Virus.Win32.AutoRun.pi

Cloud018

http://www.ujbdga.cn/715.rar
在上面的地址载的

检测到：病毒 Virus.Win32.AutoRun.pi    文件: C:\Documents and Settings\Cloud018\桌面\我的照片.Exe//UPX

qigang

C:\Documents and Settings\sx\桌面\virus1.rar>>我的照片.Exe>>upx_c

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.QQPass.yru

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.43.10

Nerazzurri

扫描进行于：2007-10-2 19:13:47
扫描日志
NOD32版本 2565 (20071002) NT
命令行： F:\Documents and Settings\kafan\桌面\715.rar

日期： 2.10.2007  时间：19:13:50
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\Documents and Settings\kafan\桌面\715.rar
F:\Documents and Settings\kafan\桌面\715.rar >>RAR >>我的照片.Exe - 可能是 Win32/AutoRun.Q 蠕虫 的一个变种
已扫描的文件数目：1
已发现的病毒数目：1
完成时间： 19:13:50 总扫描时间：0 秒 (00:00:00)

======================

Starting the file scan:

Begin scan in 'F:\Documents and Settings\kafan\桌面\715.rar'
F:\Documents and Settings\kafan\桌面\715.rar
  [0] Archive type: RAR
  --> ÎÒµÄÕÕƬ.Exe
      [DETECTION] Is the Trojan horse TR/PSW.QQGame.AB
      [INFO]      The file was deleted!

hahacomcn

Begin scan in 'C:\Documents and Settings\Administrator\桌面\715.rar'
C:\Documents and Settings\Administrator\桌面\715.rar
  [0] Archive type: RAR
  --> ÎÒµÄÕÕƬ.Exe
      [DETECTION] Is the Trojan horse TR/PSW.QQGame.AB

changzheng2

kingsoft  Win32.PSWTroj.QQPass.110684
Mcafee  PWS-QQGame
kaspersky  Trojan-PSW.Win32.QQGame.ai
Virusbuster  Trojan.PWS.QQGame.Gen
VBA32  MalwareScope.Trojan-PSW.Game.7
Sophos  Mal/Dropper-H
nProtect  Generic.PWStealer.12764CA9
NOD32  probably a variant of Win32/AutoRun.Q worm
Ikarus  Virus.Win32.AutoRun.bs
FS  Trojan-PSW.Win32.QQGame.ai
ewido  Trojan.QQPass.ban
dr.web  Trojan.PWS.Qqpass.1446
ca  Win32/QQPass!generic trojan.
bd  Generic.PWStealer.12764CA9
avg  Worm/Generic.DQI
avast  Win32:Delf-FZG [Trj]
avira  TR/PSW.QQGame.AI.1
ahn  Win-Trojan/QQPass.Gen
esafe  suspicious Trojan/Worm
webwasher  Trojan.PSW.QQGame.AI.1
fortinet  W32/Dropper.AI!tr.pws
prevx1  Heuristic: Suspicious File With Persistence
panda  Suspicious file


Compressed: YES
[ General information ]
    * Decompressing UPX.
    * Accesses executable file from resource section.
    * **Locates window "malegebazideq [class NULL]" on desktop.
    * **Locates window "wocaonilaomuq [class NULL]" on desktop.
  
  [ Changes to filesystem ]
    * Deletes file E:\AutoRun.exe.
    * Deletes file C:\Program Files\Internet Explorer\PLUGINS\SysWin74.Jmp.
    * Creates file C:\Program Files\Internet Explorer\PLUGINS\SysWin74.Jmp.
    * Deletes file C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys.
    * Creates file C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys.

changzheng2

刚才才看仔细
这个病毒的作者
怎么乱骂龌龊脏话呀
太没修养了吧

残缺的唯美

D:\Documents and Settings\EKINCHENG\桌面\715.rar » RAR » 我的照片.Exe - probably a variant of Win32/AutoRun.Q worm
D:\Documents and Settings\EKINCHENG\桌面\715.rar - probably a variant of Win32/AutoRun.Q worm - deleted - quarantined

ykz1991

oss pass

king6808

已删除：病毒 Virus.Win32.AutoRun.pi        文件　: G:\10.2\715.rar/我的照片.Exe//UPX

镭风