很失败的病毒8d1b9be39

jehovah_king

文件 bpvrgut.exe1 接收于 2008.10.27 13:59:51 (CET)
反病毒引擎 版本 最后更新 扫描结果
AhnLab-V3 2008.10.27.3 2008.10.27 Win32/Autorun.worm.26502
AntiVir 7.9.0.9 2008.10.27 TR/Crypt.NSPI.Gen
Authentium 5.1.0.4 2008.10.27 W32/AutoRun.B.gen!Eldorado
Avast 4.8.1248.0 2008.10.27 Win32:Agent-SIM
AVG 8.0.0.161 2008.10.27 Delf.BPY
BitDefender 7.2 2008.10.27 Generic.Malware.SP!Pk!g.D4B89719
CAT-QuickHeal 9.50 2008.10.27 Worm.AutoRun.abo
ClamAV 0.93.1 2008.10.27 Worm.Delf-67
DrWeb 4.44.0.09170 2008.10.27 Win32.HLLW.Autoruner.690
eSafe 7.0.17.0 2008.10.26 Virus.Win32.AutoRun.
eTrust-Vet 31.6.6168 2008.10.25 Win32/Mocmex.DK
Ewido 4.0 2008.10.27 Worm.AutoRun.abo
F-Prot 4.4.4.56 2008.10.26 W32/AutoRun.B.gen!Eldorado
F-Secure 8.0.14332.0 2008.10.27 Worm.Win32.AutoRun.abo
Fortinet 3.113.0.0 2008.10.27 -
GData 19 2008.10.27 Generic.Malware.SP!Pk!g.D4B89719
Ikarus T3.1.1.44.0 2008.10.27 Trojan-Dropper.Delf
K7AntiVirus 7.10.509 2008.10.27 Trojan.Win32.AutoRun.mv
Kaspersky 7.0.0.125 2008.10.27 Worm.Win32.AutoRun.abo
McAfee 5415 2008.10.25 Generic.dx
Microsoft 1.4005 2008.10.27 Worm:Win32/Emerleox.K
NOD32 3559 2008.10.27 probably a variant of Win32/Delf.NDF
Norman 5.80.02 2008.10.24 W32/Packed_Nspack.A
Panda 9.0.0.4 2008.10.27 Trj/Autorun.CA
PCTools 4.4.2.0 2008.10.27 Packed/NSPack
Prevx1 V2 2008.10.27 Worm
Rising 21.01.02.00 2008.10.27 Worm.Win32.AvKiller.az
SecureWeb-Gateway 6.7.6 2008.10.27 Trojan.Crypt.NSPI.Gen
Sophos 4.35.0 2008.10.27 Mal/Behav-024
Sunbelt 3.1.1753.1 2008.10.25 Trojan.Win32.Packed.gen (v)
Symantec 10 2008.10.27 W32.Dotex
TheHacker 6.3.1.1.131 2008.10.27 Trojan/Dropper.mv
TrendMicro 8.700.0.1004 2008.10.27 WORM_NSPACK.AG
VBA32 3.12.8.8 2008.10.25 Virus.Win32.AutoRun.mv
ViRobot 2008.10.27.1438 2008.10.27 Trojan.Win32.Autorun.26469
VirusBuster 4.5.11.0 2008.10.26 Packed/NSPack

[ 本帖最后由 jehovah_king 于 2008-10-27 21:15 编辑 ]

无尽藏海

Scan Stats:
  Scan Time: 2 seconds
  Scan Options:
  Scan Targets: D:\Virus\bpvrgut.rar
  Counts:
   Total items scanned: 3
   - Files & Directories: 3
   - Registry Entries: 0
   - Processes & Start-up Items: 0
   - Network & Browser Items: 0
   - Other: 0
   - Trusted Files: 0
   - Skipped Files: 0

   Total security risks detected: 1
   Total items resolved: 1
   Total items that require attention: 0

Resolved Threats:
W32.Dotex
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
d:\virus\bpvrgut.rar - Deleted

Palkia

病毒        2008-10-27  21:10:35        C:\Documents and Settings\Administrator\桌面\bpvrgut.rar\bpvrgut.exe1        Win32.Troj.Autorun.mv.141312        清除成功

allinwonderi

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://bbs.kafan.cn/attachment.p ... dc&t=1225113099
Information:         Is the TR/Crypt.NSPI.Gen Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.9, VDF 7.0.7.92

BING126

McAfee                Generic.dx

啊弥陀佛

微点拦截

Nblock

1) C:\PROGRAM FILES\COMMON FILES\SYSTEM\YIFDEML.EXE
2) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\TIQRPEP.EXE

granthill

C:\Documents and Settings\Administrator\桌面\bpvrgut.rar > RAR > bpvrgut.exe1 - 可能是 Win32/Delf.NDF 蠕虫 的变种