VT Detection ratio: 13 / 46 ~tmp8643031374281303887.exe

显示全部楼层 · 发表于 2013-5-3 18:53:26

https://www.virustotal.com/en/fi ... nalysis/1367578339/

显示全部楼层 · 发表于 2013-5-3 18:55:32

过毒霸

显示全部楼层 · 发表于 2013-5-3 19:26:13

QVM20

显示全部楼层 · 发表于 2013-5-3 19:46:10

gd 2014

*** Process ***

Process: 1580
File name: ~tmp8643031374281303887.exe
Path: c:\users\abc\downloads\~tmp8643031374281303887\~tmp8643031374281303887.exe

Publisher: Unknown publisher
Creation date: 05/03/13 10:51:52
Modification date: 05/03/13 11:39:14

Started by: explorer.exe
Publisher: Microsoft Windows

*** Actions ***

The program establishes a network connection.
The program has downloaded infected software.
The program has saved files in the system folder.
The program has created or manipulated an executable file.
The program has created or manipulated an executable file in the system folder.

*** Quarantine ***

The following files were moved into quarantine:
C:\Users\abc\Downloads\~tmp8643031374281303887\~tmp8643031374281303887.exe
C:\Windows\Temp\temp61.exe

The following registry entries were deleted:

YGLRKA4tJycnJyYGLifncnIuJganQicndHJiYnArJycnJyYGuWLRKApqcnJycmJioC0nJycnJgbccoJygmJiwC4nJycnJgb8cnJycmJicLhycnJyYmJwupJxXWOmcpJxXWOmcmJicItycnJyYmJwq3KCcI5yggAA
Rules version: 4.0.10
OS: Windows 6.1 Service Pack 1.0 Build: 7601 - Workstation 32bit OS
dll version: 30732

"C:\Users\abc\Downloads\~tmp8643031374281303887\~tmp8643031374281303887.exe"
C:\Windows\Explorer.EXE

显示全部楼层 · 发表于 2013-5-3 19:46:48

[可疑文件] VT Detection ratio: 13 / 46 ~tmp8643031374281303887.exe

本帖子中包含更多资源

本帖子中包含更多资源