高质量 2/44

依班娜

http://www.virustotal.com/zh-cn/analisis/03cecda6af2b1adf31b9af8cd618075cf16e755b9dd28aa7da5d787dfca55446-1253189504

http://www.threatexpert.com/report.aspx?md5=75be52b22af663fca84fc8cfa73817eb

62590423

木马程序生成以下文件：
1) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\WINDOWS\SYSTEM32\MSPMSNSVR.DLL
2) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\WINDOWS\SYSTEM32\OLEMASKVR.DLL
3) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\WINDOWS\SYSTEM32\TASKMRG.EXE
4) C:\WINDOWS\SYSTEM32\MSPMSNSVR.DLL
是否删除木马程序及其衍生物?

IllusionWing

to kl.

kingmuro

过卡巴6.0

悠柚

Multi Command-Line Scanner Report
-------------------------------------------------------------------------
D:\TDDownload\75BE52B22AF663FCA84FC8CFA73817EB
MD5 Hash: 75BE52B22AF663FCA84FC8CFA73817EB

A-squared -----Nothing
BitDefender -----Nothing
F-Prot -----Nothing
Panda ----- Suspicious file
Sophos -----Nothing
VBA32 -----Nothing

*** 1/6 antivirus engines found virus in this file ***
-------------------------------------------------------------------------

Task done @ 2009-09-17 星期四 20:34:40.14
Note: The results might be different from that of the GUI version.

to IObit

IllusionWing

UGuard v6 - 扫描日志

D:\Users\幻梦羽飞\Desktop\SmartBombIns[1]\SmartBombIns[1].exe -> Packed.SUDetector

日志结束。
灰常好

jason_jiang

to sophos, f-secure, drweb
=====================
Hello,

Thank you for your submission.
The file you sent was found to be malicious. We will be detecting the sample you submitted as Trojan-Dropper:W32/Agent.LVQ in the next database update.

F-Secure Security Labs

[ 本帖最后由 jason_jiang 于 2009-9-17 21:52 编辑 ]

vofado

Panda miss
已回报

IllusionWing

Hello,
  SmartBombIns[1].exe - Trojan-Dropper.Win32.Agent.bdbn
New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

lookhandsome

小红伞KILL