1uzpeir-s4.exe [md5:a661452]

显示全部楼层 · 发表于 2008-5-24 15:05:12

Kaspersky miss
TO KL

显示全部楼层 · 发表于 2008-5-24 20:08:09

McAfee MISS

显示全部楼层 · 发表于 2008-5-24 20:11:14

MISS.

显示全部楼层 · 发表于 2008-5-24 20:33:27

原帖由 sbbdms 于 2008-5-24 15:05 发表
Kaspersky miss
TO KL

等你

显示全部楼层 · 发表于 2008-5-25 00:28:56

2003-05-24 00:26:38 文件保护(创建文件)    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\1uzpeir-s4.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\ac8zt2\install.bat

2003-05-24 00:26:39 文件保护(创建文件)    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\1uzpeir-s4.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nsp13.tmp.bat

2003-05-24 00:26:39 应用程序保护(运行应用程序)    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\1uzpeir-s4.exe
文件路径:C:\windows\system32\cmd.exe
命令行:/Q  /C C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\nsp13.tmp.bat "C:\Documents and Settings\Administrator\桌面\1uzpeir-s4.exe"

显示全部楼层 · 发表于 2008-5-25 13:45:49

卡巴未回信，但更新后已能杀出：Trojan.Win32.Vapsup.fou、Trojan.Win32.Vapsup.fov、Trojan.Win32.Vapsup.fow、Trojan.Win32.Vapsup.fox、Trojan.Win32.Vapsup.foy、Trojan.Win32.Vapsup.foz

显示全部楼层 · 发表于 2008-5-25 14:12:32

file:///C:/Documents%20and%20Settings/Administrator/桌面/1.jpg
kis2009 阻止下载

[病毒样本] 1uzpeir-s4.exe [md5:a661452]

ArcaVir2008, F-Prot 4.4.4

浏览过的版块