pusk3.exe

显示全部楼层 · 发表于 2011-6-10 22:31:41

http://camas.comodo.com/cgi-bin/submit?file=ff9cd70993b882f9bc3b49ee4ed1cda8912cd4da07d263361e40c57a539e8b22

Auto Analysis Verdict
Suspicious++

Suspicious Actions Detected
Copies self to other locations
Deletes self

-----------------------------------------------------

2011-06-10 22:19:14 C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe Sandboxed As Partially Limited

2011-06-10 22:19:18 C:\Documents and Settings\All Users\Application Data\tGggmKGOst.exe Sandboxed As Partially Limited

2011-06-10 22:19:23 C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe Scanned Online and Found Malicious

2011-06-10 22:19:27 C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe Modify Key HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Policies\System

2011-06-10 22:19:27 C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe Modify File C:\Documents and Settings\All Users\Application Data\tGggmKGOst.exe

2011-06-10 22:19:27 C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe Modify Key HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\tGggmKGOst

2011-06-10 22:19:27 C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe Modify Key HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable

2011-06-10 22:19:28 C:\Documents and Settings\All Users\Application Data\tGggmKGOst.exe Scanned Online and Found Malicious

2011-06-10 22:19:34 C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe Modify Key HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Internet Explorer\Download\CheckExeSignatures

2011-06-10 22:19:42 C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe Modify File C:\Documents and Settings\Roger\Local Settings\Temp\tmp944.tmp

2011-06-10 22:19:42 C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe Modify Key HKLM\SYSTEM\ControlSet001\Control\Session Manager\PendingFileRenameOperations

------------------------------------------------

comodo 雲查殺

2011-06-10 22:19:22 C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe TrojWare.Win32.Trojan.Agent.Gen@1

2011-06-10 22:19:23 C:\Documents and Settings\All Users\Application Data\tGggmKGOst.exe TrojWare.Win32.Trojan.Agent.Gen@1

显示全部楼层 · 发表于 2011-6-10 22:37:17

ESS killed
D:\Virus samples\pusk3.exe - a variant of Win32/Kryptik.OVH trojan - cleaned by deleting - quarantined

显示全部楼层 · 发表于 2011-6-11 00:04:32

小红伞没报 360 压缩报毒

显示全部楼层 · 发表于 2011-6-11 00:41:09

过金山。。。

显示全部楼层 · 发表于 2011-6-11 02:54:04

过nis2011。。。

显示全部楼层 · 发表于 2011-6-11 10:00:08

显示全部楼层 · 发表于 2011-6-11 10:07:07

过毒霸和红伞扫描

显示全部楼层 · 发表于 2011-6-11 12:15:37

大蜘蛛：
pusk3.exe infected with Trojan.DownLoader3.23237

显示全部楼层 · 发表于 2011-6-11 12:18:28

过金山卫士，360SD KILL。

显示全部楼层 · 发表于 2011-6-11 14:14:26

程序：
D:\下载\PUSK3\PUSK3.EXE
木马程序生成以下文件：
1) C:\PROGRAMDATA\TGGGMKGOST.EXE
是否删除木马程序及其衍生物?

[病毒样本] pusk3.exe

本帖子中包含更多资源

本帖子中包含更多资源