VT Detection ratio: 10 / 46 1qgurpizfji2f.exe

显示全部楼层 · 发表于 2013-5-20 18:12:25

https://www.virustotal.com/en/fi ... nalysis/1369044532/

显示全部楼层 · 发表于 2013-5-20 18:14:34

过诺顿！

文件名: n
威胁名称: Trojan.Gen.2
完整路径: c:\$recycle.bin\s-1-5-18\$5786636811d394dd2ea69e81efd84a17\n

____________________________

详细信息
未知的社区使用情况, 未知的文件存在时间, 风险高

原始
下载自 未知

活动
已执行的操作: 已执行的操作: 1

____________________________

在电脑上的创建时间 2013-5-20 ( 18:14:00 )
上次使用时间 2013-5-20 ( 18:14:00 )
启动项目否
已启动否

____________________________

未知
诺顿社区中使用了此文件的用户数未知。

未知
此文件版本当前未知。

高
此文件具有高风险。

威胁类型: 病毒。将自身插入或附加到其他程序、文件或电脑区域以感染这些媒介的程序。

____________________________

来源: 外部介质


____________________________

文件操作

文件: c:\$recycle.bin\s-1-5-18\$5786636811d394dd2ea69e81efd84a17\n已阻止
____________________________

文件指纹 - SHA:
242c7356cd30585f5dd0fcd3bdd767277a82e1aee5f46fbbb6f7dae4ff5ff974
文件指纹 - MD5:
不可用

显示全部楼层 · 发表于 2013-5-20 18:27:49

显示全部楼层 · 发表于 2013-5-20 18:35:58

Warning
In order not to compromise your security, this page will not be accessed
A virus or unwanted program was found in the HTTP data of the requested page.

Requested URL: https://att.kafan.cn/forum.php?mo ... DQ4NjA0OXwxNTcxNTcy
Information: Is the TR/Dropper.Gen Trojan
Need some help with this warning? Click here to ask an Expert.

显示全部楼层 · 发表于 2013-5-20 20:15:52

G Data

*** Process ***

Process: 5452
File name: 1qgurpizfji2f.exe
Path: c:\users\blue\downloads\1qgurpizfji2f\1qgurpizfji2f.exe

Publisher: Unknown publisher

Started by: 1qgurpizfji2f.exe
Publisher: Unknown publisher

*** Actions ***

The program establishes a network connection.
The program is recording keystrokes.
The program has created or manipulated an executable file.

*** Quarantine ***

The following files were moved into quarantine:
C:\$Recycle.Bin\S-1-5-21-1679018443-3631770637-2609860328-1001\$R2047F726
C:\Users\blue\AppData\Local\Temp\msimg32.dll
C:\Users\blue\Downloads\1qgurpizfji2f\1qgurpizfji2f.exe

The following registry entries were deleted:

YGLx7HJ6wHJyYmJyctByknKSYmLgcnKmcrIsJ+pwKnRyQicnJga3cnJycmJikCsWzy6HB+lysiYmJidroCwnJyYmJwfactJysnKCsCYnKSYmJwmbcoJiYnKCsC0nJycnJgascqJycnKSwC8nKCcoJgZtcoJygmJi8CgnKCcnJwdnJicnJycmBocrJygnKCYGhy0nJyYmJweXJycnJycmBpcuJygmJicIly8nKiYmJwqnJycIpysejzVmKikXfjVmKycejzVmKgi3LScnJycmBrcvJycnJyYGxy4nJyYmJwfHLydrYmJysgbXKScoJygmBucoJ+gAAA
Rules version: 4.1.0
OS: Windows 6.2 Service Pack 0.0 Build: 9200 - Workstation 32bit OS
dll version: 30732

"C:\Users\blue\Downloads\1qgurpizfji2f\1qgurpizfji2f.exe"
"C:\Users\blue\Downloads\1qgurpizfji2f\1qgurpizfji2f.exe"

[可疑文件] VT Detection ratio: 10 / 46 1qgurpizfji2f.exe

本帖子中包含更多资源

本帖子中包含更多资源