同事存储卡中抓的一包。。

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\vir.rar'
C:\Documents and Settings\Administrator\桌面\vir.rar
  [0] Archive type: RAR
    --> н¨Îļþ¼Ð\autorun.inf.rar
      [1] Archive type: RAR
      --> autorun.bat
          [DETECTION] Contains detection pattern of the VBS script virus VBS/Small.V
      --> autorun.inf
          [DETECTION] Contains detection pattern of the VBS script virus VBS/Small.R
  --> н¨Îļþ¼Ð\Autorun.~ex
      [DETECTION] Contains detection pattern of a probably damaged sample CC/UKMalw.LB
  --> н¨Îļþ¼Ð\dtsvitiq.exe
      [DETECTION] Is the Trojan horse TR/VB.bbr
  --> н¨Îļþ¼Ð\phshursc.exe
      [DETECTION] Contains code of the Windows virus W32/AutoRun.br
      [WARNING]   The file was ignored!

yurius

symantec endpoint 6个
真实环境下的铁壳查杀率还是不错的

2007-10-11 20:39:19,Trojan Horse,Quarantined,phshursc.exe
2007-10-11 20:39:18,Trojan Horse,Quarantined,dtsvitiq.exe
2007-10-11 20:39:17,VBS.Runauto,Quarantined,autorun.inf_被屏蔽木马
2007-10-11 20:39:17,VBS.Runauto,Quarantined,autorun.inf
2007-10-11 20:39:17,VBS.Runauto,Quarantined,autorun.bat
2007-10-11 20:39:17,VBS.Runauto,Quarantined,AUTORUN.FCB

z84y2

NOD32竟然没有反应！只是上报了两个可疑文件！

hkt988

我的NOD32怎么只有四个
扫描进行于：2007-10-11 14:50:02
扫描日志
NOD32版本 2586 (20071011) NT
命令行： D:\下载文件夹\vir.rar

日期： 11.10.2007  时间：14:50:04
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：D:\下载文件夹\vir.rar
D:\下载文件夹\vir.rar >>RAR >>新建文件夹\autorun.inf.rar >>RAR >>autorun.bat - VBS/Small.NAB 蠕虫 - 是已删除对象的一部分
D:\下载文件夹\vir.rar >>RAR >>新建文件夹\autorun.inf.rar >>RAR >>autorun.inf - VBS/Small.NAB 蠕虫 - 是已删除对象的一部分
D:\下载文件夹\vir.rar >>RAR >>新建文件夹\autorun.inf.rar >>RAR >>Autorun.exe - 压缩文件损坏，无法解压.
D:\下载文件夹\vir.rar >>RAR >>新建文件夹\autorun.inf.rar >>RAR >>autorun.reg - 压缩文件损坏，无法解压.
D:\下载文件夹\vir.rar >>RAR >>新建文件夹\autorun.inf.rar >>RAR >>autorun.vbs - 压缩文件损坏，无法解压.
D:\下载文件夹\vir.rar >>RAR >>新建文件夹\dtsvitiq.exe - 可能是 Win32/AutoRun.E 蠕虫 的一个变种
D:\下载文件夹\vir.rar >>RAR >>新建文件夹\phshursc.exe - Win32/AutoRun.E 蠕虫的变种
已扫描的文件数目：22
已发现的病毒数目：4
已清除病毒的文件数目：1
完成时间： 14:50:06 总扫描时间：2 秒 (00:00:02)

镭风

费尔9个

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\vir'
C:\Users\morgan\Documents\vir\新建文件夹\
  autorun.001
  autorun.bin
  autorun.exe
  autorun.exe.exe
  AUTORUN.FCB
      [DETECTION] Contains detection pattern of the VBS script virus VBS/Small.U
      [INFO]      The file was deleted!
  Autorun.ico
  autorun.inf.rar
    [0] Archive type: RAR
    --> Autorun.ini
    --> autorun.bat
        [DETECTION] Contains detection pattern of the VBS script virus VBS/Small.V
        [WARNING]   Infected files in archives cannot be repaired!
    --> autorun.inf
        [DETECTION] Contains detection pattern of the VBS script virus VBS/Small.R
        [WARNING]   Infected files in archives cannot be repaired!
    --> Autorun.exe
    --> autorun.reg
    --> autorun.vbs
        [INFO]      The file was deleted!
  autorun.inf_被屏蔽木马
      [DETECTION] Contains detection pattern of the VBS script virus VBS/Small.U
      [INFO]      The file was deleted!
  Autorun.ini
  autorun.pif
  autorun.rar
    [0] Archive type: RAR
    --> autorun.inf
    --> cdrom.ico
  autorun.srm
  autorun.txt
  autorun.wsh
  Autorun.~ex
      [DETECTION] Contains detection pattern of a probably damaged sample CC/UKMalw.LB
      [INFO]      The file was deleted!
  dtsvitiq.exe
      [DETECTION] Is the Trojan horse TR/VB.bbr
      [INFO]      The file was deleted!
  phshursc.exe
      [DETECTION] Contains code of the Windows virus W32/AutoRun.br
      [INFO]      The file was deleted!
C:\Users\morgan\Documents\vir\新建文件夹\Recycled\
  desktop.ini


End of the scan: 2007年10月11日  07:43
Used time: 00:05 min

The scan has been done completely.

      3 Scanning directories
     26 Files were scanned
      7 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      6 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     19 Files not concerned
      2 Archives were scanned
      2 Warnings
      0 Notes