mm.exe 第365次更新 3月14日第2次更新

sam.to

URL TO KL

sam.to

第310次更新

linjw

Begin scan in 'D:\0221-1327mm-c.rar'
D:\0221-1327mm-c.rar
    [0] Archive type: RAR
    --> 0221-1327mm-c\aj.pif2
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
      --> 0221-1327mm-c\TIMPIatform.exe2
          [DETECTION] Contains HEUR/Crypted suspicious code
      --> 0221-1327mm-c\wuauclt.exe2
          [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      A backup was created as '49d1c357.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

ledled

3 MISS to VB

sam.to

第311次更新

ledled

VB ALL CLEAN

黑衣~魂

2月21第2次:
DR.WEB KILL 3
wuauclt.exe-Trojan.Siggen.564
1.ex2e-Trojan.Siggen.564
9.ex2e-Trojan.Packed.152

TIMPIatform.exe 貌似沒啥行為-TO-DW

TIMPIatform.exe : INFECTED with W32/Packed_Upack (Signature: W32/Packed_Upack)
[ DetectionInfo ]
   * Filename: C:\analyzer\scan\TIMPIatform.exe.
   * Sandbox name: W32/Packed_Upack.H.
   * Signature name: W32/Packed_Upack.H.
   * Compressed: YES.
   * TLS hooks: YES.
   * Executable type: Application.
   * Executable file structure: OK.
   * Filetype: PE_I386.
[ General information ]
   * File length:        10362 bytes.
   * MD5 hash: e70e96be0abc9accb9497abb2fe7b79d.

[ 本帖最后由 黑衣~魂 于 2009-2-22 00:36 编辑 ]

ledled

Hello,

1.ex2e, wuauclt.exe2 - Trojan-Dropper.Win32.Small.cty,
9.ex2e - Trojan-GameThief.Win32.OnLineGames.urkt,
TIMPIatform.ex2e - Trojan.Win32.Agent.brti

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.


> password:infected
>
--------------------
Regards, Vitaly Yakutenko
Virus analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

leonfg

原帖由 sam.to 于 2009-2-21 23:13 发表
第311次更新

all
C:\Documents and Settings\GUNDAM\桌面\0221-2310mm.rar » RAR » 1.ex2e - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\GUNDAM\桌面\0221-2310mm.rar » RAR » 9.ex2e - a variant of Win32/HackTool.Xarp trojan
C:\Documents and Settings\GUNDAM\桌面\0221-2310mm-c.rar » RAR » 0221-2310mm-c\TIMPIatform.ex2e - a variant of Win32/Delf.NNM trojan
C:\Documents and Settings\GUNDAM\桌面\0221-2310mm-c.rar » RAR » 0221-2310mm-c\wuauclt.exe2 - probably a variant of Win32/Genetik trojan

328397663

2009-2-22 3:15:19 检测到威胁: Backdoor.Win32.Small.hnn C:\Documents and Settings\Administrator\桌面\xx.exe/Petite 2009-2-22 3:15:23 已删除: Backdoor.Win32.Small.hnn C:\Documents and Settings\Administrator\桌面\xx.exe