0355d491c9c07fc67ef9cc1b4d92dca0

蓝天二号

数字

类型:木马-Trojan.Generic
描述:木马通常利用系统的漏洞，绕过系统防御，达到：盗取账号、窃取资料、篡改文件、破坏数据的目的。经过360安全中心检验，此文件是木马，建议您立即处理。
扫描引擎:云安全引擎
文件路径:C:\Users\chen wei\Desktop\新建文件夹\cltepli425i12554.exe
文件大小:1.52M (1,590,864 字节)
文件指纹（MD5）:ac9d4cf72c3ee7929c83feb213aaf319
数字签名:亚洲诚信代码签名测试证书
数字签名是否有效:无效
处理建议:隔离文件

XywCloud

b573684723 发表于 2014-7-7 21:10
综合症不好治

来卡饭，你就别指望你不会得综合症

cn86li

To GD

ticket number is 2014070713140001

tomochan

我大Q管~

潘中医

火绒报毒

饭@avast

Filename: cltepli425i12554.exe
Threat name: SONAR.Heuristic.120
Full Path: Not Available

____________________________

____________________________



____________________________


cltepli425i12554.exe Threat name: SONAR.Heuristic.120
Locate


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.


____________________________


Source: External Media

Source File:
360zip.exe

File Created:
cltepli425i12554.exe

____________________________

File Actions

File: c:\documents and settings\rusb\my documents\downloads\cltepli425i12554\ cltepli425i12554.exe Threat Removed
Directory: c:\documents and settings\rusb\local settings\temp\ nsi111.tmp Threat Removed
____________________________

System Settings Actions

Event: Process start (Performed by c:\documents and settings\rusb\my documents\downloads\cltepli425i12554\cltepli425i12554.exe, PID:3832) No action taken
(Performed by c:\documents and settings\rusb\my documents\downloads\cltepli425i12554\cltepli425i12554.exe, PID:3832) No action taken
Event: PE file creation: c:\documents and settings\rusb\local settings\temp\nsi111.tmp\ base64.dll (Performed by c:\documents and settings\rusb\my documents\downloads\cltepli425i12554\cltepli425i12554.exe, PID:3832) No action taken
Event: Process start: c:\documents and settings\rusb\my documents\downloads\cltepli425i12554\ cltepli425i12554.exe, PID:3832 (Performed by c:\documents and settings\rusb\my documents\downloads\cltepli425i12554\cltepli425i12554.exe, PID:3832) No action taken
____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available