邪恶的xc_2_2.exe（吞噬可用空间）

显示全部楼层 · 发表于 2011-6-26 08:22:00

360网盾拦截

显示全部楼层 · 发表于 2011-6-27 09:28:22

本帖最后由 humanlwj52 于 2011-6-27 09:28 编辑

blocked

显示全部楼层 · 发表于 2011-6-27 12:37:35

to avast!

显示全部楼层 · 发表于 2011-6-27 18:17:15

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC00771499.

We received the following archive files:

File ID Filename Size (Byte) Result
26200139 xc_2_2.zip 40.18 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID Filename Size (Byte) Result
26198965 xc_2_2.exe 114.5 KB MALWARE

Please find a detailed report concerning each individual sample below:

Filename Result
xc_2_2.exe MALWARE

The file 'xc_2_2.exe' has been determined to be 'MALWARE'.Our analysts named the threat TR/Kerogan.ll.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.
Alternatively you can see the analysis result here:
http://analysis.avira.com/sample ... p;incidentid=771499

An overview of all your submissions can be found here:
http://analysis.avira.com/sample ... 2d3SgT7Q9LTNAsjHET6

Please note: If you have specific questions please address them to support@avira.com

Kind regards
Avira Virus Lab

---------------------------------------------
Avira GmbH
Kaplaneiweg 1, 88069 Tettnang, Germany
Phone: +49 (0) 7542-500 0
Fax: +49 (0) 7542-500 3000
Internet: http://www.avira.com

CEO: Tjark Auerbach
Headquarter: Tettnang
Commercial register: AG Ulm HRB 630992
---------------------------------------------

显示全部楼层 · 发表于 2011-6-27 19:00:08

ESET屏蔽之

显示全部楼层 · 发表于 2011-6-27 19:23:41

ESS木有压力

显示全部楼层 · 发表于 2011-6-28 14:04:36

2011/6/28 14:04:08 创建文件阻止
进程: c:\users\administrator\desktop\xc_2_2\xc_2_2.exe
目标: C:\Windows\System32\xc_2_2.bat
规则: [文件组]所有执行文件 -> [文件]*; *.bat

2011/6/28 14:04:11 创建文件阻止
进程: c:\users\administrator\desktop\xc_2_2\xc_2_2.exe
目标: C:\Users\Administrator\AppData\Local\Temp\xc_2_2.bat
规则: [文件组]所有执行文件 -> [文件]*; *.bat

[病毒样本] 邪恶的xc_2_2.exe（吞噬可用空间）

本帖子中包含更多资源