引用第4楼knktc于2009-07-28 19:12发表的 :
诡异的autorun.inf文件，不知道是个什么东西。没有高级工具能用，不知道该怎么分析……
文件 u.zip 接收于 2009.07.28 11:21:19 (UTC)反病毒引擎版本最后更新扫描结果a-squared4.5.0.242009.07.28Net-Worm.Win32.Kido!IKAhnLab-V35.0.0.22009.07.28Win32/Conficker.worm.165025AntiVir7.9.0.2282009.07.28TR/Crypt.ZPACK.GenAntiy-AVL2.0.3.72009.07.28Worm/Win32.Kido.genAuthentium5.1.2.42009.07.27W32/Conficker!GenericAvast4.8.1335.02009.07.27Win32:ConfiAVG8.5.0.3872009.07.28I-Worm/Generic.COLBitDefender7.22009.07.28Worm.Generic.63560CAT-QuickHeal10.002009.07.28Worm.Conficker.bClamAV0.94.12009.07.28Worm.Kido-34Comodo17932009.07.28NetWorm.Win32.Kido.~ADrWeb5.0.0.121822009.07.28Win32.HLLW.Shadow.basedeSafe7.0.17.02009.07.27-eTrust-Vet31.6.66432009.07.28Win32/ConfickerF-Prot4.4.4.562009.07.27W32/Conficker!GenericF-Secure8.0.14470.02009.07.28Worm:W32/Downadup.gen!AFortinet3.120.0.02009.07.28W32/Conficker.B!wormGData192009.07.28Worm.Generic.63560IkarusT3.1.1.64.02009.07.28Net-Worm.Win32.KidoJiangmin11.0.8002009.07.28I-Worm/Kido.cK7AntiVirus7.10.8032009.07.27Net-Worm.Win32.Downadup.eoKaspersky7.0.0.1252009.07.28Net-Worm.Win32.Kido.ihMcAfee56902009.07.27W32/Conficker.worm.gen.aMcAfee+Artemis56902009.07.27W32/Conficker.worm.gen.aMcAfee-GW-Edition6.8.52009.07.28Trojan.Crypt.ZPACK.GenMicrosoft1.49032009.07.28Worm:Win32/Conficker.CNOD3242842009.07.28a variant of Win32/Conficker.AANorman6.01.092009.07.28W32/Conficker.CRnProtect2009.1.8.02009.07.28-Panda10.0.0.142009.07.27W32/Conficker.C.wormPCTools4.4.2.02009.07.27Net-Worm.Kido.lPrevx3.02009.07.28High Risk WormRising21.40.12.002009.07.28Worm.Win32.Undef.dcSophos4.44.02009.07.28Mal/Conficker-ASunbelt3.2.1858.22009.07.28Bulk TrojanSymantec1.4.4.122009.07.28W32.Downadup.BTheHacker6.3.4.3.3752009.07.28W32/Conficker.genTrendMicro8.950.0.10942009.07.28WORM_DOWNAD.ADVBA323.12.10.92009.07.28Worm.Win32.kido.110ViRobot2009.7.28.18572009.07.28Worm.Win32.Conficker.165025VirusBuster4.6.5.02009.07.27Worm.Kido.KL 附加信息File size: 183845 bytesMD5...: 57c993ddae47217a951b8454c65fa569SHA1..: 828e2b52309de6704e4b6958903d297ec155e680SHA256: 6dbe029c187cd99b09c45baeaf227af0a212bfda771fd5efbf073b1f0a93009fssdeep: 3072:KhlixHKXOzaKf/gDOg+A2O8Ziv9oraLk2mbGZjZ+vcqSrlY9IHjFqXu/Gw01F:KqqvaYDOd/Av91nmbGFMvcdBhHjMzPEiD..: -TrID..: File type identificationZIP compressed archive (99.8%)Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%)PEInfo: -PDFiD.: -RDS...: NSRL Reference Data Set-packers (F-Prot): Unicodepackers (Antiy-AVL): CrypToCrackPeProtector0.93Prevx info:
http://info.prevx.com/aboutprogramtext.asp?PX5=C08CB322A11A7B22846302B3E6FCD9005C30027A 
