今天遇到一个小红伞不杀的病毒

Graybird

Filename	Result
autorun.inf	CLEAN

The file 'autorun.inf' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

Filename	Result
RUNDLL64.dll.vbs	MALWARE

The file 'RUNDLL64.dll.vbs' has been determined to be 'MALWARE'.
Our analysts named the threat VBS.Small.hh. Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename	Result
wscript.exe	KNOWN CLEAN

The file 'wscript.exe' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP2)'.

闪电战

然后居然还有个杀软报了……
所以多人使用的电脑应该创建一个受限账户，平时要别人都用这个账户登录

周杰伦

红伞都已经说明下次更新就可以查杀了，等到下午就可以查杀了

等等等等

那个病毒我用微点杀了

jimmyleo

过是很正常的事情

厂商吸引用户 用户造就厂商

ngh55

不相信 ：wscript.exe 是病毒，点属性看看是不是有微软的版权。

名称：Microsoft (r) Windows Script Host
公司：Microsoft Corporation
源文件名：wscript.exe

Microsoft (r) Windows Based Script Host
Copyright © Microsoft Corp. 2002

coolrui

怎么到现在还杀不了呀，病毒库已经更新到12月6日了

zl319

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00103610.




We received the following archive files:



File ID  Filename  Size (Byte) Result
2255011  Archive.zip 460.3 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
553375  autorun.inf  106 Byte  CLEAN
2255006  RUNDLL64.dll.vbs  3.81 MB  MALWARE
553375  autorun.inf  106 Byte  CLEAN
2255006  RUNDLL64.dll.vbs  3.81 MB  MALWARE
234480  wscript.exe  112 KB  KNOWN CLEAN


Please find a detailed report concerning each individual sample below:

Filename Result  autorun.inf  CLEAN

The file 'autorun.inf' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename Result  RUNDLL64.dll.vbs  MALWARE

The file 'RUNDLL64.dll.vbs' has been determined to be 'MALWARE'. Our analysts named the threat VBS.Small.hh. Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename Result  autorun.inf  CLEAN

The file 'autorun.inf' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename Result  RUNDLL64.dll.vbs  MALWARE

The file 'RUNDLL64.dll.vbs' has been determined to be 'MALWARE'. Our analysts named the threat VBS.Small.hh. Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename Result  wscript.exe  KNOWN CLEAN

The file 'wscript.exe' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP2)'.

Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... p;incidentid=103610

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... Y8fUcmVGwAVntyI71O2


Please note: The detection of Spy/Adware is not available in the product "AntiVir PersonalEdition Classic". Please address specific questions to support@avira.com

Kind regards

红伞给偶的回复，E文看不懂？

周杰伦

下面是用谷歌翻译的，希望能看得懂了

请找到一份详细的报告，关于个别样本如下：

文件名，结果autorun.inf清洁

档案' autorun.inf '已被确定为'干净' 。我们的分析师并未发现任何恶意内容。
文件名，结果rundll64.dll.vbs恶意软件

档案' rundll64.dll.vbs '已被确定为'恶意软件' 。我们的分析师点名威胁vbs.small.hh 。检测中，将增加我们的病毒定义文件（ vdf ） ，其中一名未来的更新。
文件名，结果autorun.inf清洁

档案' autorun.inf '已被确定为'干净' 。我们的分析师并未发现任何恶意内容。
文件名，结果rundll64.dll.vbs恶意软件

档案' rundll64.dll.vbs '已被确定为'恶意软件' 。我们的分析师点名威胁vbs.small.hh 。检测中，将增加我们的病毒定义文件（ vdf ） ，其中一名未来的更新。
文件名，结果wscript.exe称为清洁

档案' wscript.exe '已被确定为'已知干净' 。尤其是这意味着，我们无法找到任何恶意内容。请注意该文件的一部分'的windows xp （ sp2 ）的' 。

hao8219

我试试