mm.exe 第405次更新 3月31日第2次更新假借瑞星之名

显示全部楼层 · 发表于 2009-3-15 16:29:19

第1至28次更新:
http://bbs.kafan.cn/thread-322929-1-1.html
第29至54次更新:
http://bbs.kafan.cn/thread-331871-1-1.html
第55至80次更新:
http://bbs.kafan.cn/thread-342389-1-1.html
第81至116次更新:
http://bbs.kafan.cn/thread-352114-1-1.html
第117至160次更新:
http://bbs.kafan.cn/thread-366834-1-1.html
第161至210次更新:
http://bbs.kafan.cn/thread-382752-1-1.html
第210至258次更新:
http://bbs.kafan.cn/thread-401335-1-1.html
第258至297次更新:
http://bbs.kafan.cn/thread-416415-1-1.html
第298至365次更新:
http://bbs.kafan.cn/thread-426160-1-1.html
====================
3月31(晚上,今天第2次)
3d4bfeb678cb299222a76a729b7cbfb8  3.ex3e
9f1427636f7007746f966fb2966d9047  8.exe2
to kl

2fff4b096d8850e11692fa3c9181c7c7  TIMPIatform.exe3
to kl

3.ex3e - Trojan-Dropper.Win32.Agent.alfy
8.exe2 - Trojan-GameThief.Win32.OnLineGames.uuco
TIMPIatform.exe3 - Trojan-Downloader.Win32.Small.ajuj
====================
3月31(早上,今天第1次)
e3018dce0230ec89a70b69833a97e69c 1.exe3
42089c157c78202a339720a820687b05 9.exe2
to kl

9d156cc710ddc49201f1dd1d3bfd2da3 TIMPIatform.exe3
to kl

1.exe3 - Trojan-Dropper.Win32.Small.czn
9.exe2 - Trojan-GameThief.Win32.OnLineGames.uuca
TIMPIatform.exe3 - Trojan-Downloader.Win32.Small.ajui
====================
3月30(晚上,今天第2次)
ea46b0bd13eeda93ab70995e783337e4 1.exe
to kl

f912222bf3e08aeeee280e4541cb667b TIMPIatform.exe3
to kl

1.exe2 - Trojan-Dropper.Win32.Agent.aldm
TIMPIatform.exe3 - Trojan-Downloader.Win32.Small.ajuc
====================
3月30(早上,今天第1次)
e14d0a686f4039ec70e51708ef2365f7 1.exe
0fb034d9ddb68c7f7edc53df805bc9db 9.exe
to kl

67e3483b989912ba394dace7c9021d13 TIMPIatform.exe3
to kl

1.exe1 - Trojan-Dropper.Win32.Agent.alef
9.exe1 - Trojan-GameThief.Win32.OnLineGames.uuad
TIMPIatform.exe3 - Trojan-Downloader.Win32.Small.ajtz
====================
3月29(晚上,今天第2次)
9b24290617778dbee513b63e3eb8f281  9.exe
to kl

9.exe3 - Trojan-GameThief.Win32.OnLineGames.utzr
====================
3月29(早上,今天第1次)
62dd87991b005a7c6108f8001e3fab7e 1.exe1
af29df49f243cc925467dd4bf2cac2ff 9.exe1
ac1b2635f74825891df62f6fc41c3fe1 aa.exe1
to kl

feb825fbf6b5ecc270aeca28df270eef TIMPIatform.exe2
451edbcd92037a6251358fb1294ebddc wa.dll2
to kl

1.exe1 - Trojan-Dropper.Win32.Small.czk
9.exe1 - Trojan-GameThief.Win32.OnLineGames.utzc
TIMPIatform.exe2 - Trojan-Downloader.Win32.Small.ajtq
aa.exe1 - Worm.Win32.AutoRun.adic
wa.dll2 - Trojan-Dropper.Win32.Agent.akzb
====================
3月28(晚上,今天第3次)
ac1b2635f74825891df62f6fc41c3fe1  aa.exe1
21cc23d4a6b112910d267c0e28d0b720  1.exe1
96eba1c78f859001a938370535bc55bb  9.exe1
to kl

2ed3478bf1bd8a003e63a5cd154f21e2 TIMPIatform.exe1
451edbcd92037a6251358fb1294ebddc wa.dll1
to kl

1.exe_ - Trojan-Dropper.Win32.Agent.akzf,
wa.dll1 - Trojan-Dropper.Win32.Agent.akzb
9.exe_ - Trojan.Win32.Agent.bxrv,
aa.exe_ - Worm.Win32.AutoRun.adic,
TIMPIatform.exe_ - Trojan-Downloader.Win32.Small.ajsw
====================
3月28(中午,今天第2次)
c4319ab3551cf9b12102bb2251d32936  aa.exe
to kl

02f5e8b17edd637145c42d16dc3ad546  dllB3.tmp
8e3231be23ed49bdb193f8e170cd10a9  wu.dll
to kl

aa.e3xe - Trojan-Dropper.Win32.Agent.akzn
wu.dl3l - Trojan-Dropper.Win32.Agent.akyp
dllB3.tm2p - Trojan.Win32.AntiAV.asp,
====================
3月28(早上,今天第1次)
7f69239fe041aab4c095d02b9c93a5dc  1.exe
1f64b8972b4c6cf9579d39b9ee2fe48f  9.exe
f2e8a7f60225d95fc1c28f36111a4fd9  aa.exe
78f112c24157649b471246591526ffff  x.gif
to kl

841bc78eb883d430e59c001d26445769  TIMPIatform.exe2
67f343cadbc1ce9a3386b678f0ce12c3  rnnb.dll2
to kl

1.exe1 - Trojan-Downloader.Win32.Agent.bpjs,
9.exe1 - Trojan-GameThief.Win32.OnLineGames.utyf,
aa.exe1 - Worm.Win32.AutoRun.fjm,
rnnb.dll2 - Trojan-Dropper.Win32.Agent.akyi,
TIMPIatform.exe2 - Trojan-Downloader.Win32.Small.ajss
====================
3月27(早上加中午,今天第1次)
4513d82e2da2fe74029b38f5860d2561  x.gif1
9c612f948e49b449bae3cafd0db17095  1.exe1
d891eaeba8f139bb2ea08f2c5412cbe5  x.gif2
f72fd9ca7b89a2048d46c67f0d665e9f  1.exe2
0b454146644a26752885ee8d0548f90f  9.exe2
to kl

ed2732a32ef5fe5271aae91756a5f7b5  TIMPIatform.exe2
6e471d9cc46536a0506fa3a0d58b37fe  TIMPIatform.exe1
to kl

1.exe2 - Trojan-Dropper.Win32.Small.czj,
9.exe_ - Trojan-GameThief.Win32.OnLineGames.utxi,
TIMPIatform.exe_ - Trojan-Downloader.Win32.Agent.bpeh
1.exe_ - Trojan-Dropper.Win32.Agent.akvy,
TIMPIatform.exe1 - Trojan-Downloader.Win32.Small.ajse
x.gif2 protected by password
x.gif1 clean
====================
3月26(晚上,今天第2次)
9920f6ede51dcc2a7ef925bf6068938f  9.exe
c5806355962a8c9514b786509a9ddfe6  1.exe
to kl

6e471d9cc46536a0506fa3a0d58b37fe  TIMPIatform.exe2
to kl

1.exe2 - Trojan-Dropper.Win32.Agent.akvb
9.exe3 - Trojan-GameThief.Win32.OnLineGames.utvp,
TIMPIatform.exe2 - Trojan-Downloader.Win32.Small.ajse
====================
3月26(早上,今天第一次)
2542348a05bc9662b784a0831b9482e3  1.exe
c2edd3bd7a2177ddd3e28c80ef5071af  9.exe
to kl

1.exe2- Trojan-Dropper.Win32.Agent.akti
9.exe2 - Trojan-GameThief.Win32.OnLineGames.utvb
====================
3月25(中午,今天第二次)
fa931634dd4283f4ffa118cc8abe8621  1.exe
to kl

f38b68cf22450bb9101bc4b4c64a3443  TIMPIatform.exe3
to kl

Trojan-Dropper.Win32.Agent.aksf
Trojan-Downloader.Win32.Small.ajrw
====================
3月25(早上,今天第一次)
097c969ac3eb422bdbdca5bd0a87d3ad 1.exe
6b10fcc5d05369008ff226a87bb7bfbc 9.exe
to kl

b893e49e0dac8a2743d210e31afc778d TIMPIatform.exe1
to kl

1.exe1,TIMPIatform.exe1 - Trojan-Downloader.Win32.Agent.bowl
9.exe1 - Trojan-GameThief.Win32.OnLineGames.uttk
====================
3月24(晚上)
fb612b2e7d4a09af4986117c709b2f12  1.exe
to kl

0c0ae9c22c9bcb293e9ce16630f0ba2f  TIMPIatform.exe3
to kl

1.exe3 - Trojan-Dropper.Win32.Agent.akpy,
TIMPIatform.exe3 - Trojan-Downloader.Win32.Small.ajrs
====================
3月24(中午)
d7638903e602c080eed9130a5c7d3d5f  1.exe3
720c054aba9c81af5f0103b0f1d857da  xx.exe3
702d32ad61f9930fc4b2550cb0ecf8e4  9.exe3
to kl

f9dd4a864d4862904a1daf38396c4c6d  br.dll3
63787aefd57cf7f8335a24ca09ab52e2  TIMPIatform.exe
to kl

1.exe3 - Trojan-Dropper.Win32.Agent.akkz,
9.exe3 - Trojan.Win32.Agent.bwyb,
br.dll3 - Trojan.Win32.Agent.bwyc,
TIMPIatform.exe3 - Trojan-Downloader.Win32.Small.ajrm,
xx.exe3 - Worm.Win32.AutoRun.adax
====================
3月23(晚上)
ff3e9a3428778d0aff88b739330dc415  xx.exe
a487da9fb1acc79249cc95efc7db8235  1.exe
to kl

a6ed4d96cbcb9006f3847ed50ae40780  TIMPIatform.exe3
88548a2f6caabc4f03142f9561e9672b  bl.dll
5f65ae8ccae965c0536ca1b8d5d85670  rsss.sys3
to kl

====================
3月23(中午)
427dd9653b9bc5c836c1cf8ea6cad3ab  x.gif2
54b092cc48afcd6be784c8c4d21fb6ad  xx.exe2
3ae57ff91caa0d922e9334e5bb85c5ee  1.ex2e
to kl

60695c3a599a62e561806d54f03a47aa  pk.dll2
to kl

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.
x.gif2 protected by password
====================
3月23(早上)
e9df47e9cbc3dbdbe4133924d17e505a 9.exe
986440a64dd7904207c6b07f68eec7c5 1.exe
124daeacb91250e10827888c29c12ad9 x.gif
1bf4dc2300227ed60975c08387bf7fba xx.exe
to kl

bc562f44f02b3023e885258f7c9c4bb0  rsss.sys
7dff86d4ad41b4e933a1b6098052a7ec  TIMPIatform.exe2
6e33c26524b1c39a0d0e51d8e1ca909c  txl.dll2
to kl

1.exe2 - Trojan-Dropper.Win32.Agent.akdv
9.ex2e - Trojan-Dropper.Win32.Agent.akds
x.gif2.--_ .exe - Worm.Win32.AutoRun.acyh
xx.ex2e - Worm.Win32.AutoRun.fid
rsss.sys - Rootkit.Win32.Tiny.bi
TIMPIatform.exe2 - Trojan-Downloader.Win32.Small.ajre
txl.dll2 - Trojan-Dropper.Win32.Agent.akdt
====================
3月22:(晚上)
15348c1d269ecada50ea22f39d6ea505  x.gif
to kl

x.gi2f.--_ .exe - Worm.Win32.AutoRun.acwj
====================
3月22:(中午)
813719d8434a5ad0beaf9f030aa6ef9f  1.exe
2ba658b8c821ee8c2ed425b4f0da2a43  9.exe
to kl

8acdb7f20858b2acaf47779f2d39299f  TIMPIatform.exe2
to kl

Its detection will be included in the next update.
====================
3月22:(早上)
10ec53df0d11b94a84b7364db3ebec6c x.gif
0c6aa66cad2feb09b4cb612e2176d8e5 9.exe
6b1836d32345afc75e83e3726eec7ffb 1.exe
to kl

401ee44174d4a80084773473ec0f3ded TIMPIatform.e3xe
to kl

This file is already detected. Please update your bases.
====================
3月21:(晚上)
7efb4a6deab73045c2afc20b8bf51f2f 1.exe
55ea0f490498ba6105e4f762bacf76a5 x.gif
to kl

3414d17850baf3d9db39368a2730cbca TIMPIatform.exe2

1.ex2e - Trojan-Dropper.Win32.Small.cyq
x.g2if.--_ .exe - Worm.Win32.AutoRun.fht
TIMPIatform.exe2 - Trojan-Downloader.Win32.Small.ajqx
====================
3月21:(中午)
92aa4d284d50fa13b9329f2ab7993ff3  x.gif
3c588f443ecb2c0b9a60c2dd38360df6  1.exe
to kl

生成跟上一包一样
1.exe1 - Trojan-Dropper.Win32.Small.cyp,
x.gif2 - Worm.Win32.AutoRun.fhr
====================
3月21:(上午)
9f8f21e30969b65928210dd941c1683e  1.exe
be160913ad951c5bd9c9026fc2a68154  9.exe
54b092cc48afcd6be784c8c4d21fb6ad  mm.exe (卡巴报,不上报这个)
271fe77fed76edc8bef4b6677f7fea43  x.gif
to kl

757ec8134be88a947e1f6f21cdc08f41  TIMPIatform.exe_
to kl

1.exe_ - Trojan-Dropper.Win32.Small.cyp,
9.exe_ - Trojan-GameThief.Win32.OnLineGames.bkzx,
TIMPIatform.exe_ - Trojan-Downloader.Win32.Small.jky,
x.gif_ - Worm.Win32.AutoRun.fhs
====================
3月20第3次:
b2c64c1b95f0807f612cb0aec99bf779 x.gif
to kl

x.gi3f.--_ .exe - Worm.Win32.AutoRun.actv
====================
3月20第2次:
dc46dbe52afd94de04814f6ad90c4f62  9.exe3
ea8ba5b1e46e82f308a828d9cf3073b5  x.gif2
ae3a0f4857f75dbea30bc354d4c6b7b3  1.exe3
to kl

4818805c4c3e0fc2a13d19d836c4b3e6  TIMPIatform.exe2
to kl

1.exe3 - Trojan-Dropper.Win32.Small.cyp
9.exe3 - Trojan-GameThief.Win32.OnLineGames.utnk
x.gif2.--_ .exe - Worm.Win32.AutoRun.acur
TIMPIatform.exe2 - Trojan-Downloader.Win32.Small.ajqt
====================
3月20:
47a1fcfc482a568a09cd812da9f4d7b9  x.gif
185dc547e4ab2ad95a60248f0f4d6697  1.exe
dc46dbe52afd94de04814f6ad90c4f62  9.exe
54b092cc48afcd6be784c8c4d21fb6ad  mm.exe
to kl

60695c3a599a62e561806d54f03a47aa  pk.dll2
2a4ba4e773510b1f89d59e5542d66d1a  TIMPIatform.exe2
to kl

1.ex1e - Trojan-Dropper.Win32.Agent.ajyy
9.ex2e - Trojan-GameThief.Win32.OnLineGames.utnk
mm.ex2e - Worm.Win32.AutoRun.actb
x.gif2.--_ .exe - Worm.Win32.AutoRun.acth
pk.dll2 - Trojan-Dropper.Win32.Agent.ajyc
TIMPIatform.exe2 - Trojan-Downloader.Win32.Small.ajqr
====================
3月19第3次:
a787980db719f3edd84a6fce6efd06dd  9.exe
25c8b92c3b07e1bdf800e659a2dd8a5a  mm.exe
e9fba2409bbb3ab4f3af01eefdc8a760  x.gif
1c6805bb47e84ca2897ae1c2c96c02c3  1.exe
to kl

ce5b92d04148909e0857655a8a03056f  TIMPIatform.exe3
to kl

Detection will be included in the next update. Thank you for your help.
====================
3月19第2次:
938a261fe143e1bcb067c17fe3922041 x.gif
2d2e16541e7b2877df1af39226e71174 mm.exe
12d9bf8c51401caa942406f45c267a27 1.exe
to kl

c1e92bb73001761a89fd4be3ec2133cf msdd.dll2
8ee09ff5fb5d2842802ad0031d8b37fc TIMPIatform.exe2
to kl

1.exe_ - Trojan-Dropper.Win32.Small.cxy,
TIMPIatform.exe_ - Trojan-Downloader.Win32.Small.ajqj
##.exe_, mm.exe_, msdd.dll2 - Backdoor.Win32.Small.hrt
====================
3月19:
07ab9c12f9e26d905b16014cc076cbe3  x.gif
c562b3e7314668ea7c728c42ccd4afd8  mm.exe
671408557734f1872a33764bdfa56cea  1.exe
8b67d4024d70fb062f2520ad49bce370  9.exe
to kl

d9dfc8602ec8dcfe425fc70940780616  WUHANWANGD.pif
56367d7acde61f9351aa7baab169bd5a  rssd.dll3
93b1f1bbacc2f7dc194efc14ab36bcca  TIMPIatform.exe2
to kl

1.exe1 - Trojan-Dropper.Win32.Small.cxy,
rssd.dll3 - Worm.Win32.AutoRun.acra
9.exe1 - Trojan-GameThief.Win32.OnLineGames.utlm,
mm.exe1, x.gif1 - Worm.Win32.AutoRun.fhg,
TIMPIatform.exe2 - Trojan-Downloader.Win32.Small.jkp,
WUHANWANGD.p2if - Trojan.Win32.Agent2.fuu
====================
3月18第3次:
10e9d33621d56e9f2064b70b16061474  xx.exe
058b83d1620e1d9c8b040c70c5a8e7d9  x.gif
761b88fee2649558c1e87743d20746a8  9.exe
28445ff72505f32b7928e1eea5f31627  1.exe
to kl

93b1f1bbacc2f7dc194efc14ab36bcca  TIMPIatform.ex2e
d9dfc8602ec8dcfe425fc70940780616  WHWB.pif
to kl

9.ex2e - Trojan-GameThief.Win32.OnLineGames.utkp
1.ex2e - Trojan-Dropper.Win32.Small.cxw,
TIMPIatform.ex2e - Trojan-Downloader.Win32.Small.jkp,
WHWB.pif_ - Trojan.Win32.Agent2.fuu,
x.gif3 - Worm.Win32.Agent.ue,
xx.exe2 - Worm.Win32.AutoRun.fhg
====================
3月18第2次:
902e78b4d77c33373fac88994a023b85  1.exe
79049c23a2a92a3ce9b5b6994ff17c47  mm.exe
d74590a27aab83376c276383814ec493  x.gif
to kl

82a807c6f82189099d9e9115d3fe0967  kif.pif
01f74af800785df43a26d0a90bbecf49  TIMPIatform.exe1
to kl

1.exe2 - Trojan-Dropper.Win32.Agent.ajtw,
kif.pif_ - Trojan.Win32.Agent2.fru,
mm.exe3, x.gif2 - Worm.Win32.Agent.uc,
TIMPIatform.exe1 - Trojan-Dropper.Win32.Small.cxi
====================
3月18:
7975713f3139eb72c9c94de794c592e8 9.exe
902e78b4d77c33373fac88994a023b85 1.exe
7fc845b6d25187d2c3b19da0e7cae790 x.gif
to kl

01f74af800785df43a26d0a90bbecf49 TIMPIatform.exe
to kl

1.ex2e - Trojan-Dropper.Win32.Agent.ajtw,
TIMPIatform.exe3 - Trojan-Dropper.Win32.Small.cxi,
x.gif2 - Worm.Win32.AutoRun.acpf
9.ex3e - Trojan.Win32.Agent.bvru
====================
3月17第2次:
f5e0c0b8f45be6ad3854a8a9af7c517f  1.exe
75495a55f743eb1e56cc793227a52584  x.gif
to kl

0a7f803f676f8f820141f7c613f431b7  TIMPIatform.exe
to kl

Trojan-Dropper.Win32.Agent.ajtg
Worm.Win32.Agent.ud
Trojan-Dropper.Win32.Small.cxf
====================
3月17:
9d0a30baace3af211a59d7cdc8a7ec1a  9.exe
f58e6f940b8fe114b367ac6402ca83c8  mm.exe
606c246e996a4f1dcdcbf54d48b720d3  x.gif
32d043894c75145935b884497c64aaf8  1.exe
to kl

ef1c55b97b1a6b65bd220e982291fd73  TIMPIatform.exe
03e05c9325f45b05da8329f2c8509e0d  bccd.dll
25f83bbbd57ebdde2a570ae10c7789b8  MD.pif
to kl

Detection will be included in the next update.
====================
3月16第2次:
4296d1f4e8a991cde07ff82f893fae10 1.exe
2923b250a3660c034aa7831d5e6d7f3c x.gif
08881e1d25afb5051e25e64c0455d4de 9.exe
f58e6f940b8fe114b367ac6402ca83c8 mm.exe
to kl

bc210a2f8ea364f43bbf5404fc78917a TIMPIatform.exe3
25f83bbbd57ebdde2a570ae10c7789b8 MD.pif
to kl

e2 - Trojan-Downloader.Win32.Small.ajpq
9.exe3 - Trojan.Win32.Agent.bvig
TIMPIatform.exe3 - Trojan-Downloader.Win32.Agent.blnd
mm.exe3 - Worm.Win32.AutoRun.fgz
MD.pi3f - Trojan.Win32.Agent2.fqb
x.gif3(这个出錯,是垃圾文件)
====================
3月16:
dd7df3b30b5c799d39460fbc1f019c6a  1.exe
f982f27937318d9305f3ac6c55b878b1  mm.exe
de1cf5520667e21bee352019eb0e037b  x.gif
to kl

bd19dd578fbf92b44527695d25d605d5  TIMPIatform.exe
d3470adb6c198c382623abc0ed488d70  MD.pif
to kl

e3 - Trojan-Dropper.Win32.Agent.ajls
mm.exe2,x.gif2.--_ .exe - Worm.Win32.AutoRun.fgv
MD.pif2 - Trojan-Dropper.Win32.Agent.ajll
TIMPIatform.e2xe - Trojan-Downloader.Win32.Agent.bljt
====================
3月15第3次:
a80cda792e228149119560d97784d58a  1.exe
to kl

1b6ab4ea4e438f6c5c2edec20040dd0c  TIMPIatform.exe
to kl

1.exe_ - Trojan-Downloader.Win32.Small.jkd,
TIMPIatform.exe_ - Trojan.Win32.Small.bvs
====================
3月15第2次:
a75c4d196838d6f2df7413cd3384420a mm.exe
8127b29d970c028fdb2f8c546f3d2b31 x.gif
to kl

a49e61374a3a666568191e46d0094f75 MD.pif
to kl

##.exe_, mm.exe2 - Trojan-Dropper.Win32.Agent.ajjz,
MD.pif2 - Trojan-Dropper.Win32.Agent.ajjw
====================
3月15:
3c174ee6ed0f6aa2f53c20a661d6cdb3 mm.exe1
3f21bad9bb2111e67f34d1158f61ec05 1.exe1
77d51eb22931573071f2b99c38725a3e x.gif1
to kl

ee0647bfe6dad03058f7f9b4be0ab6ba MD.pif
to kl

##.exe_, mm.exe1 - Worm.Win32.AutoRun.fgo,
1.exe1 - Trojan-Dropper.Win32.Agent.ajiy
MD.pif_ - Trojan-Dropper.Win32.Small.cxa
====================

[ 本帖最后由 sam.to 于 2009-4-2 22:10 编辑 ]

显示全部楼层 · 发表于 2009-3-15 16:31:26

mm.exe 家族生命力果然旺盛。。

显示全部楼层 · 发表于 2009-3-15 16:33:40

mm有很多別名,如flashmm,xx

显示全部楼层 · 发表于 2009-3-15 16:44:24

第366次更新 3月15日第1次更新

显示全部楼层 · 发表于 2009-3-15 16:47:34

go on sending to rs

显示全部楼层 · 发表于 2009-3-15 16:53:54

Starting the file scan:

Begin scan in 'D:\new\1.exe1'

D:\new\1.exe1
   [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    A backup was created as '4a21c2ab.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\new\mm.exe1'
D:\new\mm.exe1
   [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    A backup was created as '49eac2ea.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\new\x.gif1'
D:\new\x.gif1
[0] Archive type: RAR
--> ￕￕￆﾬ                                                                                                                                                             .exe
   [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
[NOTE]    A backup was created as '4a23c2ab.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
Begin scan in 'D:\new\0315-1635mm-c'
D:\new\0315-1635mm-c\MD.pif2
[DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    A backup was created as '49eac2c1.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年3月15日  16:55
Used time: 00:08 Minute(s)

The scan has been done completely.

   1 Scanning directories
   5 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   4 files were deleted
   0 files were repaired
   4 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   4 Notes

[ 本帖最后由 Sebastian 于 2009-3-15 16:59 编辑 ]

显示全部楼层 · 发表于 2009-3-15 17:43:47

Name: Packed/NSPack
Type: Sequence

Description:

Files:
c:\users\administrator\desktop\0315-1635mm-c\x.gif1|照片 .exe

显示全部楼层 · 发表于 2009-3-15 17:59:03

DR.WEB KILL ALL

显示全部楼层 · 发表于 2009-3-15 18:01:29

第367次更新 3月15日第2次更新

显示全部楼层 · 发表于 2009-3-15 18:05:11

DR.WEB KILL All

[病毒样本] mm.exe 第405次更新 3月31日第2次更新假借瑞星之名

本帖子中包含更多资源

评分

回复 2楼 qianwenxiang 的帖子

回复 4楼 sam.to 的帖子

回复 9楼 sam.to 的帖子

[病毒样本] mm.exe 第405次更新 3月31日第2次更新 假借瑞星之名

本帖子中包含更多资源

评分

回复 2楼 qianwenxiang 的帖子

回复 4楼 sam.to 的帖子

回复 9楼 sam.to 的帖子

[病毒样本] mm.exe 第405次更新 3月31日第2次更新假借瑞星之名