可疑物14个

hddu

可疑物14个

norman6810

微点解压时主防报5个，剩下的扫描报2个：

BING126

McAfee 报了6个。。

norman6810

不知道其他的那些个文件是不是也有问题！

328397663

原帖由 hddu 于 2009-5-10 22:02 发表
可疑物14个

Scanned file:   ò÷½³ïä¼À¼ò.rar - Infected ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/2.tmp/$inst/7.tmp - OK ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/2.tmp - OK ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/7.tmp - OK ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/b2e.exe/batfile.bat - OK ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/b2e.exe - OK ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/mir1.mwv - infected by Trojan-GameThief.Win32.WOW.mhd ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/mpj106093.dll - OK ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/plf1.tmp - OK ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/Server.tmp - infected by Trojan.Win32.Agent.bqkd ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/Sys658.dll - infected by Trojan.Win32.KillAV.dbg ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/temp_0.tmp/0 - OK ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/temp_0.tmp/1 - OK ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/temp_0.tmp - OK ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/x1c113101.dll - OK ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/_A00F2A102D.exe - infected by Trojan-Dropper.Win32.Agent.aoeg ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/_A00F2BF839.exe - infected by Trojan-Dropper.Win32.Agent.aoeg ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/_A00F339C51.exe - infected by Trojan-Dropper.Win32.Agent.aoeg ò÷½³ïä¼À¼ò.rar/н¨Îļþ¼Ð/~eca14.t - infected by Trojan-Dropper.Win32.Agent.akdp Statistics: Known viruses: 2155291 Updated: 10-05-2009 File size (Kb): 828 Virus bodies: 7 Files: 18 Warnings: 0 Archives: 4 Suspicious: 0

to kl

tun

都是今天样本的生成物？

-------------------------------
三个不像毒，
2.tmp 解包就是 7.tmp，是个 BMP 图像
plf1.tmp 是安装程序的文字文件
-------------------------------
那个 temp_0.tmp是 mpsmo.exe 的生成物，解包后有PE和BAT，过不少


F-PROT 
[Found security risk] <W32/Agent.CP.gen!Eldorado (generic, not disinfectable)> C:\14\Server.tmp
[Found possible security risk] <W32/Heuristic-KPP!Eldorado (not disinfectable)> C:\14\Sys658.dll

期待微点杀毒公测

huangqian202

趋势拦截，无法下载！

凝逸反毒

凝逸反毒  ok:0|毒:3|末知:5|13/14|每秒2个文件

e:\000木马\新建文件夹[1]\新建文件夹\mir1.mwv,virus
e:\000木马\新建文件夹[1]\新建文件夹\_a00f2a102d.exe,virus
e:\000木马\新建文件夹[1]\新建文件夹\_a00f2bf839.exe,virus
e:\000木马\新建文件夹[1]\新建文件夹\_a00f339c51.exe,virus
e:\000木马\新建文件夹[1]\新建文件夹\~eca14.t,virus

Sebastian

Starting the file scan:

Begin scan in 'D:\kafan\新建文件夹'
D:\kafan\新建文件夹\mir1.mwv
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\新建文件夹\Server.tmp
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Agent.zvz back-door program
    [NOTE]      The file was deleted!
D:\kafan\新建文件夹\_A00F2A102D.exe
    [DETECTION] Is the TR/Drop.Agent.aoeg Trojan
    [NOTE]      The file was deleted!
D:\kafan\新建文件夹\_A00F2BF839.exe
    [DETECTION] Is the TR/Drop.Agent.aoeg Trojan
    [NOTE]      The file was deleted!
D:\kafan\新建文件夹\_A00F339C51.exe
    [DETECTION] Is the TR/Drop.Agent.aoeg Trojan
    [NOTE]      The file was deleted!
D:\kafan\新建文件夹\~eca14.t
    [DETECTION] Is the TR/Drop.Agent.akdp Trojan
    [NOTE]      The file was deleted!


End of the scan: 2009年5月11日  08:18
Used time: 00:00 Minute(s)

The scan has been done completely.

      1 Scanned directories
     17 Files were scanned
      6 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      6 files were deleted
      0 Viruses and unwanted programs were repaired
      0 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
     11 Files not concerned
      2 Archives were scanned
      0 Warnings
      6 Notes