VT Detection ratio: 0 / 44 八舅老爷.exe

显示全部楼层 · 发表于 2013-5-4 16:26:16

过了好多啊

显示全部楼层 · 发表于 2013-5-4 19:01:09

这几个舅老爷貌似都过小a

显示全部楼层 · 发表于 2013-5-4 19:54:28

我发现图片上有“！”这一类都过OA，都会蓝屏

显示全部楼层 · 发表于 2013-5-4 20:36:31

GD 2014

*** Process ***

Process: 6136
File name: 八舅老爷.exe
Path: c:\users\abc\downloads\八舅老爷\八舅老爷.exe

Publisher: Unknown publisher
Creation date: 05/04/13 06:00:12
Modification date: 05/04/13 12:31:29

Started by: explorer.exe
Publisher: Microsoft Windows

*** Actions ***

The program has executed actions in the name of another program.
The program is trying to create a startup item to launch a program automatically at system startup.
An executable file was stored in a suspicious location.

*** Quarantine ***

The following files were moved into quarantine:
C:\Users\abc\Downloads\八舅老爷\八舅老爷.exe

The following registry entries were deleted:

YGLhybINKyeJYmJykggsJycmJicHLScoJiYnCC4nh3KicuJwKnRyQicnJga3cnJycmJigC4nJyYmJwe5YuHJog7ZcnKQLicnJiYnB8pycmJicn

KwJidnYmJycgabcoJiYnKCwConJycnJgZ3KicHdy8nJyYmJweHKicoJiYnCIcrJygmJicIhy4nJyYmJwenKxeYNWYrJxeYNWYrJyYGty8nJycnJ

gbHLicnJiYnB8cvJycmJicH5ygnhwAA
Rules version: 4.0.10
OS: Windows 6.1 Service Pack 1.0 Build: 7601 - Workstation 32bit OS
dll version: 30732

"C:\Users\abc\Downloads\八舅老爷\八舅老爷.exe"
C:\Windows\Explorer.EXE

显示全部楼层 · 发表于 2013-5-4 20:43:32

[可疑文件] VT Detection ratio: 0 / 44 八舅老爷.exe

本帖子中包含更多资源

本帖子中包含更多资源