微点没反应

尤金卡巴斯基

To KL

尤金卡巴斯基

Hello,

aicheng.exe_

No malicious code was found in this file.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Best regards, Sergey Prokudin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

saga3721

也就是红伞说是病毒卡巴不这么认为

chjy007

红伞 不报




12.30.2008  08:56:58，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图打开进程 C:\WINDOWS\System32\CTFMON.EXE (进程)
12.30.2008  08:56:55，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 Directory 在注册表键 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\ (注册表)
12.30.2008  08:56:56，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 Cookies 在注册表键 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\ (注册表)
12.30.2008  08:56:56，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 History 在注册表键 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\ (注册表)
12.30.2008  08:56:56，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 Common AppData 在注册表键 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\ (注册表)
12.30.2008  08:56:56，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 AppData 在注册表键 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\ (注册表)
12.30.2008  08:56:56，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 ProxyEnable 在注册表键 HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ (注册表)
12.30.2008  08:56:55，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 Cache 在注册表键 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\ (注册表)
12.30.2008  08:56:38，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图打开进程 C:\WINDOWS\System32\CTFMON.EXE (进程)
12.30.2008  08:56:35，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 Directory 在注册表键 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\ (注册表)
12.30.2008  08:56:35，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 Cookies 在注册表键 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\ (注册表)
12.30.2008  08:56:35，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 History 在注册表键 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\ (注册表)
12.30.2008  08:56:35，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 Common AppData 在注册表键 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\ (注册表)
12.30.2008  08:56:35，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 AppData 在注册表键 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\ (注册表)
12.30.2008  08:56:35，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 ProxyEnable 在注册表键 HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ (注册表)
12.30.2008  08:56:35，模块 C:\Documents and Settings\Administrator\桌面\待删\DU\aicheng[1]\aicheng.exe， 企图 设置值 Cache 在注册表键 HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\ (注册表)

08红伞威点

Start of the scan: 2008年12月30日  18:05
Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\样本'
C:\Documents and Settings\***\桌面\样本\aicheng.exe
    [DETECTION] Contains recognition pattern of the WORM/Nuj.A.19 worm
    [NOTE]      A backup was created as '49bcf2cc.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年12月30日  18:05
Used time: 00:04 Minute(s)

The scan has been done completely.

      1 Scanning directories
      1 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      1 Notes
-------------------------------------------------------
红伞S版库（V7.01.01.48）杀。

入库。

tod20010_ren

没反应啊,不是病毒吧

醉一生爱妍

not virus