U盘往学校电脑一插

ghj89100062

结果就是压缩包里的

Sebastian

Starting the file scan:

Begin scan in 'D:\new\explorer.rar'
D:\new\explorer.rar
    [0] Archive type: RAR
    --> explorer.exe
      [DETECTION] Is the TR/ATRAPS.Gen Trojan
    --> system.dll
      [DETECTION] Contains recognition pattern of the EXP/MS08-067 exploit
      --> auto.exe
          [DETECTION] Is the TR/Drop.Agent.gxb Trojan
    --> AUTORUN.INF
      [DETECTION] Contains recognition pattern of the WORM/Autorun.ubh worm
    [NOTE]      A backup was created as '4a151798.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2009年2月25日  18:02
Used time: 00:05 Minute(s)

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      4 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

黑衣~魂

老毒了
DR.WEB全殺
explorer.exe - infected with Win32.HLLW.Autoruner.2947

system.dll - infected with Trojan.AVKill.origin
system.dll\data001 - infected with Trojan.NtRootKit.2393

auto.exe - infected with Trojan.Popwin.716

AUTORUN.INF可不入庫

[ 本帖最后由 黑衣~魂 于 2009-2-25 18:03 编辑 ]

imdino

SEP11
W32.SillyFDC,Quarantined,AUTORUN.INF
W32.Popwin,Quarantined,auto.exe
Trojan.KillAV,Quarantined,system.dll
W32.Mikbaland,Quarantined,explorer.exe

ledled

名称: Backdoor.Agent.HFTI
类型: Trojan

描述:


文件:
c:\users\administrator\desktop\explorer\system.dll
--------------------------------------------------------------------
名称: Trojan.DR.Winko.Gen
类型: Mutant

描述:


文件:
c:\users\administrator\desktop\explorer\auto.exe
-----------------------------------------------------------------
名称: Autoruner
类型: Worm

描述:
A malicious software that replicates independently via LANs, Internet, e-mail, IRC channels, file-sharing networks, etc.

文件:
c:\users\administrator\desktop\explorer\autorun.inf
--------------------------------------------------------------------
名称: Packed/NSPack
类型: Sequence

描述:


文件:
c:\users\administrator\desktop\explorer\explorer.exe

diketaozi

还没有下载下来，红伞就咔嚓了。

wcj20236

liuxiaolong3133

学校的电脑

lmsa613

江民：“U盘寄生虫”变种qo
                 Worm/AutoRun.qo

Palkia

rs kill worm