[警告]警告 MSN大中毒 請各位不要接收來路

[robert28]

警告 MSN大中毒　請各位不要接收來路不名滴檔案　例如：underware.pif及LMAO.pif及LOL或其他任何名稱滴檔案 此軟體會自動讓中毒者傳檔給任何一位線上朋友　　並且不斷的重復傳送　　死都別接受　中毒者自動登入MSN　關也關不掉　　請不要接受任何檔案～～～並請各位告知

最新MSN病解說
http://big5.pconline.com.cn/b5/www.pconline.com.cn/pcedu/soft/virus/da/0501/542145.html


解毒法
http://securityresponse.symantec.com/avcenter/venc/data/w32.bropia.html

Bropia 病毒說明

趨勢 (TrendMicro):
http://www.trendmicro.com/vinfo/zh-tw/
virusencyclo/default5.asp?VName=WORM_BROPIA.F

賽門鐵克 (Symantec):
http://securityresponse.symantec.com/avcenter/
venc/data/w32.bropia.html

Computer Associates:
http://www3.ca.com/securityadvisor/
virusinfo/virus.aspx?ID=41460

McAfee:
http://vil.nai.com/vil/content/v_131202.htm

[robert28]

如果您有接受，而沒有開啟 *.pif 等檔案，請放心，您沒有中毒。

如果您開啟了，解毒方法之一：
可下載趨勢防毒零時軟體，也就是說您不一定要是趨勢防毒軟體的使用者

Damage Cleanup Engine / Template
As of Feb 02, 2005, the latest Damage Cleanup Template (DCT) pattern number is 505, and the latest Damage Cleanup Engine (DCE) version is 3.9.
WORM_BAGLE.AZ 是 中度風險 的病毒警戒
下載：http://www.trendmicro.com/ftp/products/tsc/tsc.zip

該程式會進行掃瞄並且刪除，掃瞄完畢後會產生Report資訊.
可以看出該軟體做了什麼工作[

祝大家防毒百分百.

P.S: 這是我的掃瞄報告


Quote:
Damage Cleanup Engine (DCE) 3.9(Build 1020)
Windows XP(Build 2600: Service Pack 1)

Start time : 星期四 二月 03 2005 13:48:41

Load Damage Cleanup Template (DCT) "C:Download sc sc.ptn" (version 505) [success]
WORM_SDBOT.APA[virus found]
-->delete registry key("HKEY_CLASSES_ROOT",".key","") success
WORM_BROPIA.F[virus found]
-->delete file("C:WINDOWSSystem32msnus.exe","","") success
WORM_AGOBOT.AJC[virus found]
-->delete registry data("n/a","SoftwareMicrosoftOLE","winhost.exe") success
-->delete registry data("HKEY_LOCAL_MACHINE","SOFTWAREMicrosoftWindowsCurrentVersionRunServices","winhost.exe") success
-->delete registry data("HKEY_LOCAL_MACHINE","SOFTWAREMicrosoftWindowsCurrentVersionRun","winhost.exe") success
-->delete file("C:WINDOWSSystem32winhost.exe","","") success

Complete time : 星期四 二月 03 2005 13:49:27
Execute pattern count(1846), Virus found count(3), Virus clean count(3), Clean failed count(0)