U盘病毒，卡巴不报，微点报未知 [07.9.27]

显示全部楼层 · 发表于 2007-9-27 08:34:54

在磁盘根目录建立autorun.inf lvpwmgh.exe文件，双击或右键 -> 打开都会执行病毒文件lvpwmgh.exe
此文件会在系统目录释放2个病毒文件，具体是什么忘了。
病毒会改系统时间，镜像劫持，强行关闭可能是杀软件的进程和试图结束病毒进程的进程。
到今天早上为止，卡巴7.0不报，微点报未知木马。
估计是老木马换的新马甲。

显示全部楼层 · 发表于 2007-9-27 08:39:16

2007-9-27 8:38:57 1190853537 SYSTEM 1272 Sign of "Win32:Delf-ERE [Wrm]" has been found in "http://bbs.kafan.cn/attachment.php?aid=132396\lvpwmgh.exe\[NsPack]" file

显示全部楼层 · 发表于 2007-9-27 08:46:53

nod32-

C:\Documents and Settings\zhanxiaotan\桌面\lvpwmgh.exe - 可能是 Win32/Delf.NDF 蠕虫的一个变种

显示全部楼层 · 发表于 2007-9-27 10:15:01

detected: virus Heur.AntiAV (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\lvpwmgh.rar/lvpwmgh.exe

显示全部楼层 · 发表于 2007-9-27 10:24:07

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\lvpwmgh.rar'
C:\Users\morgan\Documents\
  lvpwmgh.rar
[0] Archive type: RAR
--> lvpwmgh.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-27 10:26:17

微点行为识别

Micropoint Proactive Defense Software Pre-update
Program version: 1.2.10571.0098
Characteristic base: 1.6.451.070924
Update time: 2007-09-24 17:03:02

All rights reserved (C) 2005-2007 Micropoint Corporation
Beijing Eastern Micropoint Info-Tech CO., LTD.
Fujian Eastern Micropoint Info-Secu CO., LTD.
Email: support@micropoint.com.cn
Web Site: http://www.micropoint.com.cn

显示全部楼层 · 发表于 2007-9-27 10:34:24

panda

显示全部楼层 · 发表于 2007-9-27 10:54:10

以前用微点感觉查杀毒效果并不怎样！现在都不用了！

显示全部楼层 · 发表于 2007-9-27 11:10:16

原帖由 再来这里 于 2007-9-27 10:54 发表
以前用微点感觉查杀毒效果并不怎样！现在都不用了！

A-Squared	Found nothing
AntiVir	Found TR/Crypt.NSPM.Gen
ArcaVir	Found nothing
Avast	Found Win32:Delf-ERE
AVG Antivirus	Found nothing
BitDefender	Found GenPack:Generic.Malware.SP!Pk!g.4A2DDF5A
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found Possibly a new variant of W32/PWStealer1!Generic
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found probably a variant of Win32/Delf.NDF (probable variant)
Norman Virus Control	Found nothing
Panda Antivirus	Found Trj/Agent.GPV
Rising Antivirus	Found nothing
Sophos Antivirus	Found Mal/EncPk-AI
VirusBuster	Found nothing
VBA32	Found nothing

微点效果还是不错的

显示全部楼层 · 发表于 2007-9-27 12:52:09

瑞星报worm

[病毒样本] U盘病毒，卡巴不报，微点报未知 [07.9.27]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块