VT Detection ratio: 4 / 46 xitjrgj

显示全部楼层 · 发表于 2013-5-3 11:04:48

https://www.virustotal.com/en/fi ... nalysis/1367550200/

显示全部楼层 · 发表于 2013-5-3 11:11:17

GD 2014

*** Process ***

Process: 3556
File name: xitjrgj.exe
Path: c:\users\abc\downloads\xitjrgj\xitjrgj.exe

Publisher: Unknown publisher
Creation date: 05/03/13 03:02:50
Modification date: 05/03/13 03:07:34

Started by: explorer.exe
Publisher: Microsoft Windows

*** Actions ***

The program has executed actions in the name of another program.
The program is trying to create a startup item to launch a program automatically at system startup.

*** Quarantine ***

The following files were moved into quarantine:
C:\Users\abc\Downloads\xitjrgj\xitjrgj.exe

The following registry entries were deleted:

YGLRrpIPKye4YmJyggssJycmJicHLie3ctJy4nAqdHJCJycmBrdycnJyYmKALicnJiYnB7li0a6SB9lycpAuJycmJicHynJyYmJycrApJygmJicIrHJycnJiYnCncnJw93JyYmJycnC60rFZY6Zy0rFZY6ZyYmJw+3JycnJiYnDscnJiYnJycPxycmJicnJwjnKCAAA
Rules version: 4.0.10
OS: Windows 6.1 Service Pack 1.0 Build: 7601 - Workstation 32bit OS
dll version: 30732

"C:\Users\abc\Downloads\xitjrgj\xitjrgj.exe"
explorer.exe

显示全部楼层 · 发表于 2013-5-3 12:23:34

QVM20

显示全部楼层 · 发表于 2013-5-3 12:33:23

显示全部楼层 · 发表于 2013-5-3 17:29:07

[可疑文件] VT Detection ratio: 4 / 46 xitjrgj

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源