一个小病毒样本

a445441

流年在消逝

avast kill

胖福

Filename: deltaticket_et-rm-0hj08546868.exe
Threat name: SONAR.ProcHijack!gen1Full Path: Not Available

____________________________

____________________________



____________________________


deltaticket_et-rm-0hj08546868.exe Threat name: SONAR.ProcHijack!gen1
Locate


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.


____________________________


Source: External Media

Source File:
deltaticket_et-rm-0hj08546868.exe

____________________________

File Actions

File: f:\norton样本\临时收集\ deltaticket_et-rm-0hj08546868.exe Threat Removed
____________________________

System Settings Actions

Event: Process start (Performed by f:\norton样本\临时收集\deltaticket_et-rm-0hj08546868.exe, PID:2236) No action taken
(Performed by f:\norton样本\临时收集\deltaticket_et-rm-0hj08546868.exe, PID:2236) No action taken
Event: Process start: f:\norton样本\临时收集\ deltaticket_et-rm-0hj08546868.exe, PID:1180 (Performed by f:\norton样本\临时收集\deltaticket_et-rm-0hj08546868.exe, PID:2236) No action taken
Event: Process start (Performed by f:\norton样本\临时收集\deltaticket_et-rm-0hj08546868.exe, PID:1180) No action taken
(Performed by f:\norton样本\临时收集\deltaticket_et-rm-0hj08546868.exe, PID:1180) No action taken
Event: Process start: f:\norton样本\临时收集\ deltaticket_et-rm-0hj08546868.exe, PID:2236 (Performed by f:\norton样本\临时收集\deltaticket_et-rm-0hj08546868.exe, PID:2236) No action taken
Event: Process start: c:\Windows\System32\ svchost.exe, PID:2900 (Performed by f:\norton样本\临时收集\deltaticket_et-rm-0hj08546868.exe, PID:1180) No action taken
Event: Process start: f:\norton样本\临时收集\ deltaticket_et-rm-0hj08546868.exe, PID:1180 (Performed by f:\norton样本\临时收集\deltaticket_et-rm-0hj08546868.exe, PID:1180) No action taken
____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available

skyboybone

金山启发杀

wo1400

蓝天二号 发表于 2014-9-3 19:44
数字

卡巴打开下载就杀

卡江东N

eset

潘中医

火绒杀！！

sermin

小红伞还是pass  卸载之

daddy55

星猫

Bitdefender blocked this page
The page you are trying to access contains Trojan.Agent.BFBB.