查看: 2540|回复: 15
收起左侧

[病毒样本] mm.exe (算是263次) 越俎代庖一下 sam.to无视我啊~

[复制链接]
IllusionWing
发表于 2009-2-3 16:36:48 | 显示全部楼层 |阅读模式
我采集的向来不全..
越俎代庖一下
sam.to无视我啊~已经to kl

[ 本帖最后由 gankeyu 于 2009-2-3 16:48 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
KYO842273
发表于 2009-2-3 16:45:53 | 显示全部楼层
AVG PASS
IllusionWing
 楼主| 发表于 2009-2-3 16:49:38 | 显示全部楼层
ug6 11个。
PS:2L是资深潜水员?
saga3721
发表于 2009-2-3 16:51:23 | 显示全部楼层
红伞数目不统计了139.exe那个运行杀,接下来微点又杀了个广告——垃圾箱图标的

[ 本帖最后由 saga3721 于 2009-2-3 16:53 编辑 ]
hahacomcn
发表于 2009-2-3 16:53:57 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\cnelf\桌面\C.rar'
C:\Documents and Settings\cnelf\桌面\C.rar
    [0] Archive type: RAR
    --> alg.exe
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    --> mm.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> spoolv.exe
      [DETECTION] Is the TR/Expl.IMG-WMF.EX.1 Trojan
    --> waugafe.exe
      [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
    --> baiduc.dll
      [DETECTION] Is the TR/BHO.Gen Trojan
    --> cpush.dll
      [DETECTION] Contains recognition pattern of the ADSPY/Bho.fhg adware or spyware
    --> xaiasp.dll
      [DETECTION] Is the TR/Spy.Gen Trojan
    --> sdlssk.sys
      [DETECTION] Contains recognition pattern of the RKIT/Small.LE.10 root kit
      --> system
          [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> BksS.pif
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
      --> cddd.pif
        [1] Archive type: RAR
        --> ᅰᅰᅥᆲ                                                                                                                  .exe
          [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> ZKZ.PIF
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '49fa063c.qua'  ( QUARANTINE )


End of the scan: 2009年2月3日  16:53
Used time: 00:03 Minute(s)

The scan has been done completely.

      0 Scanning directories
     20 Files were scanned
     12 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      2 Archives were scanned
      0 Warnings
      1 Notes
电影结束了
发表于 2009-2-3 16:57:47 | 显示全部楼层
-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.4
Virus signature file from: 2008-7-2, 2:29

Scan name: 12
Path to scan: E:\收集区\C\

Thorough scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2009-2-3, 16:59:04
---------------------------------------------------------------------

[Found possible virus]        <W32/Threat-HLLSI-based!Maximus>        E:\收集区\C\alg.exe
[Found possible security risk]        <W32/Heuristic-210!Eldorado (damaged, not disinfectable)>        E:\收集区\C\spoolv.exe->(UPack)
[Found possible security risk]        <W32/Heuristic-210!Eldorado (damaged, not disinfectable)>        E:\收集区\C\system->(UPack)

---------------------------------------------------------------------
Scan ended:        2009-2-3, 16:59:05
Duration:        0:00:00

Scan result:

Scanned files:                 23
Infected objects:         3
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------
tracydk
发表于 2009-2-3 18:15:28 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
sam.to
发表于 2009-2-3 19:44:26 | 显示全部楼层
New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.
syfwxmh
发表于 2009-2-3 19:49:44 | 显示全部楼层

回复 8楼 sam.to 的帖子

这是正版
Hello,

alg.exe_ - Trojan-Downloader.Win32.Small.jek,
BksS.pif_ - Trojan.Win32.Agent2.cax,
cddd.pif_ - Worm.Win32.AutoRun.zgd,
mm.exe_, ZKZ.pif_ - Worm.Win32.AutoRun.zgb,
system - Trojan.Win32.StartPage.dhm,
xaiasp.dll - Trojan.Win32.Delf.ill

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

AUTORUN.INF, DEL.bat_, linkinfo.dll, Uninst.exe_

No malicious code were found in these files.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.
sam.to
发表于 2009-2-3 19:59:58 | 显示全部楼层

回复 9楼 syfwxmh 的帖子

AUTORUN.INF, DEL.bat_, linkinfo.dll, Uninst.exe_
那个生成
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-21 10:04 , Processed in 0.134070 second(s), 17 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表