mm.exe[08E361 8C23CA]

promised

http://www.kimtw.com/gd/wm/mm.exe

傻猪猪米走鸡

ENA miss

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\mm.rar'
C:\Users\morgan\Documents\
  mm.rar
    [0] Archive type: RAR
    --> mm.exe
        [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> ro.dll
        [INFO]      The file was deleted!

promised

C:\ABC\mm.exe - 特征码 'Trojan-PWS.Win32.Lmir' 被发现
C:\ABC\ro.dll - 特征码 'Trojan-PWS.Win32.Lmir' 被发现

promised

C:\ABC\...\mm.exe : is suspected of Trojan-PSW.Game.61 (paranoid heuristics)
C:\ABC\...\ro.dll : is suspected of Trojan-PSW.Game.61 (paranoid heuristics)

wangjay1980

detected: Trojan program Trojan-Spy.Win32.Agent.ajv        File: C:\Documents and Settings\Owner\×ÀÃæ\mm.rar/mm.exe//Petite
detected: Trojan program Trojan-Spy.Win32.Agent.ajv        File: C:\Documents and Settings\Owner\×ÀÃæ\mm.rar/ro.dll

scottxzt

程序:
C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\RAR$EX00.952\MM.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\RO.DLL
是否删除木马程序及其衍生物?

wangfeng66

D:\mm.exe - infected with Trojan.PWS.Gamania.origin
D:\ro.dll - infected with Trojan.PWS.Gamania.origin

Archive contains 2 infected items

DRWEB 4.44  Kill

qigang

RX20.16.52未查杀

lnovaw714

卡巴秒杀！