VT Detection ratio: 4 / 48 zoo-sex-episode-5.avi.exe 图标变了哦

显示全部楼层 · 发表于 2013-9-20 15:12:10

TO KL

显示全部楼层 · 发表于 2013-9-20 15:14:30

火绒入库~

显示全部楼层 · 发表于 2013-9-20 15:29:21

G Data InternetSecurity 2014

*** Process ***

Process: 5064
File name: zoo-sex-episode-5.avi.exe
Path: c:\users\alan\downloads\zoo-sex-episode-5.avi\zoo-sex-episode-5.avi.exe

Publisher: Unknown publisher
Creation date: 09/20/13 07:26:15
Modification date: 09/20/13 04:57:44

Started by: explorer.exe
Publisher: Microsoft Windows

*** Actions ***

The program has executed actions in the name of another program.
The program file is misleadingly named to deceive the user (e.g. 'Image.jpg.exe')
The program is trying to create a startup item to launch a program automatically at system startup.
An executable file was stored in a suspicious location.

*** Quarantine ***

The following files were moved into quarantine:
C:\Users\alan\Downloads\zoo-sex-episode-5.avi\zoo-sex-episode-5.avi.exe

The following registry entries were deleted:

YGLh+qIKKyfoYmJygg4sJycmJicHLScnJiYnBy4nl3KycuJwKCcnJycmBqdCJyd0cmJicCsnJycnJgbocnJiYnJykCsWri/ZkC0nB+lycmJicnKgLCcnJiYnB5tygmJicoLAKicnJycmBt5ikXJwp3JycPdycmJicnJwqHJyYmJycnC4cnJiYnJycOhycmJicnJwunKxWGO2cnKxWGO2cmJicPtycnJyYmJw7HJyYmJycnD8cnJiYnJycI5ykgYA
Rules version: 4.2.8
OS: Windows 6.1 Service Pack 1.0 Build: 7601 - Workstation 32bit OS
dll version: 30732

"C:\Users\alan\Downloads\zoo-sex-episode-5.avi\zoo-sex-episode-5.avi.exe"
C:\Windows\Explorer.EXE

显示全部楼层 · 发表于 2013-9-20 15:31:00

fireold 发表于 2013-9-20 15:29
G Data InternetSecurity 2014

The program is trying to create a startup item to launch a program automatically at system startup

你什么系统？

显示全部楼层 · 发表于 2013-9-20 16:15:42

墨家小子发表于 2013-9-20 15:31
The program is trying to create a startup item to launch a program automatically at system start ...

Win 7 x32 簡中版

显示全部楼层 · 发表于 2013-9-20 16:16:35

fireold 发表于 2013-9-20 16:15
Win 7 x32 簡中版

我的也是啊为什么没有这个行为

显示全部楼层 · 发表于 2013-9-20 16:20:58

墨家小子发表于 2013-9-20 16:16
我的也是啊为什么没有这个行为

當時有出現白色畫面閃動一下，重啟後也沒發生什麼事…

显示全部楼层 · 发表于 2013-9-20 16:22:54

fireold 发表于 2013-9-20 16:20
當時有出現白色畫面閃動一下，重啟後也沒發生什麼事…

你是直接虚拟机重启没有沙盘影子什么的？

显示全部楼层 · 发表于 2013-9-20 16:25:16

墨家小子发表于 2013-9-20 16:22
你是直接虚拟机重启没有沙盘影子什么的？

直接虚拟机重启

显示全部楼层 · 发表于 2013-9-20 16:34:20

fireold 发表于 2013-9-20 16:25
直接虚拟机重启

那就奇怪了

[可疑文件] VT Detection ratio: 4 / 48 zoo-sex-episode-5.avi.exe 图标变了哦