新帖!!!mm.exe(第54次更新)[已开新帖]

显示全部楼层 · 发表于 2008-9-20 01:02:41

因字数限制而开新帖!

第1至28次更新:
http://bbs.kafan.cn/thread-322929-1-1.html

9月20:
5ade4b0857471004c5b72dbd51a7cfaf  mm.exe
TO KL
Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Namestnikov Yury
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

==================================================================================
9月21:
965ed71268b612916faf93c39a63a96a  9.exe
792814642af1f303d61b034e659d5365  mm.exe
dcc28fb466e8be6daf8a555c89185950  x.gif
ef7eab75327fa7af064f246a046389a2  1.exe
789da02de70376bc7098b580ba9c50be  3.exe
99a61ab78521fc1d746bfb694fd8fc2d  5.exe
TO KL
卡巴回了信.....但回的是空信......汗.....
3分鈡后收到有內容的信了:
Hello,

1.exe3 - Trojan-GameThief.Win32.OnLineGames.tihj,
3.ex3e - Trojan-Downloader.Win32.Delf.oiv,
5.e3xe - Trojan-Dropper.Win32.Agent.wzc,
9.ex3e - Trojan-GameThief.Win32.OnLineGames.tihp,
mm.exe3 - Worm.Win32.AutoRun.ode,
x.gif3 - Worm.Win32.AutoRun.odc

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Ostroverkhov Vladimir
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

==================================================================================
9月21第2次:
c4213c6d0379ad262ceaab29706c9147  9.exe3
593cd1f6e4ec45c2909fc84a3af1b8e7  mm.exe3
3a93e41c3a11766ed4f9ad462e2ec51c  x.gif3
06e3dbb9b7e797a983325c32adf2984f  1.exe3
f8ec1e0a27c7cd1703eb81e72887012d  5.exe3
to kl
Hello,

1.exe3 - Trojan-Spy.Win32.Delf.efn,
2.exe3 - Trojan.Win32.Pakes.knl,
5.exe3 - Trojan-Dropper.Win32.Agent.wzm,
cc.exe3 - Trojan-Dropper.Win32.Agent.wzn,
ff.ex3e - Trojan-Dropper.Win32.Agent.wzl,
mm.exe3 - Trojan-Downloader.Win32.Agent.ahev,
tt.exe3 - Trojan.Win32.Pakes.knm,
x.gif3 - Worm.Win32.AutoRun.ofz

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

==================================================================================
9月21第3次:
1e93ab22c89b376cb67c8de6a7685a99  5.exe3
88b70962948af2caabd292e30806aefc  mm.e3xe
64e16d221d3e83a15b338e3addaadc31  x.gif3
c66ae9f0304ad6a5a08ae5b44b4db4a6  1.exe1
TO KL

Hello,

##.exe_ - Worm.Win32.AutoRun.ogy,
1.exe_ - Trojan-Spy.Win32.Delf.efp,
5.exe_ - Trojan.Win32.Pakes.knr,
mm.e3xe - Worm.Win32.AutoRun.ogx

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

==================================================================================
9月22:
fe85bb0211f213a8a95c0695d5f7bf76  9.exe1
7ceb3031d809185c7a95639128675160  mm.ex3e
36d67f06155dc3f77363da23c16bbf86  x.gif1
4640e9cd839bea66bb05afaea4df979f  1.exe1
12fc21cce75f200feda16d50ced135b4  5.exe3
TO KL
Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Tatarinov Ivan
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

==================================================================================
9月23:
71bee8035b0491414e44a3c148b2730f  9.exe3
dfb1543078615d79bb25e7b74c7b8b62  mm.ex3e
9fcef6082ac1322c453bef3e18ad3fe8  x.gif3
24aa2147f860007f151193a902987783  1.ex3e
d48b3c767292a79f063bc0b7d61a4ca1  5.ex3e
TO KL
Hello,

##.exe_ - Worm.Win32.AutoRun.ooe,
1.ex3e - Trojan-Spy.Win32.Delf.ege,
5.ex3e - Trojan-Dropper.Win32.Agent.xdp,
9.exe_ - Trojan-GameThief.Win32.OnLineGames.tjkt,
mm.ex3e - Worm.Win32.AutoRun.ood

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

==================================================================================
9月24:
74ed4f49182b2ccaf7e6f740b4fb99ba  5.ex3e
5628b4aa861563999af2258d74ac7af0  9.exe3
eb92f0f76fdf5316c193cef1f56c2238  mm.ex3e
f42e94cff73b670a58bba50ba3021972  x.gif3
282177941ef7ba1dfb9ed3de1ba0b1bd  1.exe3
TO KL

==================================================================================
9月24第2次:
a1cdf951a98f5683f5516625b00ff2b8  x.gif3
b9126d50ec45a7b5bc22a339e1a24622  1.exe3
TO KL
Hello,

1.exe_ - Trojan-Spy.Win32.Delf.egs,
x.gif_.-zh'.exe_ - Worm.Win32.AutoRun.ouu

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Ilya Tolstikhin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

==================================================================================
9月25:
78132935df24dc336e710a53b3684f6c  mm.exe
a7b4d52d13a8f0fc582f08416d3ca145  x.gif
b9126d50ec45a7b5bc22a339e1a24622  1.exe
74ed4f49182b2ccaf7e6f740b4fb99ba  5.exe
ec6d52c78b07420a5baae93b59adbf8f  9.exe
TO KL
Hello,

0925-1944(MM).zip.1.exe3,
0925-1944(MM).zip.5.ex3e,
0925-1944(MM).zip.9.e3xe

These files are in process.

0925-1944(MM).zip.x.gif3.--_ .exe - Worm.Win32.AutoRun.oxw

keygenX.exe - Worm.Win32.AutoRun.oyb

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Sincerely yours,
Virus Lab.

_____________________
Kaspersky Lab Ltd
Moscow, Russia
Tel/Fax : +7 (095) 797-8700
E-mail  : newvirus@kaspersky.com
Internet: http://www.kaspersky.com, http://www.viruslist.com

==================================================================================
9月26:
0c50e20e1638737b908fc19661b879f6  x.g3if
a7427ebe2305645dbfc611420b70a129  mm.ex3e
74ed4f49182b2ccaf7e6f740b4fb99ba  5.exe3
2f139b392858d3c6822bb78702e136f5  9.exe3
TO KL
Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Tatarinov Ivan
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

==================================================================================
9月26第2次:
f7e1673e543ab8060158f7ce8ee733c6  mm.exe3
a5a57ccdda03bc83d0efb4a526f5ad5b  x.gif3
114a5b292763aa6cbf0e402cfc73f3df  5.exe3
TO KL
Hello,

5.exe_ - Trojan-Dropper.Win32.Agent.xgq

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

mm.exe_ - Worm.Win32.AutoRun.pdk

This file is already detected. Please update your antivirus bases.

x.gif_ - not-a-virus:AdWare.Win32.FindSpy.j

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

Please quote all when answering.

-----------------
Regards, Vitaly Butuzov
Virus Analyst, Kaspersky Lab.
_____________________
Kaspersky Lab Ltd
Moscow, Russia
Tel/Fax : +7 (095) 797-8700
E-mail  : newvirus@kaspersky.com
Internet: http://www.kaspersky.com, http://www.viruslist.com

==================================================================================
9月27:
cd985d65e0d5766a618598a62b43b1cc  9.ex3e
12d40f273634e64f5e4a31ea77c76b53  mm.exe3
e9ab5b9757f97ee3e774a99ab07af272  x.gif3
e3e9570abf971e68cad46a8161a539ba  1.exe3
114a5b292763aa6cbf0e402cfc73f3df  5.ex3e
TO KL
Hello,

##.exe_ - Worm.Win32.AutoRun.pfg,

1.exe3 - Trojan-Spy.Win32.Delf.egx,

9.ex3e - Trojan-GameThief.Win32.OnLineGames.tlgd,

mm.exe3 - Worm.Win32.AutoRun.pfh

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

5.ex3e - Trojan-Dropper.Win32.Agent.xgq

This file is already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Ostroverkhov Vladimir
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

==================================================================================
9月28:
f8b0459b3ec7667387ebf234ef21596a  9.exe3
b12e8c5bfc654a90ee7a38ed9fc0cd7a  5.ex3e
211338479cfb9a74828cbadb66041797  1.ex3e
TO KL

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Gashkin Alexey
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

==================================================================================
9月28第2次:
ee6b7eace7074b3c4bdf804f6a9d4003  mm.exe3
1bc619055f44643c4a35063814f94f79  x.gif2
d63144cf2b6550bf7eb240abc04fe86e  1.exe3
b12e8c5bfc654a90ee7a38ed9fc0cd7a  5.ex3e
9d9a90ad1ccfbf24b9735124a75a7210  9.ex3e
TO KL

==================================================================================
9月29:
2a939efa53dcabdbf20574d9f48fd91c mm.exe3
TO KL
Hello. This file is already detected. Please update your bases.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Temnikov Sergey
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

==================================================================================
9月29第2次:
5730222ee75c8a9b7deee84a69439bd0 5.ex3e
b5b4a3f36d6fda539d405671e00f725f 1.ex3e
5ec211cf472a8d3aeed59f0088d85483 x.g3if
16cc3ccaea593d5ed7d0e96bfe2b0d27 9.e3xe
TO KL
Hello,

1.ex3e - Trojan-Spy.Win32.Delf.eil

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

5.ex3e - Trojan-Dropper.Win32.Agent.xje,

9.e3xe - Trojan-GameThief.Win32.OnLineGames.tlwb,

x.g3if - Worm.Win32.AutoRun.pnv

These files are already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Sergey Temnikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

==================================================================================
9月29第3次:
798c8cf7bf8af96708cfbf8d13b14fc5  9.ex3e

TO KL
==================================================================================
9月30:
266122c0094544d12853863750a23330  9.ex3e
562994daf1e0cca14008d354558c1a2a  x.gif3
d97ae9a39008437d143c7168f27e0bdb  1.exe3
5730222ee75c8a9b7deee84a69439bd0  5.exe1
TO KL

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Gashkin Alexey
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

==================================================================================
９月３０第２次：
3b100d375719f9c97255db5befbbeabb mm.exe3
to kl
Hello,

mm.exe_ - Worm.Win32.AutoRun.pql

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

-----------------
Regards, Vitaly Butuzov
Virus Analyst, Kaspersky Lab.
_____________________
Kaspersky Lab Ltd
Moscow, Russia
Tel/Fax : +7 (095) 797-8700
E-mail  : newvirus@kaspersky.com
Internet: http://www.kaspersky.com, http://www.viruslist.com

==================================================================================
10月1:
63f3679c39ac3fa1ed7cb7229aa138f8  9.exe3
0a7964de9d3f7b68373ceabeefb3d0e4  mm.ex3e
c500db1d85070c6e696b3cffb1a0622b  x.gif3
a922eff6d14fc29cfd73bd0b8eb18b3e  1.exe1
eb2d6cbfee492c535f1f5a883e20387e  5.ex3e
TO KL
Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Tatarinov Ivan
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

==================================================================================
10月2:
48dbb9062851aa31c56df139190fec10 5.ex3e
388e395aaead7705502eb2090a847e43 1.exe1
4acf65768e94becddf50001a30039946 x.gif1
ce6c842cc530322f67486aede251bcd5 mm.exe3
49ba0944071634167cae735194e945b6 9.ex3e
TO KL
Hello,

1.exe_ - Trojan-Spy.Win32.Delf.eio,
5.ex3e - Trojan.Win32.Pakes.dgi,
9.ex3e - Trojan-GameThief.Win32.OnLineGames.tmke,
mm.exe_ - Worm.Win32.AutoRun.pwi,
x.gif_ - Worm.Win32.AutoRun.pwh

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Sergey Prokudin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

==================================================================================
10月2第2次:
43cd5c409f2a866016bf8c53f66e1d00 mm.exe3
2a0cf7b34130ec32718565a8bbca59b7 x.gif3
f9fbbd8920676b13775da082bca6d4a9 1.exe3
9ddbba79da47addf7cdf25318d5c7d61 9.exe3
TO KL

==================================================================================
10月3:
faf2e9b8b0f282eb6634ad90d5edd1da  1.exe3
a47446a38644f7ffe72847cd8c3400cb  mm.ex3e
5c7087726340b5493141e1303d8256d0  x.gif3
TO KL
Hello,

1.exe_ - Trojan-Spy.Win32.Delf.eja,

mm.ex3e - Worm.Win32.AutoRun.pys,

x.gif_ - Trojan.Win32.Agent.afre

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

-----------------
Regards, Vitaly Butuzov
Virus Analyst, Kaspersky Lab.
_____________________
Kaspersky Lab Ltd
Moscow, Russia
Tel/Fax : +7 (095) 797-8700
E-mail  : newvirus@kaspersky.com
Internet: http://www.kaspersky.com, http://www.viruslist.com

==================================================================================
10月4:
d6056467120f275e06ec09e6b9d7ef6a  9.exe3
1a9078845ef97b16e60b1ac7f709770c  mm.exe1

TO KL
Hello,

9.exe_ - Backdoor.Win32.Delf.mjb,
mm.exe_ - Trojan.Win32.KillAV.ari

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Sergey Prokudin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.
==================================================================================
10月4第2次:
1a9078845ef97b16e60b1ac7f709770c mm.exe3
7e243d2bbf5647d2e4b0081222d2963a 5.exe3
c98048e92405e878002e244e4df36cf9 1.exe3
9fb200a8678709ecf5e410d0fba911ff x.gif3
d6056467120f275e06ec09e6b9d7ef6a 9.exe#
TO KL

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Gashkin Alexey
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

==================================================================================
10月5:
8667f13e28fd3d8ee3c7bb4627cab950  9.exe1
8d9299217d683138cb33ebf8dcae9b43  mm.exe3
46d8ffcb4e32b96d162f2ecbe24eda3a  x.gif1
3d97d21ca1e497746c7ed9ed0eb6d205  1.exe1
ad84e1b0fb958f2e5fa6477269e3da6a  5.exe1
to kl
##.exe_ - Worm.Win32.AutoRun.qep,
1.exe_ - Trojan-Spy.Win32.Delf.ejo,
5.exe1 - Trojan.Win32.Agent.afxd,
9.exe_ - Trojan-GameThief.Win32.OnLineGames.tmwx,
mm.exe_ - Worm.Win32.AutoRun.qeq

[ 本帖最后由 kato9096 于 2008-10-6 14:03 编辑 ]

显示全部楼层 · 发表于 2008-9-20 01:49:02

NIS2009报了

掃描統計資料:
掃描時間: 8 秒
掃描選項:
掃描目標: C:\Users\xxxx\Desktop\0920-0101(mm).rar
計數:
已掃描的項目總數: 2
- 檔案與目錄: 2
- 登錄項目: 0
- 程序與啟動項目: 0
- 網路與瀏覽器項目: 0
- 其他: 0
- 信任的檔案: 0
- 略過的檔案: 0

偵測到的安全風險總數: 1
已解決的項目總數: 1
需要注意的項目總數: 0

已解決的威脅:
Packed.Generic.181
類型: 異常
風險: 高度 (高度隱匿性、高度移除、高度效能、高度隱私權)
類別: 啟發式病毒
狀態: 完全解決
-----------
1 檔案
c:\users\xxxx\desktop\0920-0101(mm).rar - 已刪除

显示全部楼层 · 发表于 2008-9-20 02:06:33

俺倒更想知道是从哪里逮到他的，去蹲点去。

显示全部楼层 · 发表于 2008-9-20 02:17:34

[quote]原帖由 lg560852 于 2008-9-20 02:06 发表
俺倒更想知道是从哪里逮到他的，去蹲点去。 [/quote]

http://m.c5x8.com/mm.exe
http://m.c5x8.com/dd/x.gif
http://m.c5x8.com/dd/1.exe
http://m.c5x8.com/dd/2.exe
http://m.c5x8.com/dd/3.exe
http://m.c5x8.com/dd/4.exe
http://m.c5x8.com/dd/5.exe
http://m.c5x8.com/dd/6.exe
http://m.c5x8.com/dd/7.exe
http://m.c5x8.com/dd/8.exe
http://m.c5x8.com/dd/9.exe
http://m.c5x8.com/dd/10.exe

显示全部楼层 · 发表于 2008-9-20 02:24:20

Start of the scan: 2008年9月19日  11:24

Starting the file scan:

Begin scan in 'C:\Users\Morgan\Desktop\0920-0101(mm).rar'
C:\Users\Morgan\Desktop\
  0920-0101(mm).rar
[0] Archive type: RAR
   --> mm.exe3
      [1] Archive type: Runtime Packed
      --> Object
[NOTE]    The file was deleted!

End of the scan: 2008年9月19日  11:24
Used time: 00:04 Minute(s)

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-9-20 08:13:02

金山 0

显示全部楼层 · 发表于 2008-9-20 08:25:50

费尔杀了

显示全部楼层 · 发表于 2008-9-20 08:49:04

kis6未检测到

显示全部楼层 · 发表于 2008-9-20 09:13:18

这是啥意思？

显示全部楼层 · 发表于 2008-9-20 09:58:20

这个更新的东西，红伞好像都能杀。。。

[病毒样本] 新帖!!!mm.exe(第54次更新)[已开新帖]

本帖子中包含更多资源

评分

9.20没有

本帖子中包含更多资源