不算样本的样本

lanvin

不过是在一个牛人的电脑上插了我的U盘之后的中的毒
纪念下普通的U盘病毒

dyw1021

一个木马   一个后门
看来你的U盘有点中毒不浅啊

The EQs

Scan performed at: 2007-4-26 3:41:33
Scanning Log
NOD32 version 2218 (20070425) NT
Command line: C:\Documents and Settings\EQ2\桌面\sample.rar
Operating memory - is OK

Date: 26.4.2007  Time: 03:41:38
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\sample.rar
C:\Documents and Settings\EQ2\桌面\sample.rar ?RAR ?sample\INFO.EXE - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\sample.rar ?RAR ?sample\WWW-CEDE37A1D45.vbs - VBS/Butsur.D worm - was a part of the deleted object
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 03:41:46 Total scanning time: 8 sec (00:00:08)

Notes:
[7] File is probably infected with an unknown virus.

KAV-Longhorn

红伞厉害，杀了3个

Starting the file scan:

Begin scan in 'C:\Documents and Settings\FEAR\My Documents\Downloads\Compressed\sample.rar'
C:\Documents and Settings\FEAR\My Documents\Downloads\Compressed\sample.rar
  [0] Archive type: RAR
  --> sample\autorun.pif
      [DETECTION] Is the Trojan horse TR/Agent.280626
  --> sample\INFO.EXE
      [DETECTION] Is the Trojan horse TR/Spy.VB.QU
  --> sample\WWW-CEDE37A1D45.vbs
      [DETECTION] Contains signature of the VBS script virus VBS/Solow.C
      [INFO]      The file was moved to '469cb04e.qua'!

jlennon

剑指七星

已删除: 木马程序 Backdoor.Win32.Delf.aws        文件: F:\sample.rar\sample\autorun.pif/NSPack/NSPack
已删除: 木马程序 Trojan-Spy.Win32.VB.qu        文件: F:\sample.rar\sample\INFO.EXE/PE_Patch/UPack
已删除: 病毒 Worm.VBS.Solow.c        文件: F:\sample.rar\sample\WWW-CEDE37A1D45.vbs

蓝色牛仔裤

beta蜘蛛也是3个...

xpn282

NOD32又输了一次

鼻耳盖子

木马名称:Backdoor.Win32.RWX.i
程序:
I:\TEST\070425\20\SAMPLE\SAMPLE\AUTORUN.PIF
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Spy.Win32.VB.hl
程序:
I:\TEST\070425\20\SAMPLE\SAMPLE\INFO.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

风野胤

AUTORUN.PIF
这个nod从来不报的
自己手动删就好了
就是自动运行文件而已