新鲜的U盘病毒

金剑

在我们学校流传开了,在教室,被我的软件发现了，发上来……

yinxuchina

晕 我们学校也是这病毒

yinxuchina

江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 10.00.600
        病毒库日期 2007-03-12
        更新日期 2007-03-12

扫描目标 C:\Documents and Settings\yinxu\My Documents\7P.rar

扫描目标 C:\Documents and Settings\yinxu\My Documents\7P.rar

开始时间 2007-03-12 17:04:10

在 C:\Documents and Settings\yinxu\My Documents\7P.rar->Autorun.inf 中发现 Trojan/INF.bc 病毒, 已删除
在 C:\Documents and Settings\yinxu\My Documents\7P.rar->EXPLORER.EXE 中发现 Trojan/PSW.GamePass.bov 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :3                                   病毒体 :2         
                   删除 :2                                     解毒 :0         
    扫描速度(千字节/秒) :0                                 扫描时间 :00:00:00

鱼是一只我

驱逐舰报        Win32.Besso

网络vs浪子

微点杀了


2007-03-12 17:15:25 HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ EXPLORER.EXE  EXPLORER.EXE C:\WINDOWS\SYSTEM32\EXPLORER.EXE
2007-03-12 17:15:25 HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ WSCTF.EXE  WSCTF.EXE C:\WINDOWS\SYSTEM32\EXPLORER.EXE

绅博周幸

Thank you for your submission. Below you can see the current status of the uploaded files.


--------------------------------------------------------------------------------


We received the following archive files:



File ID  Filename  Size (Byte) Result
221375  7P.rar 51.765 OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
221376  Autorun.inf  122  UNDER ANALYSIS
221377  EXPLORER.EXE  84.701  UNDER ANALYSIS


Please find a detailed report concerning each individual sample below:

Filename Result
Autorun.inf  UNDER ANALYSIS

The file 'Autorun.inf' has been determined to be 'UNDER ANALYSIS'.

Filename Result
EXPLORER.EXE  UNDER ANALYSIS

The file 'EXPLORER.EXE' has been determined to be 'UNDER ANALYSIS'.


--------------------------------------------------------------------------------
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

soul20010

FS7.O
Result: 1 malware found
Worm.Win32.Detnat.e (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\7P.rar\EXPLORER.EXE

allenhippo

norton

zxy900906

Scan performed at: 2007-3-12 17:56:21
Scanning Log
NOD32 version 2107 (20070311) NT
Command line: C:\Documents and Settings\user\桌面\7P
E:\Program Files\Eset\nod32.exe - is OK
Operating memory - is OK
MBR sector of the 1. physical disk - is OK
Active boot sector of the 1. physical disk - is OK - Error reading disk sectorError reading disk sectorError reading disk sector

Date: 12.3.2007  Time: 17:56:40
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\user\桌面\7P\
C:\Documents and Settings\user\桌面\7P\Autorun.inf - is OK
C:\Documents and Settings\user\桌面\7P\EXPLORER.EXE - Win32/VB.NHZ worm - quarantined - unable to clean - deleted
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 17:56:40 Total scanning time: 0 sec (00:00:00)

电影结束了

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2007-3-11
开始时间: 2007-3-12 18:15
引擎: KAV 引擎 (AVK 17.3052), BD 引擎 (BD 17.2292)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: EXPLORER.EXE
        在压缩档案里: F:\新建文件夹\7P.rar
        Status: 已发现病毒
        病毒: Worm.Win32.Detnat.e (KAV 引擎), Trojan.Agent.VB.H (BD 引擎)
对象: 7P.rar
        路径: F:\新建文件夹
        Status: 已发现病毒
        病毒: Worm.Win32.Detnat.e (KAV 引擎), Trojan.Agent.VB.H (BD 引擎)
扫描完成: 2007-3-12 18:15
    已检查 1 个文件
    已发现 1 个染毒文件
    发现 0 个可疑文件