U盘里面发现的，自动连接网络，在系统盘中创建文件

显示全部楼层 · 发表于 2008-1-4 21:25:46

显示全部楼层 · 发表于 2008-1-4 21:34:58

Rising20.25.42未杀。

显示全部楼层 · 发表于 2008-1-4 21:37:50

AhnLab-V3 - - -
AntiVir - - -
Authentium - - -
Avast - - -
AVG - - -
BitDefender - - -
CAT-QuickHeal - - -
ClamAV - - -
DrWeb - - -
eSafe - - -
eTrust-Vet - - -
Ewido - - -
FileAdvisor - - -
Fortinet - - DNSChanger.D!tr
F-Prot - - -
F-Secure - - -
Ikarus - - -
Kaspersky - - -
McAfee - - DNSChanger.d
Microsoft - - -
NOD32v2 - - -
Norman - - -
Panda - - Suspicious file
Prevx1 - - Heuristic: Suspicious Self Modifying File
Rising - - -
Sophos - - -
Sunbelt - - -
Symantec - - -
TheHacker - - -
VBA32 - - -
VirusBuster - - -
Webwasher-Gateway - - -

显示全部楼层 · 发表于 2008-1-4 21:39:00

这个是杀AUTO的？

显示全部楼层 · 发表于 2008-1-4 21:57:45

symantec 报了三个！～

显示全部楼层 · 发表于 2008-1-4 22:03:23

igene大显神通

显示全部楼层 · 发表于 2008-1-4 22:03:26

nod32和小A挂

显示全部楼层 · 发表于 2008-1-4 22:10:59

[Class11]
Desc=Removable
Count=33
Item0=autorun.bat
Item1=autorun.bin
Item2=autorun.reg
Item3=autorun.txt
Item4=autorun.wsh
Item5=autorun.vbs
Item6=Toy.exe
Item7=msvcr71.dll
Item8=RavMonE.exe
Item9=SHE.exe
Item10=ctfmon.exe
Item11=AdobeR.exe
Item12=AdobeR.exe.log
Item13=winw0rd.exe
Item14=tel.xls.exe
Item15=EXPLORER.EXE
Item16=Setup.pif
Item17=fun.xls.exe
Item18=WIn.exe
Item19=sxs.exe
Item20=sxs2.exe
Item21=成人小说.exe
Item22=个人档案.exe
Item23=重要资料.exe
Item24=wokaye.exe
Item25=wsctf.exe
Item26=oso.exe
Item27=美女游戏.pif
Item28=printer.exe
Item29=setup.exe
Item30=autorun.pif
Item31=tool.exe
Item32=Updata.exe
Item33=C:\WINDOWS\system32\Wsm_32

这一段真好

真和谐

病毒？

显示全部楼层 · 发表于 2008-1-4 22:18:50

Hello,

DELAUTORUN.bat_

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Goncharov Ilya
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: DELAUTORUN.rar

果然

显示全部楼层 · 发表于 2008-1-4 23:05:53

Filename Result
DELAUTORUN.BAT    CLEAN
The file 'DELAUTORUN.BAT' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.  Filename Result
autorun.inf    CLEAN
The file 'autorun.inf' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Kind regards
Avira Virus Lab

[病毒样本] U盘里面发现的，自动连接网络，在系统盘中创建文件

本帖子中包含更多资源

本帖子中包含更多资源