{"id":53,"date":"2008-06-19T04:23:26","date_gmt":"2008-06-19T02:23:26","guid":{"rendered":"http:\/\/gcolpart.evolix.net\/blog21\/?p=53"},"modified":"2009-01-19T00:16:32","modified_gmt":"2009-01-18T22:16:32","slug":"get-the-facts-un-recent-virus-csrsexe-roxexe-bien-agressif","status":"publish","type":"post","link":"https:\/\/gcolpart.evolix.net\/blog21\/get-the-facts-un-recent-virus-csrsexe-roxexe-bien-agressif\/","title":{"rendered":"Get the facts : un r\u00e9cent virus (csrs.exe, rox.exe) bien agressif"},"content":{"rendered":"<p>Une fois n&#8217;est pas coutume, mais un r\u00e9cent virus (sous Windows bien s\u00fbr) est particuli\u00e8rement agressif. Il se propage via les p\u00e9riph\u00e9riques amovibles (cl\u00e9s USB, disques USB, cartes Flash, etc.) en copiant les ex\u00e9cutables <em><strong>csrs.exe<\/strong><\/em> et <strong><em>rox.exe<\/em><\/strong> \u00e0 la racine du p\u00e9riph\u00e9rique, ainsi qu&#8217;un <strong><em>autorun.inf<\/em><\/strong> qui lui permet de les ex\u00e9cuter plus ais\u00e9ment : l&#8217;ouverture automatique du p\u00e9riph\u00e9rique ou le double-clic sur le lecteur infecte l&#8217;ordinateur&#8230;<\/p>\n<p>Plus emb\u00eatant, ces virus infectent actuellement les machines malgr\u00e9 la pr\u00e9sence d&#8217;un antivirus \u00e0 jour. D&#8217;apr\u00e8s nos tests sur plusieurs antivirus (<em>Sophos<\/em>, <em>Norton<\/em>, <em>Kaspersky<\/em>, etc.), le plus efficace est <em><strong>AVIRA ANTIVIR<\/strong><\/em> avec une base d&#8217;antivirus up-to-date. J&#8217;esp\u00e8re que des mises-\u00e0-jour sortiront rapidement pour les autres produits car le virus a l&#8217;air particuli\u00e8rement virulent en se propageant dans plusieurs centaines de fichiers sur chaque syst\u00e8me. Autre d\u00e9tail &#8220;amusant&#8221;, il cr\u00e9e une cl\u00e9 dans la base de registre nomm\u00e9e <em><strong>LOL<\/strong><\/em>.<\/p>\n<p>\u00c0 des fins de tests, voici un fichier ZIP (prot\u00e9g\u00e9 par le mot de passe <em>pimpampoum<\/em>) contenant le virus : <a href=\"http:\/\/gcolpart.evolix.net\/docs\/virus-csrs.zip\">http:\/\/gcolpart.evolix.net\/docs\/virus-csrs.zip<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Une fois n&#8217;est pas coutume, mais un r\u00e9cent virus (sous Windows bien s\u00fbr) est particuli\u00e8rement agressif. Il se propage via les p\u00e9riph\u00e9riques amovibles (cl\u00e9s USB, disques USB, cartes Flash, etc.) en copiant les ex\u00e9cutables csrs.exe et rox.exe \u00e0 la racine du p\u00e9riph\u00e9rique, ainsi qu&#8217;un autorun.inf qui lui permet de les ex\u00e9cuter plus ais\u00e9ment : l&#8217;ouverture [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5,72],"tags":[28,29],"class_list":["post-53","post","type-post","status-publish","format-standard","hentry","category-evolix","category-french","tag-virus","tag-windows"],"_links":{"self":[{"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/posts\/53","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/comments?post=53"}],"version-history":[{"count":2,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/posts\/53\/revisions"}],"predecessor-version":[{"id":156,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/posts\/53\/revisions\/156"}],"wp:attachment":[{"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/media?parent=53"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/categories?post=53"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/gcolpart.evolix.net\/blog21\/wp-json\/wp\/v2\/tags?post=53"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}