1a512

显示全部楼层 · 发表于 2012-5-3 12:42:45

saga3721 发表于 2012-5-3 11:59
原来锁屏样本微点也能运行后提示删除，不过重启就会进不了系统了……现在看来没事了，当然希望是微点改进 ...

进不了系统？什么提示？

显示全部楼层 · 发表于 2012-5-3 12:43:03

saga3721 发表于 2012-5-3 11:59
原来锁屏样本微点也能运行后提示删除，不过重启就会进不了系统了……现在看来没事了，当然希望是微点改进 ...

是不是显示系统文件丢失

显示全部楼层 · 发表于 2012-5-3 12:43:31

Analysis Report for 1a512.exe

Summary:

Description	Risk
Write to foreign memory areas: This executable tampers with the execution of another process.
Autostart capabilities: This executable registers processes to be executed at system start. This could result in unwanted actions to be performed automatically.
Execution did not terminate correctly: The executable crashed.
Spawns Processes: The executable produces processes during the execution.
Performs Registry Activities: The executable creates and/or modifies registry entries.

Popups:

Window Name Window Text Screenshot Number of Displayed Times
isjdhcbowieuhrpc982wu49fjiehowiqehr92iheorch2w9e8h 79091576946 ......... ............! ... ...: .............. ...... 242.1. ............ . ...... .......... ... ......... . ................. ............. .................. (.. .. 27.07.2009 . 215-.3) 1. ............, ........ ... ........... ..... ............... ....... .......... ......... . ..... ..............., ......... ............ ... .............. .... ..............., ......... ............ ... .............. .......... ... ......... . ................. ............. .................., . ..... ........... .................. . ........ ............ ... ....... . ......... ............ ................. ......... ....., ......... ................... ......... ... ......... ............ .. ........, ........... . ............. ............... .......... ........ ......... . ....... ... ....... ... ...... .......... ... .......... ........ ..... . ....... 900 ...... .. ..... ........ ......: . ...... ...... ..... ...... ...... .... ........... .. .. .......... .... ......... ..... ......... ... .............. ... ..... ...... . .... . ...... ..... .... . ...... ...... ................. ..... ...... .......... .. ...... ....... ... ......... .......... ........ ....... . .......... .... . ....... 12 ..... ..... .. ..... ......., ... ...... .. ..... ............ .......... ..... ............ ......., . .... ..... ........ . ... ... ............... .. ...... 242 .. 1 .. ... ............ ... .......... .......... ........ . ................. ........ .... ......, ....... ... ............ ....... . BIOS, . .............. ........... ............... 1

显示全部楼层 · 发表于 2012-5-3 12:44:09

刘洋雨佳发表于 2012-5-3 12:43
是不是显示系统文件丢失

黑屏-

显示全部楼层 · 发表于 2012-5-3 12:46:17

saga3721 发表于 2012-5-3 12:44
黑屏-

昨天测试病毒今天上午我进不了系统显示BC.sys文件丢失我晕啊我装了微点

显示全部楼层 · 发表于 2012-5-3 12:49:45

刘洋雨佳发表于 2012-5-3 12:46
昨天测试病毒今天上午我进不了系统显示BC.sys文件丢失我晕啊我装了微点

以前有人测试微点就反映过这个问题，所以运行病毒后真正能否杀掉病毒而系统不受影响就需要重启

显示全部楼层 · 发表于 2012-5-3 12:51:01

本帖最后由 ososo 于 2012-5-3 12:54 编辑

相当危险。。。

https://fireeye.ijinshan.com/ana ... 44adf3f050ca50522b3

显示全部楼层 · 发表于 2012-5-3 13:05:11

saga3721 发表于 2012-5-3 12:49
以前有人测试微点就反映过这个问题，所以运行病毒后真正能否杀掉病毒而系统不受影响就需要重启

我保护C盘了

显示全部楼层 · 发表于 2012-5-3 17:10:25

诺顿扫描不报

显示全部楼层 · 发表于 2012-5-3 17:14:16

FS
结果: 发现 1 个恶意软件

Suspicious:W32/Malware.e59cef!Online (病毒)
C:\Users\Administrator\Desktop\病毒测试用\1a512.rar\1a512.exe

[病毒样本] 1a512

本帖子中包含更多资源

本帖子中包含更多资源