1

Joker

go on、

a-squared	4.0.0.29	20081228050205	2008-12-28	Trojan.Win32.Dialer!IK	3.175
AntiVir	7.9.0.45	7.1.1.40	2008-12-27	HEUR/Malware	1.640
Arcavir	1.0.5	200812131407	2008-12-13	-	1.251
Authentium	5.1.1	200812272110	2008-12-27	W32/OnlineGames.A.gen!GSA (Possible)	1.105
AVAST!	3.0.1	081226-0	2008-12-26	Win32:Warezov-MF [Wrm]	0.008
AVG	7.5.52.442	270.10.0/1866	2008-12-27	-	1.781
BitDefender	7.81008.2389967	7.22812	2008-12-28	Generic.Malware.SP!VPk!g.18B55DC9	2.184
CA (VET)	9.0.0.143	31.6.6276	2008-12-24	-	3.531
ClamAV	0.94.2	8803	2008-12-27	-	0.023
Comodo	3.0	826	2008-12-27	-	0.823
CP Secure	1.1.0.715	2008.12.27	2008-12-27	-	6.302
Dr.Web	4.44.0.9170	2008.12.27	2008-12-27	-	3.807
ewido	4.0.0.2	2008.12.27	2008-12-27	Heuristic.Win32.AVKiller	4.182
F-Prot	4.4.4.56	20081227	2008-12-27	W32/OnlineGames.A.gen!GSA (generic, not disinfectable)	1.074
F-Secure	5.51.6100	2008.12.27.01	2008-12-27	-	3.370
GData	19.2122/19.159	20081228	2008-12-28	Worm.Win32.AutoRun.vxc [Engine:A]	4.573
Ikarus	T3.1.01.45	2008.12.27.72070	2008-12-27	Trojan.Win32.Dialer	3.778
Microsoft	1.4205	2008.12.28	2008-12-28	TrojanDropper:Win32/Agent.FG	5.487
mks_vir	2.01	2008.12.27	2008-12-27	-	2.630
Norman	5.93.01	5.93.00	2008-12-26	-	5.999
nProtect	20081226.02	2818943	2008-12-26	Generic.Malware.SP!VPk!g.18B55DC9	4.409
Quick Heal	10.00	2008.12.27	2008-12-27	Suspicious - DNAScan	0.976
Sophos	2.82.1	4.37	2008-12-28	Mal/Behav-160	2.073
Sunbelt	4755	4755	2008-12-22	BehavesLike.Win32.Malware (v)	0.994
The Hacker	6.3.1.2	v00200	2008-12-26	-	1.469
VBA32	3.12.8.10	20081227.1021	2008-12-27	-	1.521
ViRobot	20081226	2008.12.26	2008-12-26	-	0.585
VirusBuster	4.5.11.10	10.100.7/732081	2008-12-28	-	0.966
卡巴斯基	5.5.10	2008.12.27	2008-12-27	Worm.Win32.AutoRun.vxc	0.097
安博士V3	2008.12.28.00	2008.12.28	2008-12-28	-	1.002
安天	2.0.18	20081227.1929915	2008-12-27	-	0.119
江民杀毒	11.0.706	2008.12.21	2008-12-21	-	1.410
熊猫卫士	9.05.01	2008.12.27	2008-12-27	-	4.019
瑞星	20.0	21.09.52.00	2008-12-27	-	0.975
赛门铁克	1.3.0.24	20081227.002	2008-12-27	Trojan.KillAV	0.068
趋势科技	8.700-1004	5.734.31	2008-12-27	TROJ_KILLAV.TU	0.021
迈克菲	5.3.00	5476	2008-12-27	-	2.789
金山毒霸	2008.9.8.18	2008.12.27.20	2008-12-27	-	0.634
飞塔	2.81-3.117	9.859	2008-12-27	-	0.233

[ 本帖最后由 Joker 于 2008-12-28 10:00 编辑 ]

何倩

强悍的毒毒

08红伞威点

Start of the scan: 2008年12月28日  13:53

Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\mm_2.rar'
C:\Documents and Settings\***\桌面\mm_2.rar
    [0] Archive type: RAR
      --> mm_2.exe
          [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      A backup was created as '49b614c9.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
---------------------------------------------------------------------------------------------
启发 to Avira

File ID	Filename	Size (Byte)	Result
25219983	x1.rar	13.84 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25219976	mm_2.exe	20.2 KB	UNDER ANALYSIS

[ 本帖最后由 08红伞威点 于 2008-12-28 14:12 编辑 ]

leonfg

C:\Documents and Settings\GUNDAM\桌面\mm_2.rar » RAR » mm_2.exe - a variant of Win32/AutoRun.WC worm

挪威的冬天

金山毒霸可信认证查询结果如下:

报告生成于:   2008/12/28 16:19

mm_2.exe      --------      分析中


理论文件总数:        1
实际文件总数:        1

其中:

分析中: 1

识别率为: 100%

Palkia

C:\Documents and Settings\Administrator\桌面\mm_2.rar>>mm_2.exe        Trojan.Cap8122719.fbaj        木马        还未处理

kkgh

瑞星  Worm.Win32.DownLoad.mk

king6199

微点拦截杀掉，红伞后报。微点必入正！！

allinwonderi

没用沙盒

BING126

McAfee miss