学校拿来的，咔吧不报！（超强）

Cloud018

他会插入进程explorer.exe，在C:\Program Files\Internet Explorer生成三个东东，其中一个是他本身。至于这三个你们自己提取吧。

应该是加了一个十分生辟的壳。
大家拿杀软扫扫啦，我没有时间了。

Cloud018

解压密码：0

wangjay1980

怎么你的没报？
detected: virus Virus.Win32.AutoRun.g        File: C:\Documents and Settings\Owner\×ÀÃæ\Ghost.rar/Ghost.pif

gwg829

[:27:]

miller239

可能当初病毒库没更新吧。。

Check system areas...
Check selected directories and files...
Object: Ghost.pif
        Path: C:\Documents and Settings\Administrator\桌面\Ghost
        Status: Virus detected
        Virus: Virus.Win32.AutoRun.g (KAV engine)

剑指七星

已检测到: 病毒 Virus.Win32.AutoRun.g        文件: F:\Ghost.pif

卡6 报

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\Ghost'
C:\Documents and Settings\morgan\My Documents\Ghost\
  Ghost.pif
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [INFO]      The file was deleted!

Cloud018

Antivirus	Version	Update	Result
AhnLab-V3	2007.5.16.1	05.17.2007 [td]no virus found
AntiVir	7.4.0.23	05.17.2007	TR/Crypt.ULPM.Gen
Authentium	4.93.8	05.16.2007 [td]no virus found
Avast	4.7.997.0	05.17.2007 [td]no virus found
AVG	7.5.0.467	05.17.2007 [td]no virus found
BitDefender	7.2	05.18.2007 [td]no virus found
CAT-QuickHeal	9.00	05.17.2007	(Suspicious) - DNAScan
ClamAV	devel-20070416	05.17.2007 [td]no virus found
DrWeb	4.33	05.17.2007 [td]no virus found
eSafe	7.0.15.0	05.17.2007	suspicious Trojan/Worm
eTrust-Vet	30.7.3641	05.17.2007 [td]no virus found
Ewido	4.0	05.17.2007 [td]no virus found
FileAdvisor	1	05.18.2007 [td]no virus found
Fortinet	2.85.0.0	05.17.2007	suspicious
F-Prot	4.3.2.48	05.16.2007 [td]no virus found
Ikarus	T3.1.1.7	05.17.2007	Trojan-Downloader.Win32.Agent.bmo
Kaspersky	4.0.2.24	05.18.2007	Virus.Win32.AutoRun.g
McAfee	5033	05.17.2007 [td]no virus found
Microsoft	1.2503	05.17.2007	PWS:Win32/Frethog.C
NOD32v2	2275	05.17.2007	Win32/Pacex.Gen
Norman	5.80.02	05.17.2007 [td]no virus found
Panda	9.0.0.4	05.17.2007	Suspicious file
Prevx1	V2	05.18.2007	Trojan.SystemPoser
Sophos	4.17.0	05.16.2007	Mal/EncPk-I
Sunbelt	2.2.907.0	05.17.2007 [td]no virus found
Symantec	10	05.18.2007	Backdoor.Graybird
TheHacker	6.1.6.115	05.15.2007 [td]no virus found
VBA32	3.12.0	05.17.2007 [td]no virus found
VirusBuster	4.3.7:9	05.17.2007	Trojan.OnlineGames.Gen!Pac.19
Webwasher-Gateway	6.0.1	05.18.2007	Trojan.Crypt.ULPM.Gen

File size: 22578 bytes

MD5: c7d9d724dc5bf1ceab032050508d324c

SHA1: fd269ae189c26a2905ddda1a9053b4a2b92b1100

应该是昨天晚上报的，昨晚我的是昨天下午的病毒库。

Nblock

微点

jo763092

KIS报了....久违的杀猪声