pm.exe和mm.exe

显示全部楼层 · 发表于 2008-8-11 22:11:54

下载地址：

http://xnibi.com/pm.exe

http://ddd.xnibi.com/mm.exe

显示全部楼层 · 发表于 2008-8-11 22:13:57

卡巴报

显示全部楼层 · 发表于 2008-8-11 22:17:09

红伞一个
egin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\virus.rar
[0] Archive type: RAR
--> mm.exe
   [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
[NOTE]    A backup was created as '49124a21.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-8-11 22:18:04

<W32/OnlineGames.A.gen!GSA (not disinfectable, 普通)> C:\Download Files\virus.rar->mm.exe->(NSPack)->(PE_Patch)

显示全部楼层 · 发表于 2008-8-11 22:18:51

显示全部楼层 · 发表于 2008-8-11 22:25:41

病毒 2008-08-11 22:24:43 C:\Documents and Settings\Administrator\桌面\virus.rar\mm.exe Win32.Troj.Downloader.if.67072 清除成功

显示全部楼层 · 发表于 2008-8-11 22:29:35

Found nothing.

显示全部楼层 · 发表于 2008-8-11 23:18:40

2008/8/11 23:16:17 已删除: Heur.Trojan.Generic C:\Users\AXO\Downloads\virus.rar/mm.exe

显示全部楼层 · 发表于 2008-8-12 00:27:37

2008/8/12 0:27:03 已清除木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar
2008/8/12 0:27:03 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/mm.exe

显示全部楼层 · 发表于 2008-8-12 08:31:13

2008-8-12 8:31:11 文件系统实时防护文件 F:\virus\virus\pm.exe Win32/Adware.Zhongsou 应用程序已删除 - 已隔离 NT AUTHORITY\SYSTEM 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.

[病毒样本] pm.exe和mm.exe

F-Prot 4.4.4

Norman Virus Control 5.99

ESET Smart Security