流氓软件一枚

skyboybone

金山拦截一部分




拦截失败的

还有个瑞星

Luca.l

paul_guo

Filename: kuvuzu_930_1632.exe
Full Path: C:\Users\Administrator\Documents\kuvuzu_930_1632.exe

____________________________

____________________________


Developers 
Not Available

Version 
Not Available

Identified 
2015/5/8 at 15:55:52

Last Used 
Not Available

Startup Item 
No


____________________________


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

Good
Norton has given this file a favorable rating.


____________________________


Source File:
kuvuzu_930_1632.exe

____________________________


File Thumbprint - SHA:
82bb55215a2b2924097722919c873957c7bdc26fffa895bb96d71a05a39460f4
File Thumbprint - MD5:
38983fb5d8e258b601a00b9793d78187

Filename: kuvuzu_930_1632.exe
Threat name: SONAR.Heuristic.120Full Path: c:\users\administrator\documents\kuvuzu_930_1632.exe

____________________________

____________________________


On computers as of 
2015/5/8 at 15:56:31

Last Used 
2015/5/8 at 15:56:31

Startup Item 
No

Launched 
Yes

SONAR Protection monitors for suspicious program activity on your computer.


____________________________


kuvuzu_930_1632.exe Threat name: SONAR.Heuristic.120
Locate


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.


____________________________


Source: External Media

Source File:
kuvuzu_930_1632.exe

____________________________

System Settings Actions

Event: Browser process start (Performed by c:\users\administrator\documents\kuvuzu_930_1632.exe, PID:5528) No fix attempted
e:\Sandbox\administrator\defaultbox\user\current\AppData\Local\Temp\ nscDCBB.tmp (Performed by c:\users\administrator\documents\kuvuzu_930_1632.exe, PID:5528) No fix attempted
Event: PE file creation: e:\Sandbox\administrator\defaultbox\user\current\AppData\Local\Temp\nscDCBB.tmp\ System.dll (Performed by c:\users\administrator\documents\kuvuzu_930_1632.exe, PID:5528) No fix attempted
____________________________


File Thumbprint - SHA:
82bb55215a2b2924097722919c873957c7bdc26fffa895bb96d71a05a39460f4
File Thumbprint - MD5:
Not available

yaoyunjia

这种就算上报给红伞也不会杀吧

XywCloud

又来了
SUD to BAV

欧阳宣

to mcafee

学雷锋做人

结果：木马

paul_guo

APC 杀。。。。。。。。。。。。

fuzhk

yaoyunjia 发表于 2015-5-8 16:00
这种就算上报给红伞也不会杀吧

会，红伞评测上一直是前几名其中原因就是因为他的认真入库。每个上报样本都会有回复。

请叫我德玛西亚

欧阳宣 发表于 2015-5-8 16:12
to mcafee

vse Artemis!38983FB5D8E2