j3ewro 新變種1隻 20081222

upside

j3ewro 新變種1隻 20081222

尤金卡巴斯基

To KL

wangjay1980

变吧

2008-12-22 23:02:04 v0vj.exe  启动进程 C:\Documents and Settings\Administrator\桌面\v0vj.exe
2008-12-22 23:02:04 v0vj.exe 拒绝: KLPrivileges/KLPermissionSystem/KLPermissionPrivileges/KLSetDbgPrivilege 设置调试权限  
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/Drivers 修改 C:\WINDOWS\system32\drivers\cdaudio.sys
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemExe 创建 C:\WINDOWS\system32\j3ewro.exe
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemExe 创建 C:\WINDOWS\system32\j3ewro.exe
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemExe 创建 C:\WINDOWS\system32\j3ewro.exe
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemDll 创建 C:\WINDOWS\system32\jwedsfdo0.dll
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemDll 创建 C:\WINDOWS\system32\jwedsfdo1.dll
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemDll 创建 C:\WINDOWS\system32\jwedsfdo2.dll
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemDll 创建 C:\WINDOWS\system32\jwedsfdo3.dll
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemDll 创建 C:\WINDOWS\system32\jwedsfdo4.dll
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemDll 创建 C:\WINDOWS\system32\jwedsfdo5.dll
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemDll 创建 C:\WINDOWS\system32\jwedsfdo6.dll
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemDll 创建 C:\WINDOWS\system32\jwedsfdo7.dll
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemDll 创建 C:\WINDOWS\system32\jwedsfdo8.dll
2008-12-22 23:02:04 v0vj.exe 拒绝: KLSystemData/KLSystemFiles/SystemDll 创建 C:\WINDOWS\system32\jwedsfdo9.dll
2008-12-22 23:02:06 v0vj.exe 拒绝: KLSystemData/KLStartupRegKeys/Main_Run 修改 hkey_users\S-1-5-21-1292428093-2025429265-1801674531-500\Software\Microsoft\Windows\CurrentVersion\Run
2008-12-22 23:02:16 v0vj.exe 已终止: KLPrivileges/KLPermissionAppAccess/KLPermissionProcEmbed/KLReadProcMem 访问其它进程内存 c:\windows\explorer.exe
2008-12-22 23:02:16 v0vj.exe  退出进程 C:\Documents and Settings\Administrator\桌面\v0vj.exe

su-tt

上报ESET

linjw

TO AVIRA

BING126

McAfee        Generic!Artemis

Mr.Z

norton再次無視

tod20010_ren

卡巴拒绝了

linjw

?Filename Result
v0vj.exe  MALWARE

The file 'v0vj.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.

香氛

好厉害的病毒，以后还是不能乱开网页