autorun下载者，感染型，下一堆盗号[C6A821]

yitp

Scanning Report
09 November 2007 22:26:05 - 22:26:06
Computer name:
Scanning type: Scan target
Target: C:\Documents and Settings\Administrator\×ÀÃæ\setup.zip


--------------------------------------------------------------------------------

Result: 1 malware found
Worm.Win32.AutoRun.bc (virus)
C:\Documents and Settings\Administrator\×ÀÃæ\setup.zip\setup.exe




--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 2
Not scanned: 0
Result:
Viruses: 1
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0


--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2007-11-09_02
Spyware: 2007-11-09_01
Scanning Engines:
F-Secure AVP: 7.00.171, 2007-11-09
F-Secure Libra: 2.04.01, 2007-11-06
F-Secure Orion: 1.02.37, 2007-11-09
F-Secure Draco: 1.00.35, 2007-10-30

FBAV

MicroVita AntiSpyware  
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……


正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\autorun下载者，\setup.exe]
                    …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:13670  MD5:c6a821df81501b6ec2be3cfb380b8ba6


文件数:1   病毒数:1  比重:1
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

cy6266812

AVAST报

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 814
Paranoia Database - 48608
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\setup.exe

C:\Documents and Settings\Uhthn\Desktop\setup.exe - Infected TROJAN-DOWNLOADER.AGENT.4 - Deleted

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files disinfected
1 Files deleted

残缺的唯美

咖啡启发

saga3721

它有要求联网吗？好像也不做的样子。。。

秋叶濛濛

F:\Virus\setup.zip » ZIP » setup.exe - probably a variant of Win32/Drowor virus