{"id":512,"date":"2009-04-23T22:41:26","date_gmt":"2009-04-24T02:41:26","guid":{"rendered":"http:\/\/arielantigua.com\/weblog\/?p=512"},"modified":"2009-04-23T22:41:26","modified_gmt":"2009-04-24T02:41:26","slug":"confiker-en-mi-usb","status":"publish","type":"post","link":"https:\/\/arielantigua.com\/weblog\/2009\/04\/confiker-en-mi-usb\/","title":{"rendered":"Confiker en mi USB ?"},"content":{"rendered":"

Si… al parecer mi Memoria USB fue victima de Confiker, no se cual variante pero definitivamente es este gusano… por suerte me percate a tiempo y conecte la memoria en mi Mac Mini donde encuentro el archivo responsable de infectar la PC y el .exe que me imagino es el gusano….<\/p>\n

mini:\/Volumes\/ARIEL’S USB ariel$ more autorun.inf
\n[autorun]
\nopen=CONFIG\\S-1-5-21-1482476501-1644491937-682003330-1013\\usr.exe
\nicon=%SystemRoot%\\system32\\SHELL32.dll,4
\naction=Open folder to view files
\nshell\\open=Open
\nshell\\open\\command=CONFIG\\S-1-5-21-1482476501-1644491937-682003330-1013\\usr.exe
\nshell\\open\\default=1
\nmini:\/Volumes\/ARIEL’S USB ariel$<\/p><\/blockquote>\n

mini:\/Volumes\/ARIEL’S USB ariel$ cd CONFIG\/
\nmini:\/Volumes\/ARIEL’S USB\/CONFIG ariel$ ls
\nS-1-5-21-1482476501-1644491937-682003330-1013
\nmini:\/Volumes\/ARIEL’S USB\/CONFIG ariel$ cd S-1-5-21-1482476501-1644491937-682003330-1013\/
\nmini:\/Volumes\/ARIEL’S USB\/CONFIG\/S-1-5-21-1482476501-1644491937-682003330-1013 ariel$ ls
\nDesktop.ini\u00a0\u00a0\u00a0\u00a0 usr.exe
\nmini:\/Volumes\/ARIEL’S USB\/CONFIG\/S-1-5-21-1482476501-1644491937-682003330-1013 ariel$<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

Si… al parecer mi Memoria USB fue victima de Confiker, no se cual variante pero definitivamente es este gusano… por suerte me percate a tiempo y conecte la memoria en mi Mac Mini donde encuentro el archivo responsable de infectar la PC y el .exe que me imagino es el gusano…. mini:\/Volumes\/ARIEL’S USB ariel$ more […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-512","post","type-post","status-publish","format-standard","hentry","category-general"],"_links":{"self":[{"href":"https:\/\/arielantigua.com\/weblog\/wp-json\/wp\/v2\/posts\/512","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/arielantigua.com\/weblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/arielantigua.com\/weblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/arielantigua.com\/weblog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/arielantigua.com\/weblog\/wp-json\/wp\/v2\/comments?post=512"}],"version-history":[{"count":0,"href":"https:\/\/arielantigua.com\/weblog\/wp-json\/wp\/v2\/posts\/512\/revisions"}],"wp:attachment":[{"href":"https:\/\/arielantigua.com\/weblog\/wp-json\/wp\/v2\/media?parent=512"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/arielantigua.com\/weblog\/wp-json\/wp\/v2\/categories?post=512"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/arielantigua.com\/weblog\/wp-json\/wp\/v2\/tags?post=512"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}