查看: 3708|回复: 23
收起左侧

[病毒样本] QQPlayer.EXE

  [复制链接]
Sherry.ai
发表于 2014-8-17 11:59:52 | 显示全部楼层 |阅读模式
QQPlayer.EXE

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
minjiaming
发表于 2014-8-17 12:03:52 | 显示全部楼层
ESET 过
XywCloud
发表于 2014-8-17 12:04:14 | 显示全部楼层
费尔扫描杀
cn86li
发表于 2014-8-17 12:05:02 | 显示全部楼层
本帖最后由 cn86li 于 2014-8-17 21:25 编辑

To Emsisoft

To BD
ticket number is 2014081704100001
Sample seems to be clean.

File qqplayer_exe declared CLEAN
Miostartos
发表于 2014-8-17 12:15:54 | 显示全部楼层
MTP 月神杀
sunnyjianna
发表于 2014-8-17 12:33:01 | 显示全部楼层
EAV4.2,火绒过
隔壁王叔叔
发表于 2014-8-17 12:48:44 | 显示全部楼层
本帖最后由 隔壁王叔叔 于 2014-8-17 13:08 编辑

过ESS和管家扫描
哈勃分析(哈勃无力。。。)
火眼分析
饭@avast
发表于 2014-8-17 12:48:57 | 显示全部楼层
Filename: qqplayer.exe
Threat name: SONAR.Heuristic.120
Full Path: Not Available

____________________________

Details
Very Few Users,  Very New,  Risk High

Origin
Downloaded from
Unknown

Activity
Actions performed: 5

____________________________


On computers as of 2014-8-17 at 12:47:58
Last Used 2014-8-17 at 12:47:58
Startup Item No
Launched Yes

____________________________


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.

SONAR Protection monitors for suspicious program activity on your computer.


____________________________


Source: External Media

Source File:
360zip.exe

File Created:
qqplayer.exe


____________________________

File Actions

File: c:\documents and settings\rusb\my documents\downloads\qqplayer\qqplayer.exe
Removed
____________________________

Network Actions

Event: Network activity (Performed by c:\documents and settings\rusb\my documents\downloads\qqplayer\qqplayer.exe, PID:724)
No action taken
____________________________

System Settings Actions

Event: Process start (Performed by c:\documents and settings\rusb\my documents\downloads\qqplayer\qqplayer.exe, PID:724)
No action taken
Event: Process start: c:\documents and settings\rusb\my documents\downloads\qqplayer\qqplayer.exe, PID:724 (Performed by c:\documents and settings\rusb\my documents\downloads\qqplayer\qqplayer.exe, PID:724)
No action taken
____________________________

Suspicious Actions

(Performed by c:\documents and settings\rusb\my documents\downloads\qqplayer\qqplayer.exe, PID:724)
No action taken
____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available
流年在消逝
发表于 2014-8-17 12:57:56 | 显示全部楼层
to eset
245867683
发表于 2014-8-17 12:58:51 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-9-18 00:02 , Processed in 0.227126 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表