PUP x1

schumi小粉

Rising         AdWare.Win32.Pop-up.a

to avast！即将入库

Hello,
thank you for sending sample, detection will be added.

Best regards,
Virus analyst

Digital Behavior Traits
Injected Code NO
More than 5 Processes NO
Copies to Windows NO
Windows/Run Registry Key Set NO
Makes Network Connection NO
Creates EXE in System NO
Starts EXE in System NO
Starts EXE in Documents NO
Deletes File in System NO
Hooks Keyboard YES
Creates Hidden File NO
Creates DLL in System NO
Creates Mutex NO
Alters Windows Firewall NO
Checks For Debugger NO
Could Not Load NO
Opens Physical Memory NO
Modifies Local DNS NO
Starts EXE in Recycle NO
Creates Service NO
Modifies File in System NO
Deletes Original Sample NO

英九

趋势没报

schumi小粉

英九 发表于 2012-5-11 22:28
趋势报

之前过了下VT，没见到趋势报么。。。

hx1997

To ESET.

2012/5/11 22:32:09        ESET Kernel        File  'C:\Users\Gateway\Desktop\yandownmoviefjieoetup\yandownmoviefjieoetup.exe' was sent to ESET for analysis.       

留侯

过大蜘蛛，已上报

英九

schumi小粉 发表于 2012-5-11 22:30
之前过了下VT，没见到趋势报么。。。

少打了个字。。已编辑

schumi小粉

英九 发表于 2012-5-11 22:32
少打了个字。。已编辑

你这个少一个字。。。。让我深深的挫败感。。。

saga3721

File ID         Filename         Size (Byte)        Result
26885424         yandownmoviefjieoetup.rar        1.2 MB        OK
A listing of files contained inside archives alongside their results can be found below:
File ID         Filename         Size (Byte)        Result
26885425         yandownmoviefjieoetup.exe         2.08 MB         UNDER ANALYSIS

schumi小粉

hx1997 发表于 2012-5-11 22:31
To ESET.

2012/5/11 22:32:09        ESET Kernel        File  'C:\Users\Gateway\Desktop\yandownmoviefjieoetup\yan ...

之前已经email to lab了，嘿嘿~

wenjie8996

金山在解压完，运行文件时查杀。