exe : infected Trojan-PSW.Win32.QQPass.mx

Directories    : 0    Files in archives:    Files on disks:
Archives:                - total    : 3    - total    : 1
- scanned       : 1    -  scanned : 3    - scanned    : 1
- contain viruses : 1    -  infected : 2    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 0

[病毒样本] U盘病毒

本帖子中包含更多资源