费尔报黑客工具基因，不知道是不是误报

幽冥の龙

http://pan.baidu.com/s/1bns5fpP

网上下的游戏的一个 按键辅助工具

wk1993

当当当已经检测到危害

胖福

诺顿报安全！

莒县小哥

文件信息
文件名称：D:\360安全浏览器下载\天涯明月刀曲谱演奏(1).exe
文件大小：
680 Kb
内部名称：
无内部名称
文件签名：
无文件签名信息
文件描述：
经鉴定是一个高风险文件
文件MD5：
868839c0ed13326b1990d773a9d01614

折腾哥

卡巴斯基 MISS

卡江东N

eset AVG miss

欧阳宣

0        0        0        病毒:         Trojan.Generic.11513873 (引擎A)
0        0        0        状态：         访问被拒绝。

a445441

XywCloud

bav不杀

胖福

Filename: 天涯明月刀曲谱演奏%281%29.exe
Threat name: SONAR.Heuristic.120Full Path: Not Available

____________________________

____________________________



____________________________


天涯明月刀曲谱演奏%281%29.exe Threat name: SONAR.Heuristic.120
Locate


Few Users
Fewer than 50 users in the Norton Community have used this file.

Mature
This file was released 2 months ago.

High
This file risk is high.


____________________________


http://122.138.54.48/ws.cdn.baid ... mp;to=sc&fm=Nan,B,U,nc&sta_dx=1&sta_cs=52&sta_ft=exe&sta_ct=5&newver=1&newfm=1&flow_ver=3&expires=1409803018&rt=sh&r=743026167&mlogid=1771005042&sh=1&vuk=-&vbdid=859787589&fn=天涯明月刀曲谱演奏(1).exe&wshc_tag=0&wsts_tag=5407e0b2&wsid_tag=ddd42942&wsiphost=ipdbm
Downloaded File 天涯明月刀曲谱演奏%281%29.exe Threat name: SONAR.Heuristic.120
from 122.138.54.48
Source: External Media

天涯明月刀曲谱演奏%281%29.exe

____________________________

File Actions

File: f:\norton样本\ 天涯明月刀曲谱演奏%281%29.exe Threat Removed
File: f:\norton样本\ wuxia_config.ini Threat Removed
File: c:\Users\administrator\AppData\LocalLow\SogouPY\components\ componentconfig.ini Threat Removed
____________________________

Registry Actions

Registry change: HKEY_USERS\S-1-5-21-1071228153-3121885108-811120218-500\Software\ SogouInput.user->SogouComponentFirstLoad:1409802445 Repaired
Registry change: HKEY_USERS\S-1-5-21-1071228153-3121885108-811120218-500\Software\ SogouInput.user->Used:1409802445 Repaired
____________________________

System Settings Actions

Event: Browser process start (Performed by f:\norton样本\天涯明月刀曲谱演奏%281%29.exe, PID:4304) No action taken
(Performed by f:\norton样本\天涯明月刀曲谱演奏%281%29.exe, PID:4304) No action taken
Event: Process start: f:\norton样本\ 天涯明月刀曲谱演奏%281%29.exe, PID:4304 (Performed by f:\norton样本\天涯明月刀曲谱演奏%281%29.exe, PID:4304) No action taken
____________________________

Suspicious Actions

Event: Keystroke capture (Performed by f:\norton样本\天涯明月刀曲谱演奏%281%29.exe, PID:4304) No action taken
____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available