mm.exe 第365次更新 3月14日第2次更新

显示全部楼层 · 发表于 2009-2-22 12:14:40

第312次更新

显示全部楼层 · 发表于 2009-2-22 12:15:33

All to VB

显示全部楼层 · 发表于 2009-2-22 12:16:41

Begin scan in 'D:\0222-1214mm.rar'
D:\0222-1214mm.rar
[0] Archive type: RAR
--> mm.e2xe
   [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
   --> x.gif2
      [1] Archive type: RAR
      --> ￕￕￆﾬ                                                                                                          .exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as '49d2d1d0.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-2-22 13:08:37

原帖由 sam.to 于 2009-2-22 12:14 发表
第312次更新

K ALL！
C:\Documents and Settings\GUNDAM\桌面\0222-1214mm.rar » RAR » mm.e2xe - probably a variant of Win32/AutoRun.Agent.IE worm
C:\Documents and Settings\GUNDAM\桌面\0222-1214mm.rar » RAR » x.gif2 » RAR » 照片 .exe - probably a variant of Win32/AutoRun.Agent.IE worm

C:\Documents and Settings\GUNDAM\桌面\0222-1214mm-c.rar » RAR » 0222-1214mm-c\aVj.pif2 - probably a variant of Win32/AutoRun.Agent.IE worm

[ 本帖最后由 leonfg 于 2009-2-22 18:26 编辑 ]

显示全部楼层 · 发表于 2009-2-22 13:35:29

312次更新费尔 miss

显示全部楼层 · 发表于 2009-2-22 13:44:26

DR.WEB KILL ALL

mm.e2xe - probably infected with MULDROP.Trojan
mm.e2xe\data002 - infected with Trojan.KillProc.1565
Archive contains 2 infected items

x.gif/桽.exe\data\rK---Trojan.KillProc.1565;;
桽.exe-Container contains infected objects;;
x.gif;-Archive contains infected objects;;

显示全部楼层 · 发表于 2009-2-22 16:06:19

第313次更新

显示全部楼层 · 发表于 2009-2-22 16:10:52

wuauclt.ex2e - infected with Trojan.Siggen.564
1.exe2 - infected with Trojan.Siggen.564

9.exe2\data001 - infected with Trojan.Sniff
Archive contains an infected item

mm.exe2 - probably infected with MULDROP.Trojan
mm.exe2\data002 - infected with Trojan.KillProc.1565
Archive contains 2 infected items

其餘上報

显示全部楼层 · 发表于 2009-2-22 16:13:38

Begin scan in 'D:\0222-1600mm.rar'
D:\0222-1600mm.rar
[0] Archive type: RAR
   --> 0222-1600mm\1.exe2
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
--> 0222-1600mm\9.exe2
   [DETECTION] Contains HEUR/Crypted suspicious code
--> 0222-1600mm\mm.exe2
   [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
   --> 0222-1600mm\x.gif2
      [1] Archive type: RAR
      --> ￕￕￆﾬ                                                                                                          .exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as '49d30945.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

Begin scan in 'D:\0222-1600mm-c.rar'
D:\0222-1600mm-c.rar
[0] Archive type: RAR
--> 0222-1600mm-c\aVj.pif2
   [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
   --> 0222-1600mm-c\TIMPIatform.exe2
      [DETECTION] Contains HEUR/Crypted suspicious code
   --> 0222-1600mm-c\wuauclt.ex2e
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    A backup was created as '49d3095c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-2-22 16:17:45

to KL\VB

[病毒样本] mm.exe 第365次更新 3月14日第2次更新

回复 51楼 sam.to 的帖子

回复 51楼 sam.to 的帖子

回复 51楼 sam.to 的帖子

回复 57楼 sam.to 的帖子

回复 57楼 sam.to 的帖子

回复 57楼 sam.to 的帖子

浏览过的版块