最近非常流行的mm那个下载者下来的

显示全部楼层 · 发表于 2008-2-12 21:26:19

原帖由 kato9096 于 2008-2-12 21:20 发表
沒有启发

FS的avp也没启发...

显示全部楼层 · 发表于 2008-2-12 21:37:37

The file 'aa26.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Crypted.

显示全部楼层 · 发表于 2008-2-13 00:35:20

Hello,

aa17.exe_ - Trojan-PSW.Win32.OnLineGames.qyt,

aa26.exe_ - Trojan.Win32.Agent.fey,

aa5.exe_ - Trojan-PSW.Win32.OnLineGames.qfw

These files are already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Dmitry Shvetsov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-2-13 00:35:48

原帖由 leonfg 于 2008-2-12 21:26 发表

FS的avp也没启发...

我的是卡巴

显示全部楼层 · 发表于 2008-2-13 08:43:28

G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa1.exe - Win32/PSW.Agent.NGZ trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa10.exe - Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa11.exe - Win32/PSW.OnLineGames.MUG trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa12.exe - Win32/PSW.OnLineGames.GJV trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa13.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa14.exe - Win32/PSW.OnLineGames.MUG trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa15.exe - Win32/PSW.OnLineGames.MUG trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa16.exe - Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa17.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa18.exe - Win32/PSW.OnLineGames.MUG trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa19.exe - Win32/PSW.OnLineGames.PBQ trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa20.exe - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa21.exe - Win32/PSW.OnLineGames.MUG trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa22.exe - Win32/PSW.OnLineGames.PBQ trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa23.exe - Win32/PSW.OnLineGames.GJV trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa24.exe - Win32/Agent.NIW trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa25.exe - Win32/PSW.OnLineGames.GJV trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa26.exe - a variant of Win32/PSW.OnLineGames.NML trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa3.exe - Win32/PSW.OnLineGames.YA trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa4.exe - Win32/PSW.OnLineGames.MUG trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa5.exe - Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa6.exe - Win32/PSW.OnLineGames.GJV trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa7.exe - Win32/PSW.OnLineGames.GJV trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa8.exe - Win32/PSW.OnLineGames.NLY trojan
G:\Users\Administrator\Desktop\mm.rar » RAR » mm\aa9.exe - Win32/PSW.OnLineGames.MUG trojan

显示全部楼层 · 发表于 2008-2-13 08:50:19

一共有几个啊！

显示全部楼层 · 发表于 2008-2-13 11:34:14

ewido anti-spyware - Scan Report
---------------------------------------------------------

+ 创建时间: 11:39:54 2008-2-13

+ 扫描结果:

C:\Documents and Settings\zh\桌面\mm.rar/mm\aa12.exe -> Downloader.Agent.bhc : 已清除.
C:\Documents and Settings\zh\桌面\mm.rar/mm\aa23.exe -> Downloader.Agent.bhc : 已清除.
C:\Documents and Settings\zh\桌面\mm.rar/mm\aa25.exe -> Downloader.Agent.bhc : 已清除.
C:\Documents and Settings\zh\桌面\mm.rar/mm\aa6.exe -> Downloader.Agent.bhc : 已清除.
C:\Documents and Settings\zh\桌面\mm.rar/mm\aa7.exe -> Downloader.Agent.bhc : 已清除.
C:\Documents and Settings\zh\桌面\mm.rar/mm\aa1.exe -> Dropper.Agent.dxz : 已清除.
C:\Documents and Settings\zh\桌面\mm.rar/mm\aa20.exe -> Trojan.OnLineGames.oeg : 已清除.
C:\Documents and Settings\zh\桌面\mm.rar/mm\aa16.exe -> Trojan.OnLineGames.ozu : 已清除.
C:\Documents and Settings\zh\桌面\mm.rar/mm\aa5.exe -> Trojan.OnLineGames.qfw : 已清除.

::报告结束

显示全部楼层 · 发表于 2008-2-13 12:29:42

25......

[病毒样本] 最近非常流行的mm那个下载者下来的

回复 2楼 Graybird 的帖子

本帖子中包含更多资源