M.EXE

显示全部楼层 · 发表于 2007-11-1 19:50:02

http://81.29.241.170/m.exe

显示全部楼层 · 发表于 2007-11-1 20:01:31

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 786
Paranoia Database - 48413
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\m.exe

C:\Documents and Settings\Uhthn\Desktop\m.exe - Suspected MaliciousScope:GENERIC.MALWARE.16

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files disinfected
0 Files deleted

显示全部楼层 · 发表于 2007-11-1 20:03:50

Not a valid PE file

显示全部楼层 · 发表于 2007-11-1 20:10:14

下载好慢！

对不起，您的附件大小超过论坛限制，请返回修改。

显示全部楼层 · 发表于 2007-11-1 20:13:05

Malicious code found in file C:\Users\Administrator\Desktop\m.exe.
Infection: Email-Worm.Win32.Agent.be
Action: The file was deleted.

=.= 好病毒

显示全部楼层 · 发表于 2007-11-1 21:31:48

貌似链接到俄罗斯的IP，巨慢……

显示全部楼层 · 发表于 2007-11-1 21:53:39

迅雷很快
detected: virus Email-Worm.Win32.Agent.be File: E:\ÏÂÔØ»ùµØ\m.exe

显示全部楼层 · 发表于 2007-11-1 22:59:32

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\m.rar'
C:\Users\morgan\Documents\
  m.rar
[0] Archive type: RAR
--> m.exe
      [DETECTION] Contains detection pattern of the worm WORM/Agent.E.9
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-2 12:01:02

程序:
C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\RAR$EX00.271\M.EXE
木马程序生成以下文件:
1) C:\WINDOWS\BDIR\SDFLKJ8.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-11-2 13:07:26

81.29.241.170自动被OFP2008加入黑名单

[已鉴定] M.EXE