MD5: F057B8

显示全部楼层 · 发表于 2007-8-19 09:57:18

不是，每个人都像楼上的几位那么luck,华军下的，就可能很多人下载。。。。

显示全部楼层 · 发表于 2007-8-19 12:34:03

已检测: 木马程序 Trojan.Win32.StartPage.apu 文件: C:\Documents and Settings\gho\桌面\qqkav_newhua.exe//Yoda//PECompact

显示全部楼层 · 发表于 2007-8-19 12:34:21

也就是改改首页？

显示全部楼层 · 发表于 2007-8-19 12:41:39

检测到一个应用程序尝试创建一个 DNS 请求
询问名称:
DNS 服务器: 61.128.114.133, 61.128.114.166

Attempt to open process C:\WINDOWS\system32\smss.exe
Attempt to open process C:\WINDOWS\system32\csrss.exe
Attempt to open process C:\WINDOWS\system32\winlogon.exe
Attempt to open process C:\WINDOWS\system32\services.exe
Attempt to open process C:\WINDOWS\system32\lsass.exe
Attempt to set value Directory within the key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\
Attempt to set value Cookies within the key HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\

[病毒样本] MD5: F057B8

d:\病毒库\样本[1]\qqkav_newhua.exe