mm.exe(第28次更新)已开新帖

IllusionWing

字母~字母~字母~字母~字母~
KS...

ljh3737

o(∩_∩)o...哈哈，我在网上买的正版AVG监控就把他们都做掉了。。。。。。就漏两，真牛X啊，以后就用AVG了，杀马王，佩服它了有点，附截图为证，不相信的自己用AVG8.0看看。。。。。。。

它的启发式比较牛X，o(∩_∩)o...哈哈，我喜欢

[ 本帖最后由 ljh3737 于 2008-9-13 02:25 编辑 ]

woai_jolin

Scan Log
Version of virus signature database: 3439 (20080912)
Date: 2008-9-13  Time: 7:42:54
Scanned disks, folders and files: G:\v\0912-2101(mm).rar
G:\v\0912-2101(mm).rar » RAR » 9.exe3 - a variant of Win32/HackTool.Xarp trojan - was a part of the deleted object
G:\v\0912-2101(mm).rar » RAR » mm.exe3 - is OK
G:\v\0912-2101(mm).rar » RAR » x.gif0 » RAR » 照片                                                                                                    .exe - is OK
G:\v\0912-2101(mm).rar » RAR » 1.exe3 - is OK
G:\v\0912-2101(mm).rar » RAR » 3.exe3 - a variant of Win32/TrojanDownloader.Delf.OBY trojan - was a part of the deleted object
Number of scanned objects: 5
Number of threats found: 2
Number of cleaned objects: 2
Time of completion: 7:42:57  Total scanning time: 3 sec (00:00:03)

longzaifei

d:\我的文档\桌面\0912-2101(mm).rar > RAR > 9.exe3 - Win32/HackTool.Xarp 特洛伊木马 的变种
d:\我的文档\桌面\0912-2101(mm).rar > RAR > 3.exe3 - Win32/TrojanDownloader.Delf.OBY 特洛伊木马 的变种

hzyw

Begin scan in 'C:\0912-2101(mm).rar'
C:\0912-2101(mm).rar
    [0] Archive type: RAR
    --> 9.exe3
      [DETECTION] Contains HEUR/Crypted suspicious code
    --> mm.exe3
      [DETECTION] Contains HEUR/Crypted suspicious code
      --> x.gif0
        [1] Archive type: RAR
        --> ￕￕￆﾬ                                                                                                    .exe
          [DETECTION] Contains HEUR/Crypted suspicious code
    --> 1.exe3
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> 3.exe3
      [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The file was moved to '48fc16ee.qua'!


End of the scan: 2008年9月13日  09:26
Used time: 00:06 Minute(s)

The scan has been done completely.

      0 Scanning directories
      7 Files were scanned
      0 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      2 Archives were scanned
      0 Warnings
      1 Notes

sam.to

第13次更新

qq890

C:\Documents and Settings\123\桌面\0913-1303.rar > RAR > 9.exe3 - Win32/HackTool.Xarp 特洛伊木马 的变种
C:\Documents and Settings\123\桌面\0913-1303.rar > RAR > 3.exe3 - Win32/TrojanDownloader.Delf.OBY 特洛伊木马 的变种
C:\Documents and Settings\123\桌面\0913-1303.rar > RAR > 5.exe3 > NSIS > avtapit.dll - Win32/Agent.NXP 特洛伊木马 的变种

Palkia

病毒        2008-09-13  13:30:42        C:\Documents and Settings\Administrator\桌面\0913-1303.rar\3.exe3        Win32.TrojDownloader.Delf.43008        清除成功       
病毒        2008-09-13  13:30:41        C:\Documents and Settings\Administrator\桌面\0913-1303.rar\mm.exe3        Win32.Troj.Downloader.if.58368        清除成功       
病毒        2008-09-13  13:30:41        C:\Documents and Settings\Administrator\桌面\0913-1303.rar\9.exe3        Win32.Troj.Agent.741888        清除成功

醉一生爱妍

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Win32.Agent.vmq   
病毒： Worm.Win32.Autorun.etb   
病毒： Trojan.DL.Win32.Direct.me

MAC 地址：00:11:2F:5A:58:BC

用户来源：互联网

软件版本：20.61.42

woai_jolin

Scan Log
Version of virus signature database: 3439 (20080912)
Date: 2008-9-13  Time: 13:49:54
Scanned disks, folders and files: E:\office\0913-1303.rar
E:\office\0913-1303.rar » RAR » 9.exe3 - a variant of Win32/HackTool.Xarp trojan - was a part of the deleted object
E:\office\0913-1303.rar » RAR » mm.exe3 - is OK
E:\office\0913-1303.rar » RAR » x.gif3 » RAR » 照片                                                                                                    .exe - is OK
E:\office\0913-1303.rar » RAR » 1.exe3 - is OK
E:\office\0913-1303.rar » RAR » 3.exe3 - a variant of Win32/TrojanDownloader.Delf.OBY trojan - was a part of the deleted object
E:\office\0913-1303.rar » RAR » 5.exe3 » NSIS » Entries.bin - is OK
E:\office\0913-1303.rar » RAR » 5.exe3 » NSIS » Strings.txt - is OK
E:\office\0913-1303.rar » RAR » 5.exe3 » NSIS » avtapit.dll - a variant of Win32/Agent.NXP trojan - was a part of the deleted object
Number of scanned objects: 8
Number of threats found: 3
Number of cleaned objects: 3
Time of completion: 13:49:58  Total scanning time: 4 sec (00:00:04)