从客户的U盘里发现的一个U盘病毒。

edwardcl

你的是大P版？

尤金卡巴斯基

2009/9/21 15:36:48        已清除        木马程序 Trojan.Win32.FlyStudio.ci        G:\Temp\Virus\Recycled.rar/Recycled.exe

剑舞江南

我的小红伞是personal版的，9.0汉化版。我就是用它发现的客户U盘中的这个U盘病毒，为了再次确认又用avast！中文版扫描了一遍，还是报病毒，这才上传的样本。你的小红伞不会有什么问题吧，比如病毒库是最新的吗。

kaican

C:\Documents and Settings\Administrator\桌面\Recycled.rar > RAR > Recycled.exe - Win32/FlyStudio.NDB 特洛伊木马 - 是已删除对象的一部分

nod32

lf968

date/time: 2009-9-21 18:59:22
filename: Recycled.rar.part
original path: c:\Documents and Settings\``\桌面\
filesize: 43.49 KB
virusname: Trojan-Spy.Win32.FlyStudio
suggestion: deleted
signatureId: 707892

winxp0286

C:\Documents and Settings\Administrator\桌面\Recycled.rar > RAR > Recycled.exe - Win32/FlyStudio.NDB 特洛伊木马

lmsa613

江民也直接攔截了 啊

dfoxj2

收到的小红伞的回复

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00371234.

We received the following archive files:
File ID         燜ilename         Size (Byte)         Result
25455911          Recycled.rar         43.49 KB         OK

A listing of files contained inside archives alongside their results can be found below:
File ID         燜ilename         Size (Byte)         Result
25455912          Recycled.exe          108 KB          DAMAGED FILE (UNKNOWN)


Please find a detailed report concerning each individual sample below:
燜ilename         Result
Recycled.exe          DAMAGED FILE (UNKNOWN)

The file 'Recycled.exe' has been determined to be 'DAMAGED FILE (UNKNOWN)'. In particular this means that this file is damaged and not working properly. We could not find any malicious content. However the heuristic detection module may still detect this particular file even though it is damaged. In that case we will not adjust and remove detection for this damaged file.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... p;incidentid=371234

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... UvERIpG3mtHtF5TZOnO

Please note: If you have specific questions please address them to support@avira.com

Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Lindauer Str. 21, D-88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-525 10
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------

意思就是说 该文件已损坏，不能正常工作。我们无法找到任何恶意内容。然而，启发式检测模块仍然可以检测到这种特定的文件，即使它已损坏（就是启发式连坏的文件也检查）。在这种情况下我们不会调整和删除这个损坏文件的检测。
总之就是说是个坏的文件 没什么事啦

八神 庵

我怎么打不开?

BING126

McAfee kill