mminstall.exe [md5:6bf273]

mofunzone

File:	mminstall.exe
Status:	INFECTED/MALWARE
MD5:	6bf273bf4a1a9cc8de5b057262d49cf8
Packers detected:	-
Bit9 reports:	File not found
Scanner results
Scan taken on 04 Sep 2007 05:33:37 (GMT)
A-Squared	Found  nothing
AntiVir	Found  nothing
ArcaVir	Found  nothing
Avast	Found  nothing
AVG Antivirus	Found  nothing
BitDefender	Found  nothing
ClamAV	Found  nothing
CPsecure	Found  nothing
Dr.Web	Found  nothing
F-Prot Antivirus	Found  nothing
F-Secure Anti-Virus	Found  nothing
Fortinet	Found  nothing
Kaspersky Anti-Virus	Found  nothing
NOD32	Found probably a variant of Win32/Genetik (probable variant)
Norman Virus Control	Found  nothing
Panda Antivirus	Found  nothing
Rising Antivirus	Found  nothing
Sophos Antivirus	Found Mal/Behav-010
VirusBuster	Found  nothing
VBA32	Found  nothing

saga3721

红伞不报，伴侣出手
程序:
C:\DOCUMENTS AND SETTINGS\X\桌面\MMINSTALL.EXE
是否阻止该进程继续运行?


长脸 长脸 恭喜糯糯

1688388728

进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX00.234\mminstall.exe
文件路径:C:\WINDOWS\system32\drivers\a7eq80vjz.sys
触发规则:所有程序规则->文件规则->%systemdrive%\*.sys


2007-09-04 13:41:56    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX00.234\mminstall.exe
文件路径:C:\WINDOWS\system32\drivers\k0majfrua9.sys
触发规则:所有程序规则->文件规则->%systemdrive%\*.sys


2007-09-04 13:41:57    创建文件      操作:阻止
进程路径:C:\Documents and Settings\Administrator\Local Settings\Temp\Rar$EX00.234\mminstall.exe
文件路径:C:\WINDOWS\system32\9j27c.dll
触发规则:所有程序规则->文件规则->%systemdrive%\*.dll


2007-09-04 13:41:59    创建文件      操作:阻止
进程路径:D:\病毒库\mminstall\mminstall.exe
文件路径:C:\WINDOWS\system32\drivers\1kzen.sys
触发规则:所有程序规则->文件规则->%systemdrive%\*.sys


2007-09-04 13:42:01    创建文件      操作:阻止
进程路径:D:\病毒库\mminstall\mminstall.exe
文件路径:C:\WINDOWS\system32\drivers\37ieolt6u.sys
触发规则:所有程序规则->文件规则->%systemdrive%\*.sys


2007-09-04 13:42:02    创建文件      操作:阻止
进程路径:D:\病毒库\mminstall\mminstall.exe
文件路径:C:\WINDOWS\system32\iwwf32yfy.dll
触发规则:所有程序规则->文件规则->%systemdrive%\*.dll

capsshift

红伞扫描不报，运行报。微点未来得及出手。
Virus or unwanted program 'TR/Spy.Gen [TR/Spy.Gen]'
detected in file 'C:\WINDOWS\system32\llgawyuzvj.dll.
Action performed: Deny access
Virus or unwanted program 'TR/Rootkit.Gen [TR/Rootkit.Gen]'
detected in file 'C:\WINDOWS\system32\drivers\tdrxeiiqu.sys.
Action performed: Deny access
Virus or unwanted program 'TR/Rootkit.Gen [TR/Rootkit.Gen]'
detected in file 'C:\WINDOWS\system32\drivers\r5ast.sys.
Action performed: Deny access

相同报告部分未予复制。

[ 本帖最后由 capsshift 于 2007-9-4 14:05 编辑 ]

saga3721

楼上什么版本的红伞啊？我的C版不报啊！

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2759
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\mminstall.exe

C:\Documents and Settings\uhthn\Desktop\mminstall.exe - Suspicious of Trojan-PSW.Game.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted