U盘病毒一个，蜘蛛挂！

显示全部楼层 · 发表于 2007-9-3 17:46:04

朋友的U盘里搞到的，它的蜘蛛不认识

显示全部楼层 · 发表于 2007-9-3 17:47:31

Worm.Small.bi

显示全部楼层 · 发表于 2007-9-3 17:48:33

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=122855 is infected with Virus.Win32.AutoRun.fy virus

显示全部楼层 · 发表于 2007-9-3 18:07:34

--> æÂæÂ.exe
   [DETECTION] Is the Trojan horse TR/Hijack
   [INFO]    A backup was created as '46d9dccf.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-3 18:14:42

运行以后微点干掉

显示全部楼层 · 发表于 2007-9-3 18:19:12

木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\BLUESOLDIER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-9-3 18:43:04

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\媛媛.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\黑色中指.EXE
是否删除木马程序及其衍生物?

，比楼上的报的好

。楼上运行的是什么程序？

显示全部楼层 · 发表于 2007-9-3 18:49:25

2007-9-3 18:48:33 Deleted WHUT-D9193C067E\gho WinRAR.exe C:\Documents and Settings\gho\桌面\媛媛.exe W32/Autorun.worm.b (Virus)

显示全部楼层 · 发表于 2007-9-3 20:06:57

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\媛媛.rar'
C:\Documents and Settings\tim\桌面\媛媛.rar
  [0] Archive type: RAR
  --> æÂæÂ.exe
   [DETECTION] Is the Trojan horse TR/Hijack
   [INFO]    A backup was created as '470a5370.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-3 22:31:17

结果: 找到 1 恶意软件
Virus.Win32.AutoRun.fy (病毒)
C:\Documents and Settings\ssy\桌面\4.rar\媛媛.exe

[病毒样本] U盘病毒一个，蜘蛛挂！

本帖子中包含更多资源