新抓U盘病毒capxteo.exe

显示全部楼层 · 发表于 2008-9-16 13:06:19

过了还原系统RETURNIL！

显示全部楼层 · 发表于 2008-9-16 13:07:18

The requested URL could not be retrieved

While trying to retrieve the URL:

http://bbs.kafan.cn/attachment.php?aid=
358728&k=4425a1046c6bc4614c6c7398802a7c6
a&t=1221541608

The following error was encountered:

The requested object is INFECTED with the following viruses: Worm.Win32.AutoRun.ahy

Please contact your service provider if you consider it incorrect.
Generated:
Tue Sep 16 13:06:50 2008
Kaspersky Internet Security 2009

显示全部楼层 · 发表于 2008-9-16 13:13:36

上图

显示全部楼层 · 发表于 2008-9-16 13:37:11

C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\Run virus lab\病毒.rar
[0] Archive type: RAR
--> capxteo.exe
   [DETECTION] Is the TR/Crypt.NSPI.Gen Trojan
--> .vbs
   [DETECTION] Contains recognition pattern of the VBS/Autorun.AL VBS script virus
--> autorun.inf
   [DETECTION] Contains recognition pattern of the VBS/Worm.Runauto.A.1 VBS script virus
[WARNING] The file was ignored!
微点：
程序:
C:\DOCUMENTS AND SETTINGS\***.18F12FE200FB45E\桌面\ANTI-VIRUS LAB\RUN VIRUS LAB\病毒\CAPXTEO.EXE
木马程序生成以下文件:
1) C:\SANDBOX\***\DEFAULTBOX\DRIVE\C\PROGRAM FILES\COMMON FILES\SYSTEM\MVGCJCW.EXE
2) C:\SANDBOX\***\DEFAULTBOX\DRIVE\C\CAPXTEO.EXE
3) C:\SANDBOX\***\DEFAULTBOX\DRIVE\C\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WSOPOJC.EXE
4) C:\SANDBOX\***\DEFAULTBOX\DRIVE\C\PROGRAM FILES\MEEX.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-9-16 13:40:25

运行时
弹出N个CMD初始化失败

显示全部楼层 · 发表于 2008-9-16 13:45:02

不咋样，过不了HIPS

显示全部楼层 · 发表于 2008-9-16 14:01:13

新抓的?貌似绝大部分杀软都报了?

显示全部楼层 · 发表于 2008-9-16 14:38:39

ess3.0全杀

显示全部楼层 · 发表于 2008-9-16 15:22:18

微点拦截

显示全部楼层 · 发表于 2008-9-16 15:44:38

这也信。。

nis09全部灭掉

[病毒样本] 新抓U盘病毒capxteo.exe

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源