流氓软件

b573684723

好压EAV火绒扫描MISS

SUNKESS

貌似 放了几次东西


Filename: xzys_50511.exe
Threat name: SONAR.Heuristic.120Full Path: Not Available

____________________________

____________________________



____________________________


xzys_50511.exe Threat name: SONAR.Heuristic.120
Locate


Few Users
Fewer than 50 users in the Norton Community have used this file.

New
This file was released 11 days ago.

High
This file risk is high.


____________________________


http://down.chinashangrui.com/xzys/xzys_50511.exe
Downloaded File xzys_50511.exe Threat name: SONAR.Heuristic.120
from chinashangrui.com
Source: External Media

xzys_50511.exe

____________________________

File Actions

File: c:\documents and settings\administrator\local settings\temp\ xzys_50511.exe Threat Removed
Directory: c:\program files\ xzys Threat Removed
____________________________

System Settings Actions

Event: Process start (Performed by c:\documents and settings\administrator\local settings\temp\xzys_50511.exe, PID:2248) No action taken
(Performed by c:\documents and settings\administrator\local settings\temp\xzys_50511.exe, PID:2248) No action taken
Event: PE file creation: c:\program files\xzys\ xzys.exe (Performed by c:\documents and settings\administrator\local settings\temp\xzys_50511.exe, PID:2248) No action taken
Event: Process start: c:\documents and settings\administrator\local settings\temp\ xzys_50511.exe, PID:2248 (Performed by c:\documents and settings\administrator\local settings\temp\xzys_50511.exe, PID:2248) No action taken
Event: Process start (Performed by c:\documents and settings\administrator\local settings\temp\xzys_50511.exe, PID:1140) No action taken
(Performed by c:\documents and settings\administrator\local settings\temp\xzys_50511.exe, PID:1140) No action taken
Event: PE file creation: c:\program files\xzys\ xzys.exe (Performed by c:\documents and settings\administrator\local settings\temp\xzys_50511.exe, PID:1140) No action taken
____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available

雷帝彬

卡巴有官人在卡饭蹲着吧，竟然直接就网页秒杀了。。。