新抓U盘病毒capxteo.exe

显示全部楼层 · 发表于 2008-9-16 16:11:13

2008-9-16 16:10:42 http://bbs.kafan.cn/attachment.p ... capxteo.exe//NSPack ThunderS Module 拒绝: Worm.Win32.AutoRun.ahy
2008-9-16 16:10:42 http://bbs.kafan.cn/attachment.p ... capxteo.exe//NSPack ThunderS Module 已检测到: Worm.Win32.AutoRun.ahy
kis2009直接制止！

显示全部楼层 · 发表于 2008-9-16 17:13:58

魔法盾成功进行拦截

显示全部楼层 · 发表于 2008-9-16 18:08:49

病毒 2008-09-16  18:08:29 C:\Documents and Settings\Administrator\桌面\病毒.rar\autorun.inf BAT.UCCT.a 清除成功
病毒 2008-09-16  18:08:29 C:\Documents and Settings\Administrator\桌面\病毒.rar\.vbs DOS.VBE.an.10000 清除成功
病毒 2008-09-16  18:08:29 C:\Documents and Settings\Administrator\桌面\病毒.rar\capxteo.exe Win32.Troj.Autorun.sz.141420 清除成功

显示全部楼层 · 发表于 2008-9-16 19:37:06

Begin scan in 'C:\Users\TOSHIBA\Downloads\瓷馮'
C:\Users\TOSHIBA\Downloads\瓷馮\.vbs
   [DETECTION] Contains recognition pattern of the VBS/Autorun.AL VBS script virus
   [NOTE] A backup was created as '49459c69.qua' ( QUARANTINE )
   [NOTE] The file was deleted!
C:\Users\TOSHIBA\Downloads\瓷馮\autorun.inf
   [DETECTION] Contains recognition pattern of the VBS/Worm.Runauto.A.1 VBS script virus
   [NOTE] A backup was created as '49439cb0.qua' ( QUARANTINE )
   [NOTE] The file was deleted!
C:\Users\TOSHIBA\Downloads\瓷馮\capxteo.exe
   [DETECTION] Is the TR/Crypt.NSPI.Gen Trojan
   [NOTE] A backup was created as '493f9c9c.qua' ( QUARANTINE )
   [NOTE] The file was deleted!

[ 本帖最后由 Kitman 于 2008-9-16 19:45 编辑 ]

显示全部楼层 · 发表于 2008-9-17 18:14:24

2008/9/17 18:13:35 已清除木马程序 Trojan.VBS.Agent.an G:\Temp\Virus\病毒.rar/.vbs
2008/9/17 18:13:35 已清除病毒 Worm.Win32.AutoRun.ahy G:\Temp\Virus\病毒.rar/capxteo.exe//NSPack

显示全部楼层 · 发表于 2008-9-17 20:16:56

re
我在下载之前特地把KAV2009关闭了然后下载打开运行微点也识别了，呵呵

btw我：
弱问，怎么抓这么小的图啊？我只会PrintScreenSysRq抓图

显示全部楼层 · 发表于 2008-9-17 20:46:16

[Scanning : C:\Download Files]

C:\Download Files\病毒.rar<RAR>:capxteo.exe <- Trojan.Autorun.Sz : No action
C:\Download Files\病毒.rar<RAR>:.vbs <- Trojan.VBS.Manual.x : No action

显示全部楼层 · 发表于 2008-9-17 20:47:11

[发现安全风险： ] <W32/AutoRun.B.gen!Eldorado (not disinfectable, 普通)> C:\Download Files\病毒.rar->capxteo.exe->(NSPack)->(PE_Patch)
[发现特洛伊木马：] <VBS/Agent.F (确切, not disinfectable)> C:\Download Files\病毒.rar->.vbs
[发现特洛伊木马：] <IS/Autorun (确切, not disinfectable)> C:\Download Files\病毒.rar->autorun.inf

---------------------------------------------------------------------
扫描已结束: 2008-9-17, 20:46:53
用时: 0:00:03

扫描结果:

已扫描的文件:    7
已感染的对象:    3
已清除的对象:    0
已隔离的文件:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-9-17 20:48:26

显示全部楼层 · 发表于 2008-9-18 01:11:47

Nod32全杀了。。。

[病毒样本] 新抓U盘病毒capxteo.exe

回复 9楼啊弥陀佛的帖子

ArcaVir2008

F-Prot 4.4.4

Norman Virus Control 5.99

本帖子中包含更多资源