继续只有大A做肤浅认识其他飘过！

tgzw1680

继续只有大A做肤浅认识其他飘过！

sbbdms

Kaspersky miss
TO KL

Joker

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://bbs.kafan.cn/attachment.p ... 2f&t=1212815833
Information:  Contains suspicious code HEUR/Malware  


--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.55, VDF 7.0.4.156

qigang

RS20.47.50未杀！

电影结束了

。。。。
没啥行为。。。
给TF

电影结束了

• Submission details:
  • Submission received: 7 June 2008, 15:21:00
  • Processing time: 4 min 23 sec
  • Submitted sample:
    • File MD5: 0xCED8900F1CA2111FB589CAF9B71C3688
    • Filesize: 28,672 bytes

• Summary of the findings:

What's been found	Severity Level
Downloads/requests other files from Internet.

Technical Details:

File System Modifications

• The following file was created in the system:

#	Filename(s)	File Size	File MD5
1	[file and pathname of the sample #1]	28,672 bytes	0xCED8900F1CA2111FB589CAF9B71C3688

Memory Modifications

• There was a new process created in the system:

Process Name	Process Filename	Main Module Size
[filename of the sample #1]	[file and pathname of the sample #1]	32,768 bytes

Other details

• Analysis of the file resources indicate the following possible country of origin:

China

• To mark the presence in the system, the following Mutex object was created:
  • _!SHMSFTHISTORY!_

• The following Internet Connection was established:

Server Name	Server Port	Connect as User	Connection Password
www.myalading.com	80	(null)	(null)

啥东西

sbbdms

Hello,

mumu.exe_ - Trojan-Downloader.Win32.VB.ewq

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Evgeny Aseev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: mumu.rar

allinwonderi

MISS

tracydk

AhnLab-V3	2008.5.30.1	2008.06.05	-
AntiVir	7.8.0.55	2008.06.06	HEUR/Malware
Authentium	5.1.0.4	2008.06.06	-
Avast	4.8.1195.0	2008.06.07	-
AVG	7.5.0.516	2008.06.06	-
BitDefender	7.2	2008.06.07	-
CAT-QuickHeal	9.50	2008.06.07	-
ClamAV	0.92.1	2008.06.07	-
DrWeb	4.44.0.09170	2008.06.07	-
eSafe	7.0.15.0	2008.06.05	-
eTrust-Vet	31.6.5855	2008.06.06	-
Ewido	4.0	2008.06.07	-
F-Prot	4.4.4.56	2008.06.06	-
F-Secure	6.70.13260.0	2008.06.06	-
Fortinet	3.14.0.0	2008.06.07	-
GData	2.0.7306.1023	2008.06.07	-
Ikarus	T3.1.1.26.0	2008.06.07	-
Kaspersky	7.0.0.125	2008.06.07	Trojan-Downloader.Win32.VB.ewq
McAfee	5312	2008.06.06	-
Microsoft	1.3604	2008.06.07	-
NOD32v2	3165	2008.06.06	-
Norman	5.80.02	2008.06.06	-
Panda	9.0.0.4	2008.06.07	-
Prevx1	V2	2008.06.07	-
Rising	20.47.42.00	2008.06.06	-
Sophos	4.30.0	2008.06.07	-
Sunbelt	3.0.1145.1	2008.06.05	-
Symantec	10	2008.06.07	-
TheHacker	6.2.92.339	2008.06.07	-
VBA32	3.12.6.7	2008.06.06	-
VirusBuster	4.3.26:9	2008.06.06	-
Webwasher-Gateway	6.6.2	2008.06.07	Heuristic.Malware