刚找到的mm.exe的几个新成员

显示全部楼层 · 发表于 2009-7-14 12:05:51

怎样解???

显示全部楼层 · 发表于 2009-7-14 12:10:04

drweb

显示全部楼层 · 发表于 2009-7-14 23:13:43

入库

2009/7/14 23:10:08 已清除木马程序 Trojan-Downloader.Win32.Geral.ark G:\Temp\Virus\KillBadMM.rar/4//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2009-7-15 00:46:33

IKARUS - T3SCAN V1.32.10.0 (WIN32)
      T3 V1.01.64
      Copyright (c) 2006 - 2009 by Ikarus Software.
      All rights reserved.

Signature-database from 14.7.2009 16:01:19 (Build: 73035)

e:\KillBadMM.rar:1 - Signature 'Exploit.JS.Mult' found
e:\KillBadMM.rar:2 - Signature 'Exploit.HTML.Repl' found
e:\KillBadMM.rar:3 - Signature 'JS.Shellcode' found
e:\KillBadMM.rar:4 - Signature 'Packed.Win32.Klone' found
e:\KillBadMM.rar - Signature 'Exploit.HTML.Repl' found

      5 Files scanned
      (1 Archiv with 6 files)
      5 Signatures found
      0 Suspect code-parts found
      Used time: 0:00.329

显示全部楼层 · 发表于 2009-7-15 11:31:16

To MP

显示全部楼层 · 发表于 2009-7-15 11:48:44

Virus: Exploit.Agent.U, Dropped:Generic.Malware.SP!Pk!Tkg.277159E5 (Engine A), JS:Agent-AU [Expl], JS:ShellCode-J [Expl], Win32:Perkesh [Rtk] (Engine B)

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2009-7-15 13:01:32

费尔终于K掉了

[病毒样本] 刚找到的mm.exe的几个新成员

本帖子中包含更多资源

5那个文件加了密码，直接扫不出。