mm.exe(第210次更新) dll生成过大量!

显示全部楼层 · 发表于 2008-12-21 16:38:45

C:\Documents and Settings\Administrator\桌面\1221-1635mm.rar > RAR > x.gif3 > RAR > 照片 .exe - Win32/AutoRun.WC 蠕虫的变种
C:\Documents and Settings\Administrator\桌面\1221-1635mm.rar > RAR > 9.exe3 - Win32/HackTool.Xarp 特洛伊木马的变种

显示全部楼层 · 发表于 2008-12-21 16:43:47

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... df&t=1229848990
Information: Is the TR/Spy.Gen Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.45, VDF 7.1.1.14

显示全部楼层 · 发表于 2008-12-22 00:02:34

第184次更新

显示全部楼层 · 发表于 2008-12-22 00:08:17

漏1个
C:\Documents and Settings\Administrator\桌面\1221-2346mm.rar > RAR > 1.e3xe - 可能是 Win32/Delf.NNM 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\1221-2346mm.rar > RAR > 9.ex3e - Win32/HackTool.Xarp 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\1221-2346mm.rar > RAR > x.gif3 > RAR > 照片 .exe - Win32/AutoRun.WC 蠕虫的变种
C:\Documents and Settings\Administrator\桌面\1221-2346mm-c.rar > RAR > dbwkbeila.dll3 - 可能是 Win32/Delf.NNM 特洛伊木马的变种

显示全部楼层 · 发表于 2008-12-22 00:40:30

显示全部楼层 · 发表于 2008-12-22 16:27:38

第185次更新

显示全部楼层 · 发表于 2008-12-22 16:42:09

C:\Documents and Settings\Administrator\桌面\1222-1623mm-c.rar > RAR > dbwkxintiao.d3ll - 可能是 Win32/Delf.NNM 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\1222-1623mm.rar > RAR > 9.ex3e - Win32/TrojanDropper.Delf.NIN 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\1222-1623mm.rar > RAR > 8.exe2 - Win32/AutoRun.WC 蠕虫的变种
C:\Documents and Settings\Administrator\桌面\1222-1623mm.rar > RAR > x.g3if > RAR > 照片 .exe - Win32/AutoRun.WC 蠕虫的变种
C:\Documents and Settings\Administrator\桌面\1222-1623mm.rar > RAR > 1.ex3e - 可能是 Win32/Delf.NNM 特洛伊木马的变种

显示全部楼层 · 发表于 2008-12-22 21:12:03

1222-1623mm.rar\8.exe2\[UPX]\[Embedded#5000]
Win32:Ressdt-F [Rtk]

1222-1623mm.rar\x.g3if\照片 .exe\[UPX]\[Embedded#5000]
Win32:Ressdt-F [Rtk]

1222-1623mm.rar\1.ex3e\[UPX]\[Embedded#4718]\[Upack]\[Embedded#SYS]
Win32:Trojan-gen {Other}

显示全部楼层 · 发表于 2008-12-22 23:32:30

第186次更新

显示全部楼层 · 发表于 2008-12-22 23:33:37

Begin scan in 'C:\Users\Joker\Desktop\1222-2329mm.rar'
C:\Users\Joker\Desktop\1222-2329mm.rar
[0] Archive type: RAR
   --> x.gi2f
      [1] Archive type: RAR
      --> ￕￕￆﾬ                                                                                                                                  .exe
         [DETECTION] Contains HEUR/Malware suspicious code
--> 9.ex2e
   [DETECTION] Contains HEUR/Crypted suspicious code
   --> 8.ex2e
      [DETECTION] Contains HEUR/Malware suspicious code
   --> mm.exe2
      [DETECTION] Contains HEUR/Malware suspicious code
[WARNING] The file was ignored!

[病毒样本] mm.exe(第210次更新) dll生成过大量!

评分

评分

全启发