藏在“回收站”里的病毒

ashe_vaan

以前就发现了，今天逮着一个，送给大家！
同学的移动硬盘是NTFS格式，却多出一个回收站图标样的文件夹，明显不是好东西。名称是Recycled。
用小红伞扫描，里面果然藏着毒。
Starting the file scan:

Begin scan in 'L:\Recycled'
L:\Recycled\INFO.EXE
      [DETECTION] Is the Trojan horse TR/Spy.VB.QU.1
      [INFO]      The file was successfully wiped!
      [INFO]      The file was deleted!


End of the scan: 2007年6月4日  23:32
Used time: 00:13 min

The scan has been done completely.

      1 Scanning directories
      2 Files were scanned
      1 viruses and/or unwanted programs were found
      0 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

wangjay1980

请用新的发帖方法

deleted: Trojan program Trojan-Spy.Win32.VB.qu        File: C:\Documents and Settings\Owner\×ÀÃæ\INFO.rar/INFO.EXE//PE_Patch//UPack

蓝色牛仔裤

[Scan path] C:\Documents and Settings\Administrator\桌面\INFO.rar
>>C:\Documents and Settings\Administrator\桌面\INFO.rar\INFO.EXE infected with Win32.HLLW.Tom
C:\Documents and Settings\Administrator\桌面\INFO.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 187 Kb/s
Scan time: 00:00:01

hj5abc

具体内容看置顶..

Time Module Object Name Threat Action User Information
2007-6-4 23:57:08 AMON file F:\INFO.EXE probably unknown NewHeur_PE virus

观弈书童

INFO.EXE - 未查明的 NewHeur_PE 病毒 [7]

kp2006

avast!报

ashe_vaan

是么？没看到。去看看。

taihuxian

Virus: Trojan-Spy.Win32.VB.qu

Virus found while downloading Web content.

Address: bbs.kafan.cn

chow2006

费尔报"木马"

tracydk