搜索
查看: 6628|回复: 21
收起左侧

[病毒样本] pusk3.exe

  [复制链接]
a256886572008
发表于 2011-6-10 22:31:41 | 显示全部楼层 |阅读模式
http://camas.comodo.com/cgi-bin/submit?file=ff9cd70993b882f9bc3b49ee4ed1cda8912cd4da07d263361e40c57a539e8b22

Auto Analysis Verdict
Suspicious++

Suspicious Actions Detected
Copies self to other locations
Deletes self

-----------------------------------------------------
2011-06-10 22:19:14   C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe   Sandboxed As   Partially Limited   

2011-06-10 22:19:18   C:\Documents and Settings\All Users\Application Data\tGggmKGOst.exe   Sandboxed As   Partially Limited   

2011-06-10 22:19:23   C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe   Scanned Online and Found Malicious      

2011-06-10 22:19:27   C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe   Modify Key   HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Policies\System   

2011-06-10 22:19:27   C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe   Modify File   C:\Documents and Settings\All Users\Application Data\tGggmKGOst.exe   

2011-06-10 22:19:27   C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe   Modify Key   HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\tGggmKGOst
   

2011-06-10 22:19:27   C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe   Modify Key   HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable   

2011-06-10 22:19:28   C:\Documents and Settings\All Users\Application Data\tGggmKGOst.exe   Scanned Online and Found Malicious      

2011-06-10 22:19:34   C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe   Modify Key   HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Internet Explorer\Download\CheckExeSignatures   

2011-06-10 22:19:42   C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe   Modify File   C:\Documents and Settings\Roger\Local Settings\Temp\tmp944.tmp   

2011-06-10 22:19:42   C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe   Modify Key   HKLM\SYSTEM\ControlSet001\Control\Session Manager\PendingFileRenameOperations   


------------------------------------------------

comodo 雲查殺

2011-06-10 22:19:22   C:\Documents and Settings\Roger\桌面\VIRUS\pusk3\pusk3.exe   TrojWare.Win32.Trojan.Agent.Gen@1   

2011-06-10 22:19:23   C:\Documents and Settings\All Users\Application Data\tGggmKGOst.exe   TrojWare.Win32.Trojan.Agent.Gen@1

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
adadadd
发表于 2011-6-10 22:37:17 | 显示全部楼层
ESS killed
D:\Virus samples\pusk3.exe - a variant of Win32/Kryptik.OVH trojan - cleaned by deleting - quarantined
wuweimin1984
发表于 2011-6-11 00:04:32 | 显示全部楼层
小红伞 没报  360 压缩 报毒
yite
发表于 2011-6-11 00:41:09 | 显示全部楼层
过金山。。。
wjcharles
发表于 2011-6-11 02:54:04 | 显示全部楼层
过nis2011。。。
歌歌的人
发表于 2011-6-11 10:00:08 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
z2009
发表于 2011-6-11 10:07:07 | 显示全部楼层
过毒霸和红伞扫描
留侯
发表于 2011-6-11 12:15:37 | 显示全部楼层
大蜘蛛:
pusk3.exe infected with Trojan.DownLoader3.23237
aaaaoooo
发表于 2011-6-11 12:18:28 | 显示全部楼层
过金山卫士,360SD KILL。
XMonster
发表于 2011-6-11 14:14:26 | 显示全部楼层
程序:
D:\下载\PUSK3\PUSK3.EXE
木马程序生成以下文件:
1) C:\PROGRAMDATA\TGGGMKGOST.EXE
是否删除木马程序及其衍生物?
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 晋ICP备20004298号-1 ) GMT+8, 2020-7-11 06:35 , Processed in 0.127630 second(s), 17 queries .

快速回复 返回顶部 返回列表