英国签证调整

a445441

消停 发表于 2013-9-18 12:20
输入用户名和假密码！诺顿也是到这一步才有反应的！

嗯 但是没反应哦 我是试过了   等下再试一遍

minchaovip

a445441 发表于 2013-9-18 12:22
嗯 但是没反应哦 我是试过了   等下再试一遍

诺顿没反应 我是试过了输入密码什么的全搞了 你输入密码3次木马会自动影藏

一只野鹤上青云

to mse

a445441

minchaovip 发表于 2013-9-18 12:37
诺顿没反应 我是试过了输入密码什么的全搞了 你输入密码3次木马会自动影藏

我刚试了一下输入账号密码还是过微点主防了

minchaovip

a445441 发表于 2013-9-18 12:44
我刚试了一下输入账号密码还是过微点主防了

只有BD主防防御别的全过 双击和扫描

minchaovip

FS DG5.0拦截哈哈哈哈哈

消停

minchaovip 发表于 2013-9-18 12:37
诺顿没反应 我是试过了输入密码什么的全搞了 你输入密码3次木马会自动影藏

你诺顿什么版本的？我又试了一次，换的测试版还是杀了！


Filename: 护照名单.exe
Threat name: SONAR.Heuristic.110
Full Path: Not Available

____________________________



Details
Very Few Users,  Very New,  Risk High





Origin
Downloaded from
 Unknown





Activity
Actions performed: 9



____________________________



On computers as of 
2013-9-18 at 11:50:26


Last Used 
2013-9-18 at 11:50:26


Startup Item 
No


Launched 
Yes


____________________________


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.

SONAR Protection monitors for suspicious program activity on your computer.



____________________________



Source: External Media



Source File:
winrar.exe




File Created:
护照名单.exe




____________________________

File Actions

File: f:\norton样本\qq粘虫\ 护照名单.exe Removed
File: c:\Users\administrator\AppData\LocalLow\SogouPY\components\ componentconfig.ini Removed
____________________________

Registry Actions

Registry change: HKEY_USERS\S-1-5-21-1071228153-3121885108-811120218-500\Software\ SogouInput.user->SogouComponentFirstLoad:1379484489 Repaired
Registry change: HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\ 护照名单_RASAPI32 Removed
____________________________

Network Actions

Event: Network activity (Performed by f:\norton样本\qq粘虫\护照名单.exe, PID:4836) No action taken
____________________________

System Settings Actions

Event: Process start (Performed by f:\norton样本\qq粘虫\护照名单.exe, PID:4836) No action taken
Event: Process start: f:\norton样本\qq粘虫\ 护照名单.exe, PID:4836 (Performed by f:\norton样本\qq粘虫\护照名单.exe, PID:4836) No action taken
____________________________

Suspicious Actions

(Performed by f:\norton样本\qq粘虫\护照名单.exe, PID:4836) No action taken
Event: Keystroke capture (Performed by f:\norton样本\qq粘虫\护照名单.exe, PID:4836) No action taken
____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available

ppy0606

VSE COMODO MISS


2013/9/18        14:15:43        已由访问保护规则禁止         iROCK-PC\iROCK        F:\下载\Compressed\Ӣ��ǩ֤����\护照名单.exe        C:\Windows\System32\msvbvm60.dll        防病毒爆发控制:阻止对所有共享资源的读写访问        已阻止的操作: 读取
2013/9/18        14:15:43        已由访问保护规则禁止         iROCK-PC\iROCK        F:\下载\Compressed\Ӣ��ǩ֤����\护照名单.exe        C:\Windows\System32\guard32.dll        防病毒爆发控制:阻止对所有共享资源的读写访问        已阻止的操作: 读取

minchaovip

消停 发表于 2013-9-18 14:01
你诺顿什么版本的？我又试了一次，换的测试版还是杀了！

21.0 中文版

消停

minchaovip 发表于 2013-9-18 14:49
21.0 中文版

不应该，我这里每次都杀了！连用户名都没输入完SONAR就杀了！你是XP系统？