clz.exe

显示全部楼层 · 发表于 2011-6-9 20:35:11

http://camas.comodo.com/cgi-bin/submit?file=efec797e7f17c5dd90a58ef49ccd448a3027ba115000b2c30916c3f12c7e75fb

Auto Analysis Verdict
Suspicious++

Suspicious Actions Detected
Creates and executes scripts
Creates autorun records
Deletes self
Injects code into other processes

----------------------------------------------

2011-06-09 20:26:28 C:\Documents and Settings\Roger\桌面\VIRUS\clz\clz.exe Sandboxed As Partially Limited
2011-06-09 20:26:32 C:\Documents and Settings\Roger\Application Data\Efad\byum.exe Sandboxed As Partially Limited

2011-06-09 20:26:37 C:\Documents and Settings\Roger\桌面\VIRUS\clz\clz.exe Scanned Online and Found Malicious

2011-06-09 20:26:39 C:\Documents and Settings\Roger\Local Settings\Temp\tmp94114fdf.bat Sandboxed As Partially Limited

2011-06-09 20:26:44 C:\Documents and Settings\Roger\Application Data\Efad\byum.exe Access Memory C:\WINDOWS\explorer.exe

2011-06-09 20:26:44 C:\Documents and Settings\Roger\桌面\VIRUS\clz\clz.exe Modify Key HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\1609

2011-06-09 20:26:44 C:\Documents and Settings\Roger\Local Settings\Temp\tmp94114fdf.bat Modify File C:\Documents and Settings\Roger\桌面\VIRUS\clz\clz.exe

---------------------------------
comodo 雲查殺

2011-06-09 20:26:28 C:\Documents and Settings\Roger\桌面\VIRUS\clz\clz.exe TrojWare.Win32.Trojan.Agent.Gen@1

显示全部楼层 · 发表于 2011-6-9 20:44:15

to eset

显示全部楼层 · 发表于 2011-6-9 20:51:11

sonar kill

显示全部楼层 · 发表于 2011-6-9 20:51:27

本帖最后由 will 于 2011-6-9 21:14 编辑

KL回应：

clz.exe - Trojan-Spy.Win32.Zbot.bqob

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2011-6-9 20:56:22

ESS+金山没报双击小A拦截

显示全部楼层 · 发表于 2011-6-9 21:08:46

本帖最后由 594157544 于 2011-6-9 21:13 编辑

金山 ESS 安全

to eset
http://samples.eset.com.cn/index ... 53ac2aa65b2c66b76c7

显示全部楼层 · 发表于 2011-6-9 21:15:18

本帖最后由 a256886572008 于 2011-6-9 21:16 编辑

594157544 发表于 2011-6-9 21:08
金山 ESS 安全

金山有4引擎了？

还是抓不到毒

显示全部楼层 · 发表于 2011-6-9 21:17:01

a256886572008 发表于 2011-6-9 21:15
金山有4引擎了？

还是抓不到毒

4引擎？？
360才有4引擎吧？！！

显示全部楼层 · 发表于 2011-6-9 21:20:34

360SD杀了

显示全部楼层 · 发表于 2011-6-9 21:20:51

mse kill
VirTool:Win32/Obfuscator.PN

[病毒样本] clz.exe

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块