fusioncrypt.exe

显示全部楼层 · 发表于 2011-9-30 10:24:28

NOD32 6504 2011.09.30 a variant of Win32/Injector.JNV
BitDefender 7.2 2011.09.30 Gen:Variant.Kazy.38898

显示全部楼层 · 发表于 2011-9-30 10:30:53

显示全部楼层 · 发表于 2011-9-30 11:04:12

Palkia 发表于 2011-9-30 10:30

看来你你是秒秒守在样本区的呀

显示全部楼层 · 发表于 2011-9-30 11:15:51

显示全部楼层 · 发表于 2011-9-30 12:24:55

Gen:Variant.Kazy.38898 (引擎A)

显示全部楼层 · 发表于 2011-9-30 13:25:56

大蜘蛛：
fusioncrypt.exe infected with Trojan.BtcMine.12

显示全部楼层 · 发表于 2011-9-30 13:39:01

Bullguard kill

显示全部楼层 · 发表于 2011-9-30 14:01:34

1x to avira

显示全部楼层 · 发表于 2011-9-30 20:15:11

2011-9-30 20:13:06 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 修改注册表 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\I0D1IPFYVE5E 已阻止 040.*\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\*

2011-9-30 20:13:06 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 修改启动设置 HKEY_USERS\S-1-5-21-790525478-1343024091-303738163-500\Software\Microsoft\Windows\CurrentVersion\Run\I0D1IPFYVE5E 已阻止用户规则: 阻止 fusioncrypt.exe

2011-9-30 20:13:06 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 修改启动设置 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\I0D1IPFYVE5E 已阻止 040.Autoruns

2011-9-30 20:13:01 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 直接访问磁盘 \\.\Harddisk0\DR0 已阻止 018.Direct access to disk

2011-9-30 20:13:00 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 修改注册表 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run\I0D1IPFYVE5E 已阻止 040.*\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\run\*

2011-9-30 20:13:00 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 直接访问磁盘 \\.\Harddisk0\DR0 已阻止 018.Direct access to disk

2011-9-30 20:12:59 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 修改启动设置 HKEY_USERS\S-1-5-21-790525478-1343024091-303738163-500\Software\Microsoft\Windows\CurrentVersion\Run\I0D1IPFYVE5E 已阻止 040.Autoruns

2011-9-30 20:12:57 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 直接访问磁盘 \\.\Harddisk0\DR0 已阻止 018.Direct access to disk

2011-9-30 20:12:56 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 修改启动设置 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\I0D1IPFYVE5E 已阻止 040.Autoruns

2011-9-30 20:12:55 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 直接访问磁盘 \\.\Harddisk0\DR0 已阻止 018.Direct access to disk

2011-9-30 20:12:53 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 修改其他应用程序的状态 C:\Documents and Settings\Administrator\桌面\fusioncrypt.exe 已允许 018.Modifying other processes & Loading Drivers

显示全部楼层 · 发表于 2011-9-30 20:37:45

NIS2012 解压报~~~~~~~

[病毒样本] fusioncrypt.exe

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块