3个，红伞挂[MD5: 770446 1584AA 1816E7]

hj5abc

运行mminstall.exe..

2007-7-16 19:27:31 AMON file C:\windows\system32\dynur.dll a variant of Win32/TrojanDownloader.Agent.NPO trojan quarantined - deleted  Event occurred on a new file created by the application: F:\样本\mminstall[1].exe. The file was moved to quarantine. You may close this window.

2007-7-16 19:27:27 AMON file C:\windows\system32\drivers\3cs0.sys a variant of Win32/Rootkit.Agent.NBQ trojan quarantined - deleted Event occurred on a new file created by the application: F:\样本\mminstall[1].exe. The file was moved to quarantine. You may close this window.

风雪

费尔过。

tracydk

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00060857.



We received the following archive files:

File ID	Filename	Size (Byte)	Result
1104629		183.58 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
1104630	mminstall[1]	102.5 KB	MALWARE
1104631	914mjmz.dll	80 KB	MALWARE
1104632	jekf9t.dll	80 KB	MALWARE

Please find a detailed report concerning each individual sample below:

Filename

Result

mminstall[1]

MALWARE

The file 'mminstall[1]' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Drop.Agent.abz.4. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

914mjmz.dll

MALWARE

The file '914mjmz.dll' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Agent.NPO. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename

Result

jekf9t.dll

MALWARE

The file 'jekf9t.dll' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Agent.NPO.2. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.