VT Detection ratio: 7 / 47 lfrx15eg4im37.exe

显示全部楼层 · 发表于 2013-5-19 10:24:58

https://www.virustotal.com/en/fi ... nalysis/1368930204/

显示全部楼层 · 发表于 2013-5-19 10:25:42

数字卫士

显示全部楼层 · 发表于 2013-5-19 14:10:08

无法访问该网页

请求对象位于网址：

https://att.kafan.cn/forum.php?mod=
attachment&aid=mje0nju3nxxlndlhmji5oxwxm
zy4otqznzk1fdm5nzkxmhwxntcwody4

已检测到的威胁:

对象感染源 Trojan.Win32.Jorik.ZAccess.qev

显示全部楼层 · 发表于 2013-5-19 14:27:42

显示全部楼层 · 发表于 2013-5-19 19:47:55

G Data

*** Process ***

Process: 5996
File name: lfrx15eg4im37.exe
Path: c:\users\abc\downloads\lfrx15eg4im37\lfrx15eg4im37.exe

Publisher: Unknown publisher
Creation date: 05/19/13 02:22:46
Modification date: 05/19/13 11:46:18

Started by: lfrx15eg4im37.exe
Publisher: Unknown publisher

*** Actions ***

The virus scanner has detected that the file is malicious.
The program establishes a network connection.

*** Quarantine ***

The following files were moved into quarantine:
C:\Users\abc\Downloads\lfrx15eg4im37\lfrx15eg4im37.exe

The following registry entries were deleted:

YHKCCC4nZ3JyJiYGLycnJycmBqdCJyh0gmJicCsnKCcoJga5ctKQLicnJiYnB8pycmJicnKgLScpJykmBptygmJicoLAKicnJycmBqcrF381ZisnF381ZisnJga3LycnJycmBscuJycmJicHxy8nJyYmJwfnKCeXAAA
Rules version: 4.1.0
OS: Windows 6.1 Service Pack 1.0 Build: 7601 - Workstation 32bit OS
dll version: 30732

"C:\Users\abc\Downloads\lfrx15eg4im37\lfrx15eg4im37.exe"
"C:\Users\abc\Downloads\lfrx15eg4im37\lfrx15eg4im37.exe"

显示全部楼层 · 发表于 2013-5-19 20:17:30

双击后火绒杀，uac拒绝后无限弹

[可疑文件] VT Detection ratio: 7 / 47 lfrx15eg4im37.exe

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源