yunbo.exe

Sherry.ai

yunbo.exe

jayavira

cn86li

To BD

ticket number is 2014062506480002

The file does not show signs of malicious activity.

File yunbo_exe declared CLEAN

mz123456

这捆绑了啥，火绒无压力检测

XywCloud

bav云杀

星猫

文件名: yunbo.exe
威胁名称: Trojan.ADH.2
完整路径: c:\users\zwh\downloads\yunbo\yunbo.exe

____________________________



详细信息
未知的社区使用情况,  未知的文件存在时间,  风险 高





原始
下载自
 https://att.kafan.cn/forum.php?mo ... DYyMjUxNHwxNzUwODY2





活动
已执行的操作: 已执行的操作: 1



____________________________



在电脑上的创建时间 
不可用


上次使用时间 
2014/6/25 ( 17:33:36 )


启动项目 
否


已启动 
否


____________________________


未知
诺顿社区中使用了此文件的用户数 未知。

未知
此文件版本当前 未知。

高
此文件具有高风险。

威胁类型: 病毒。 将自身插入或附加到其他程序、文件或电脑区域以感染这些媒介的程序。



____________________________


https://att.kafan.cn/forum.php?mo ... DYyMjUxNHwxNzUwODY2

已下载文件 yunbo.exe 威胁名称: Trojan.ADH.2
自 att.kafan.cn

来源: 外部介质



____________________________

文件操作

文件: c:\users\zwh\downloads\yunbo\ yunbo.exe 已删除
____________________________


文件指纹 - SHA:
93414578c5cae88f06c542576c3255c39dfddd3b53feb72fdb5cfcf5bc65e62e
文件指纹 - MD5:
不可用

fzshot

Dr.Web

yunbo.rar - archive RAR
>yunbo.rar/yunbo.exe - archive NSIS
>>yunbo.rar/yunbo.exe/script.bin - Ok
>>yunbo.rar/yunbo.exe/360.ico - Ok
>>yunbo.rar/yunbo.exe/TTK_7160010020140313_v142.exe contains an advertising software Adware.Shopper.352
>>yunbo.rar/yunbo.exe/ie.ico - Ok
>>yunbo.rar/yunbo.exe/pczh_107_306.exe - archive NSIS
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/script.bin - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/_=9A=80\modern-wizard.bmp - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/Ainqngz4.4.exe - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe - archive NSIS
>>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe/script.bin - Ok
>>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe/_=9A=80\KillProcDLL.dll - Ok
>>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe/_=9A=80\nsExec.dll - Ok
>>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe/_=9A=80\System.dll - Ok
>>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe/_=9A=80\Base64.dll - Ok
>>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe/_=9A=80\NSISdl.dll - Ok
>>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe/_=9A=80\Inetc.dll - Ok
>>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe/___\aie.ico - Ok
>>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe/___\123\hao123.ico - Ok
>>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe/___\taobao\taobao.ico - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/uninstall.exe - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/warmth.exe - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/Enthu.exe - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/setings.ini - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/_=9A=80\nsExec.dll - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/_=9A=80\Base64.dll - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/_=9A=80\peizhi.ini - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/aiqing.rtf - archive RTF
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/aiqing.rtf - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/_=9A=80\ToolTips.dll - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/_=9A=80\nsDialogs.dll - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/_=9A=80\System.dll - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/_=9A=80\Math.dll - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/_=9A=80\md5dll.dll - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/_=9A=80\Inetc.dll - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/___\aie.ico - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/___\123\hao123.ico - Ok
>>>yunbo.rar/yunbo.exe/pczh_107_306.exe/_=9A=80\NSISdl.dll - Ok
>>yunbo.rar/yunbo.exe/pczh_107_306.exe - Ok
>>yunbo.rar/yunbo.exe/tj.txt - Ok
>>yunbo.rar/yunbo.exe/yunboplayer.exe - Ok
>>yunbo.rar/yunbo.exe/config.ini - Ok
>>yunbo.rar/yunbo.exe/_=9A=80\System.dll - Ok
>>yunbo.rar/yunbo.exe/_=9A=80\qwer - Ok
>>yunbo.rar/yunbo.exe/_=9A=80\NSISdl.dll - Ok

ZhangBo_8

360杀360杀

挥泪斩情思

fzshot 发表于 2014-6-25 18:02
Dr.Web

这个是扫描日志吗？  在哪看啊？

猥琐大叔

管家杀.