VT Detection ratio: 2 / 46 ~!#D990.tmp

显示全部楼层 · 发表于 2013-5-4 22:40:00

https://www.virustotal.com/en/fi ... nalysis/1367678308/

显示全部楼层 · 发表于 2013-5-4 23:08:11

QVM05

显示全部楼层 · 发表于 2013-5-4 23:27:11

数字几乎都杀，这也太神了吧。。。

显示全部楼层 · 发表于 2013-5-5 00:06:02

剑步如飞发表于 2013-5-4 23:27
数字几乎都杀，这也太神了吧。。。

我严重怀疑数字在自动抓包，建议楼主加个密码或权限

显示全部楼层 · 发表于 2013-5-5 08:27:45

GD 2014

*** Process ***

Process: 5040
File name: ~!#d990.exe
Path: c:\users\abc\downloads\~!#d990\~!#d990.exe

Publisher: Unknown publisher
Creation date: 05/04/13 14:38:00
Modification date: 05/05/13 00:23:58

Started by: ~!#d990.exe
Publisher: Unknown publisher

*** Actions ***

The program was modified in memory.
The attributes "system" and "hidden" are set for this program.

*** Quarantine ***

The following files were moved into quarantine:
C:\Users\abc\Downloads\~!#D990\~!#D990.exe

The following registry entries were deleted:

YGLRKA9ncnJycmJicCcnJycnJganQicndHJiYnArJycnJyYGuWLRKA2ccnJycmJi4C0WLAn+cnJycmJicLrScV5jpnLScV5jpnJiYnCOcrIAAA
Rules version: 4.0.10
OS: Windows 6.1 Service Pack 1.0 Build: 7601 - Workstation 32bit OS
dll version: 30732

"c:\users\abc\downloads\~!#d990\~!#d990.exe"
"C:\Users\abc\Downloads\~!#D990\~!#D990.exe"

显示全部楼层 · 发表于 2013-5-5 08:34:22

显示全部楼层 · 发表于 2013-5-5 08:51:22

[可疑文件] VT Detection ratio: 2 / 46 ~!#D990.tmp

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源