学校样本30个

wrq

When accessing data from the URL, "http://bbs.kafan.cn/attachment.php?aid=472922&k=e1d4542aad190b1f954a595016d3336c&t=1235563497"
a virus or unwanted program 'TR/Spy.Gen' [trojan] was found.
Action taken: Blocked file

saintsql

Category:
Trojan

Description:
This program has potentially unwanted behavior.

Advice:
Remove this software immediately.

Resources:
containerfile:
C:\Users\Simon\Downloads\30X.rar

file:
C:\ProgramData\Microsoft\Windows Defender\LocalCopy\{838D0683-9804-46B1-815B-A4CEC46BAD54}-30X.rar

file:
C:\Users\Simon\Downloads\30X.rar->30X\TempBD.exe->(nsis-3-$(ENVVAR)\102.exe)

webfile:
C:\ProgramData\Microsoft\Windows Defender\LocalCopy\{838D0683-9804-46B1-815B-A4CEC46BAD54}-30X.rar|http://bbs.kafan.cn/attachment.p ... 7f&t=1235564526

webfile:
C:\Users\Simon\Downloads\30X.rar|http://bbs.kafan.cn/attachment.p ... 7f&t=1235564526

sam.to

Hello,

getmacaddress.dll,
tmp1C.tmp_,
xzad

No malicious code were found in these files.

TempBB.exe_ - not-a-virus:AdWare.Win32.Agent.lde

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

Please quote all when answering.
The answer is relevant to the latest bases from update sources.


>

leiyun

红伞报了29个