新帖!!!mm.exe(第160次更新)[附上生成]！

显示全部楼层 · 发表于 2008-11-30 16:19:05

第148次更新

显示全部楼层 · 发表于 2008-11-30 16:28:12

伞杀

显示全部楼层 · 发表于 2008-11-30 16:42:02

ESET 漏一个
C:\Documents and Settings\GUNDAM\桌面\1130-1615mm.rar » RAR » flashmm.exe3 - a variant of Win32/AutoRun.WC worm
C:\Documents and Settings\GUNDAM\桌面\1130-1615mm.rar » RAR » x.g3if » RAR » 照片 .exe - probably a variant of Win32/AutoRun.WC worm
C:\Documents and Settings\GUNDAM\桌面\1130-1615mm.rar » RAR » 1.ex3e - a variant of Win32/Delf.NNM trojan
C:\Documents and Settings\GUNDAM\桌面\1130-1615mm.rar » RAR » 9.ex3e - a variant of Win32/HackTool.Xarp trojan
C:\Documents and Settings\GUNDAM\桌面\1130-1615mm-c.rar » RAR » svchost.e4xe - probably a variant of Win32/TrojanDropper.Delf.NIN trojan
C:\Documents and Settings\GUNDAM\桌面\1130-1615mm-c.rar » RAR » 1ag.e3xe - probably unknown NewHeur_PE virus
C:\Documents and Settings\GUNDAM\桌面\1130-1615mm-c.rar » RAR » dqianlong.d3ll - a variant of Win32/Delf.NNM trojan

显示全部楼层 · 发表于 2008-11-30 18:54:00

a-squared Anti-Malware -版本 4.0
上次更新: 2008/11/30 下午 06:35:45

扫瞄设置:

对像: C:\Documents and Settings\Administrator\桌面\新资料夹
扫瞄文件: 开
启发式扫瞄: 开
ADS扫瞄: 开

扫瞄开始于: 2008/11/30 下午 06:52:00

C:\Documents and Settings\Administrator\桌面\新资料夹\1.ex3e 已检测: Trojan-PWS.Win32.OnLineGames!IK
C:\Documents and Settings\Administrator\桌面\新资料夹\1ag.e3xe 已检测: Trojan-PWS.Win32.Agent.hf!IK
C:\Documents and Settings\Administrator\桌面\新资料夹\3.ex2e 已检测: Trojan-PWS.Win32.Agent.hf!IK
C:\Documents and Settings\Administrator\桌面\新资料夹\9.ex3e 已检测: MalwareScope.Worm.Viking.4!IK
C:\Documents and Settings\Administrator\桌面\新资料夹\dqianlong.d3ll 已检测: Trojan-Dropper.SFU!IK
C:\Documents and Settings\Administrator\桌面\新资料夹\svchost.e4xe 已检测: Trojan-Spy.Win32.Hitpop.C!IK
C:\Documents and Settings\Administrator\桌面\新资料夹\x.g3if/桽⑵ .exe 已检测: Trojan-Downloader.Win32.Banload!IK
C:\Documents and Settings\Administrator\桌面\新资料夹\x.g3if 已检测: Infected

已扫瞄
文件: 9

已发现
文件: 8

------------------------
生成物可以抓到,本体抓不到

显示全部楼层 · 发表于 2008-11-30 19:24:20

伞杀

显示全部楼层 · 发表于 2008-11-30 23:32:41

第149次更新

显示全部楼层 · 发表于 2008-12-1 16:18:40

第150次更新

显示全部楼层 · 发表于 2008-12-1 21:19:57

第151次更新

显示全部楼层 · 发表于 2008-12-1 23:12:59

原帖由 sam.to 于 2008-12-1 21:19 发表
第151次更新

红伞kill

Begin scan in 'E:\新建文件夹\1201-2119mm'
E:\新建文件夹\1201-2119mm\flashmm.ex3e
[DETECTION] Is the TR/Crypt.FKM.Gen Trojan
[NOTE]    A backup was created as '4994ff45.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
E:\新建文件夹\1201-2119mm\x.gi3f
[0] Archive type: RAR
--> ￕￕￆﾬ                                                                                                                                                                                                          .exe
   [DETECTION] Contains HEUR/Crypted suspicious code
[NOTE]    A backup was created as '499aff07.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年12月1日  23:12
Used time: 00:02 Minute(s)
The scan has been done completely.
   1 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   2 files were deleted
   0 files were repaired
   2 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   2 Notes

显示全部楼层 · 发表于 2008-12-1 23:42:15

ESET 全K!
C:\Documents and Settings\GUNDAM\桌面\1201-2119mm.rar » RAR » x.gi3f » RAR » 照片 .exe - probably a variant of Win32/AutoRun.WC worm
C:\Documents and Settings\GUNDAM\桌面\1201-2119mm.rar » RAR » flashmm.ex3e - a variant of Win32/AutoRun.WC worm
C:\Documents and Settings\GUNDAM\桌面\1201-1613mm.rar » RAR » 9.ex3e - Win32/TrojanDropper.Delf.NIN trojan
C:\Documents and Settings\GUNDAM\桌面\1201-1613mm.rar » RAR » flashmm.exe3 - a variant of Win32/AutoRun.WC worm
C:\Documents and Settings\GUNDAM\桌面\1201-1613mm.rar » RAR » x.gi3f » RAR » 照片 .exe - Win32/AutoRun.WC worm
C:\Documents and Settings\GUNDAM\桌面\1201-1613mm.rar » RAR » 1.ex3e - Win32/Delf.NNM trojan
C:\Documents and Settings\GUNDAM\桌面\1201-1613mm-c.rar » RAR » a1g.ex3e - Win32/TrojanDropper.Delf.NKD trojan

[病毒样本] 新帖!!!mm.exe(第160次更新)[附上生成]！