muma

显示全部楼层 · 发表于 2012-5-18 00:01:36

文件信息
文件名称：D:\邮件\新建文件夹\新建文件夹 (2)\木马.exe
文件大小：
324 Kb
内部名称：
无内部名称
文件签名：
无文件签名信息
文件描述：
木马
文件MD5：
d2183e9805e107a9a755d374eb8a10c6

显示全部楼层 · 发表于 2012-5-18 00:06:33

本帖最后由 humanlwj52 于 2012-5-18 00:12 编辑

ESET killed:

To AVG.

显示全部楼层 · 发表于 2012-5-18 00:10:30

Full Path: C:\Users\Flithappi\Desktop\木马.exe
____________________________
____________________________
Developers Not Available
Version Not Available
Identified 2012/5/18 星期五 at 0:09:43
Last Used Not Available
Startup Item No
____________________________
____________________________
Unknown
This program crash history is not known.
____________________________
Few Users
Fewer than 50 users in the Norton Community have used this file.
____________________________
New
This file was released 28 days ago.
____________________________
Bad
There are many indications that this file is untrustworthy.
____________________________
http://bbs.kafan.cn/forum.php?mo ... DQ2MDg2NnwxMjkwMTgx Downloaded File 木马.exe from
bbs.kafan.cn

winrar.exe

File Created:
木马.exe
____________________________
File Thumbprint - SHA:
fc1ff343eebb90c620e9e2f924fae344148cc50f0fcfd411537d9cc83b244053
____________________________
File Thumbprint - MD5:
d2183e9805e107a9a755d374eb8a10c6
____________________________

显示全部楼层 · 发表于 2012-5-18 00:26:03

Gino player 的安裝包，看起來挺正常的。

显示全部楼层 · 发表于 2012-5-18 00:37:56

File ID    Filename    Size (Byte) Result
26897373    木马.rar 268.25 KB OK
A listing of files contained inside archives alongside their results can be found below:
File ID    Filename    Size (Byte) Result
26897374    木马.exe    324.18 KB    UNDER ANALYSIS

显示全部楼层 · 发表于 2012-5-18 01:14:30

费尔杀

显示全部楼层 · 发表于 2012-5-18 01:17:26

avast! 阻止下载

显示全部楼层 · 发表于 2012-5-18 01:44:52

Malware detected

显示全部楼层 · 发表于 2012-5-18 07:03:09

大蜘蛛：

显示全部楼层 · 发表于 2012-5-18 08:16:12

从TEMP加载动态库，允许，表示很安静！

[可疑文件] muma

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块