谁有最新蠕虫 MYPLAYER.COM

Nblock

MYPLAYER.COM
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\ALXRES070530.EXE
2) C:\WINDOWS\SYSTEM32\SCRSYS070530.SCR
3) C:\WINDOWS\SYSTEM32\WINSYS32_070530.DLL
4) C:\WINDOWS\SYSTEM32\SCRSYS16_070530.SCRUR
5) C:\WINDOWS\SYSTEM32\WINSYS16_070530.DLL
是否删除木马程序及其衍生物?

谁有MYPLAYER.COM？   请发到样本区吧

[ 本帖最后由 Nblock 于 2007-6-5 19:48 编辑 ]

taihuxian

Virus: Win32:Delf-DLH [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

龙井茶

LS的梦想就在那几块牌子啊？有意思

啊弥陀佛

微点砍

Giggs

这么多挂的.上报去

小邪邪

zxkf

detected: riskware Trojan.generic        Running process: D:\YB\service\service.exe


CreateFile        C:\WINDOWS\service.exe
ModifyRegValue        \REGISTRY\USER\S-1-5-21-1275210071-1682526488-839522115-1003\Software\Microsoft\Windows NT\CurrentVersion\Windows\load
Process is trying to register its copy as an autorun startup object. This behaviour is typical of Trojans.

wangjay1980

detected: Trojan program Trojan.Win32.VB.bba        URL: http://bbs.kafan.cn/attachment.php?aid=82405//service.exe

zengmingwh

Suspicious Files and Miscellaneous Uploads

Thank you for your submission. Below you can see the current status of the uploaded files.


--------------------------------------------------------------------------------


We received the following archive files:



File ID  Filename  Size (Byte) Result
600206  service.rar 88.89 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
599616  service.exe  96.58 KB  MALWARE


Please find a detailed report concerning each individual sample below:

Filename Result
service.exe  MALWARE

The file 'service.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Spy.Agent.98893. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 6.38.01.225.

aoyang

自己修改标题