mm.exe(第28次更新)已开新帖

显示全部楼层 · 发表于 2008-9-13 19:28:33

很抱歉,錯回帖子.这包生成物是放在这裡
http://bbs.kafan.cn/viewthread.p ... page%3D1#pid4819523

[ 本帖最后由 kato9096 于 2008-9-13 19:34 编辑 ]

显示全部楼层 · 发表于 2008-9-13 19:47:14

第14次更新

显示全部楼层 · 发表于 2008-9-13 19:49:48

rising miss

显示全部楼层 · 发表于 2008-9-13 23:39:26

第15次更新

显示全部楼层 · 发表于 2008-9-14 00:34:28

本人正向卡巴分析师查询会否针对这个Worm(Worm.Win32.AutoRun)来编写generic detection!

[ 本帖最后由 kato9096 于 2008-9-14 00:37 编辑 ]

显示全部楼层 · 发表于 2008-9-14 00:36:34

显示全部楼层 · 发表于 2008-9-14 11:58:32

Starting the file scan:

Begin scan in 'C:\Users\Morgan\Desktop\0913-2337(mm).zip'
C:\Users\Morgan\Desktop\
  0913-2337(mm).zip
[0] Archive type: ZIP
--> 3.exe3
   [DETECTION] Contains HEUR/Malware suspicious code
--> mm.exe3
   [DETECTION] Contains HEUR/Crypted suspicious code
   --> x.gif3
      [1] Archive type: RAR
      --> ￕￕￆﾬ                                                                                                 .exe
      [DETECTION] Contains HEUR/Crypted suspicious code
      [WARNING] Infected files in archives cannot be repaired!
[WARNING] The file was ignored!
  0913-2337(mm).zip:Zone.Identifier

End of the scan: 2008年9月13日  20:58
Used time: 00:05 Minute(s)

The scan has been done completely.

   0 Scanning directories
   6 Files were scanned
   0 viruses and/or unwanted programs were found
   3 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   2 Archives were scanned
   2 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-9-14 15:19:11

第16次更新

显示全部楼层 · 发表于 2008-9-14 15:21:54

C:\Documents and Settings\Administrator\桌面\mm.rar > RAR > mm.exe1 - 正常

显示全部楼层 · 发表于 2008-9-14 21:05:28

第17次更新

[病毒样本] mm.exe(第28次更新)已开新帖

回复 63楼 kato9096 的帖子

Win32:Pakes-OD [Trj]