VT Detection ratio: 5 / 47 sdfdgdfhgfdgb.exe

显示全部楼层 · 发表于 2013-5-19 17:47:34

https://www.virustotal.com/en/fi ... nalysis/1368956756/

显示全部楼层 · 发表于 2013-5-19 18:09:15

QVM08

显示全部楼层 · 发表于 2013-5-19 19:29:09

显示全部楼层 · 发表于 2013-5-19 19:51:43

G Data

*** Process ***

Process: 700
File name: sdfdgdfhgfdgb.exe
Path: c:\users\abc\downloads\sdfdgdfhgfdgb\sdfdgdfhgfdgb.exe

Publisher: Unknown publisher
Creation date: 05/19/13 09:45:24
Modification date: 05/19/13 11:49:54

Started by: explorer.exe
Publisher: Microsoft Windows

*** Actions ***

The program has executed actions in the name of another program.
The program is trying to create a startup item to launch a program automatically at system startup.
An executable file was stored in a suspicious location.

*** Quarantine ***

The following files were moved into quarantine:
C:\Users\abc\Downloads\sdfdgdfhgfdgb\sdfdgdfhgfdgb.exe

The following registry entries were deleted:

YGLhybIHKyeJYmJykggsJycmJicHLScoJiYnCC4neHJyKScOp0InJ3RyYmJwKycnJycmBuhycmJicnKQKxaeLIqQLScH6XJyYmJycqAsJycmJicHa3KiYmJyorApJygmJicIrHJycnJiYnCncnJw93JyYmJycnCocoJiYnKCcLhygmJicoJw6HJyYmJycnC6cmFcY7ZycmFcY7ZyYmJw+3JycnJiYnDscnJiYnJycPxycmJicnJwjnLCAAA
Rules version: 4.1.0
OS: Windows 6.1 Service Pack 1.0 Build: 7601 - Workstation 32bit OS
dll version: 30732

"C:\Users\abc\Downloads\sdfdgdfhgfdgb\sdfdgdfhgfdgb.exe"
C:\Windows\Explorer.EXE

显示全部楼层 · 发表于 2013-5-19 20:14:05

费尔主防杀。。。

显示全部楼层 · 发表于 2013-5-20 00:04:38

显示全部楼层 · 发表于 2013-5-20 02:14:21

ESET NOD32 detected.

sdfdgdfhgfdgb.exe - Win32/LockScreen.APR trojan

[可疑文件] VT Detection ratio: 5 / 47 sdfdgdfhgfdgb.exe

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源