pusk.exe

jayavira

每天更新的
to eset

http://samples.nod32.com.hk/inde ... a80d7d74fb5062549a5

夜ㄝ殇

rasis

360

扫描结果
======================
病毒扫描结果
----------------------
D:\DOWNLOAD\pusk.exe        行为和木马比较相似的程序        已删除

星晨

BitDefender  
pusk.exe Trojan.Generic.KD.363089

剑步如飞

Norton kill：




Full Path: c:\users\jianfei\desktop\pusk\pusk.exe
____________________________
____________________________
On computers as of Not Available
Last Used 2011/9/23 at 8:53:00
Startup Item No
Launched No
____________________________
____________________________
Unknown
Number of users in the Norton Community that have used this file: Unknown
____________________________
Unknown
This file release is currently not known.
____________________________
High
This file risk is high.
____________________________
Threat Details
Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.
____________________________
http://bbs.kafan.cn/forum.php?mo ... DQ3OTEyNXwxMDkxNjk1 Downloaded File pusk.exe
Threat name:
Trojan.FakeAV from
bbs.kafan.cn
____________________________
File Actions
File: c:\users\jianfei\desktop\pusk\pusk.exe
Removed
____________________________
Registry Actions
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter->EnabledV8:1
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system->EnableLUA:1
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusDisableNotify:0
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirewallDisableNotify:0
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->UpdatesDisableNotify:0
Repaired
Registry change: HKEY_USERS\S-1-5-21-2177557438-1307303724-1019489038-1000\Software\Microsoft\Windows\CurrentVersion\Policies\System\->DisableTaskMgr:0
Repaired
Registry change: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\->DisableTaskMgr:0
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon->Userinit:C:\Windows\system32\Userinit.exe
Repaired
Registry change: HKEY_USERS\S-1-5-21-2177557438-1307303724-1019489038-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\->NoActiveDesktopChanges:0
Repaired
Registry change: HKEY_USERS\S-1-5-21-2177557438-1307303724-1019489038-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\->NoSetActiveDesktop:0
Repaired
Registry change: HKEY_USERS\S-1-5-21-2177557438-1307303724-1019489038-1000\Software\Microsoft\Internet Explorer\Desktop\General->Wallpaper
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\->NoActiveDesktopChanges:0
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\->NoSetActiveDesktop:0
Repaired
Registry change: HKEY_CLASSES_ROOT\.exe\
Repaired
Registry change: HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\
Repaired
Registry change: HKEY_USERS\S-1-5-21-2177557438-1307303724-1019489038-1000\Software\Microsoft\Internet Explorer\Download->CheckExeSignatures:yes
Repaired
Registry change: HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Download->CheckExeSignatures:yes
Repaired
Registry change: HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Download->CheckExeSignatures:yes
Repaired
____________________________
File Thumbprint - SHA:
a36181a719e517fb1e9dcb3582158dab525a9790766376f8d1e572d76c0c1704
____________________________
File Thumbprint - MD5:
153977536a5dfa80d7d74fb5062549a5
____________________________

水晶

360sd:
扫描结果
======================
病毒扫描结果
----------------------
C:\Documents and Settings\Administrator\桌面\pusk.rar=>pusk.exe        HEUR/Malware.QVM20.Gen        已删除

wqcaokeyinwq

实机测试。。。。。。。。
过金山卫士。。。。。。。。。。。
过红伞扫描。。。。。。。。。
微点扫描秒杀。。。。。。。。。。。。。。。。。

留侯

大蜘蛛clean，文件加了壳：
pusk.exe packed by FLY-CODE
已上报！

倾枫锝渔♂

psss 毒霸~