install.exe

真小读者

mtfly91 发表于 2014-8-16 14:15
这个样本趋势和电脑管家都是安全，晕

最近一段時間趨勢的掃描檢出率似乎都不太高，就樣本區的樣本而言，

XywCloud

bav云杀
巡警启发杀

流年在消逝

eset
kill

yicun

Gen:Variant.Adware.Dropper.108
C:\Users\Eric\Desktop\install.rar\install.exe

挥泪斩情思

to dr.web

挥泪斩情思

二连。。编辑掉

liyangfr

Bitdefender blocked this page
The page you are trying to access contains Gen:Variant.Adware.Dropper.108.

折腾哥

卡巴斯基 杀

饭@avast

Filename: install.exe
Threat name: SONAR.Heuristic.120Full Path: Not Available

____________________________

Details
Very Few Users,  Very New,  Risk High

Origin
Downloaded from
Unknown

Activity
Actions performed: 6

____________________________


On computers as of 2014-8-17 at 13:06:26
Last Used 2014-8-17 at 13:06:26
Startup Item No
Launched Yes

____________________________


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.

SONAR Protection monitors for suspicious program activity on your computer.


____________________________


Source: External Media

Source File:
360zip.exe

File Created:
install.exe


____________________________

File Actions

File: c:\documents and settings\rusb\my documents\downloads\install\install.exe
Removed
File: c:\documents and settings\rusb\local settings\temp\585c645a\ikerbnn.dat
Removed
Directory: c:\documents and settings\rusb\local settings\temp\585c645a
Removed
____________________________

System Settings Actions

Event: Process start (Performed by c:\documents and settings\rusb\my documents\downloads\install\install.exe, PID:3464)
No action taken
Event: PE file creation: c:\documents and settings\rusb\local settings\temp\585c645a\ikerbnn.exe (Performed by c:\documents and settings\rusb\my documents\downloads\install\install.exe, PID:3464)
No action taken
Event: Process start: c:\documents and settings\rusb\my documents\downloads\install\install.exe, PID:3464 (Performed by c:\documents and settings\rusb\my documents\downloads\install\install.exe, PID:3464)
No action taken
____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available

sunnyjianna

EAV4.2web拦截