木马？还是红伞误报...

spatra

今天红伞报Vista状态条风格盘符3.0程序为病毒，之前不报，以下扫描报告，只有3个报病毒:
http://virscan.org/report/a77de85a976ec8bf4210944c123b964a.html

gho

FS挂

28654621

vsdrv.rar           113.49/113.49KB     100.00%    在线扫描      它是一个“间谍程序”2008-1-28 16:43:42   2008-1-28 16:43:53

zzh161

The following Registry Keys were created:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons\c
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons\c\DefaultIcon
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons\x
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons\x\DefaultIcon
The newly created Registry Values are:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons\c\DefaultIcon]
(Default) = "%System%\s67.ico"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons\x\DefaultIcon]
(Default) = "%System%\16.ico"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
Vistadrv = "%System%\vsdrv.exe"

qigang

不像是病毒！