Install_Flash_Player.exe>>纸老虎一个

思齐鼠

文件名称：C:\Documents and Settings\Administrator\桌面\Install_Flash_Player.exe
文件大小：305664 字节
文件版本：6.00.2900.5512 (xpsp.080413-2105)
MD5     ：F5B373648B2502BCB54ABFB5AAF48B25
SHA1    ：9349660E5D2FC793A5A9EA837363453C023584C0
CRC32   ：37C51929

z2009

毒霸2012和红伞双杀

[DETECTION] Is the TR/VB.Downloader.Gen Trojan

思齐鼠

z2009 发表于 2011-6-28 16:16
毒霸2012和红伞双杀

[DETECTION] Is the TR/VB.Downloader.Gen Trojan

现在的伪装flash player真多

咚咚腔

NIS2011全部杀咯～～   

weipengsmile

mse  kill

Nocria

clean

a256886572008

CAV 殺

2011-06-28 16:57:27   C:\Documents and Settings\Roger\桌面\VIRUS\install\Install_Flash_Player.exe   TrojWare.Win32.Trojan.Agent.Gen@214783595   

2011-06-28 17:01:51   C:\Documents and Settings\Roger\桌面\VIRUS\34L.exe\d3dx10_34L.exe   TrojWare.Win32.Swisyn.C@102605253   

---------------------------------------------------------------------------------------
Install_Flash_Player.exe

http://camas.comodo.com/cgi-bin/submit?file=b2557e50330e243caadaf7659f13b145df907d663a32c571e854214233999252

• Verdict
Auto Analysis Verdict
Suspicious++

• Description
Suspicious Actions Detected
Copies self to other locations
Creates files in windows system directory
Deletes self
Modifies the windows host file

------------------------------------------------------------------
d3dx10_34L.exe

http://camas.comodo.com/cgi-bin/submit?file=51d9466a98dead7771f0ba1e060a0ef55a38c5d20b5b5cf1e01176bbbf2087d5

• Verdict
Auto Analysis Verdict
Suspicious+

• Description
Suspicious Actions Detected
Modifies the windows host file

adadadd

ESS5
D:\Virus samples\d3dx10_34L.exe - Win32/Qhost.NRX trojan - cleaned by deleting - quarantined
D:\Virus samples\Install_Flash_Player.exe - Win32/TrojanDownloader.Agent.PXO trojan - cleaned by deleting - quarantined
D:\Virus samples\rpchrome10browserrecordhelper.dll - is OK

剩一个DLL文件。应该是clean的吧。

a445441

微点漏第一个    第二个杀

黑猫、警长

金山卫士下载保护 双杀

看看卡巴斯基2012