Adware.Casino...罕见

显示全部楼层 · 发表于 2009-4-7 16:41:26

相当稀有的AD...
大概是5个月前的，KA8 MIss

显示全部楼层 · 发表于 2009-4-7 16:45:05

When accessing data from the URL, "http://bbs.kafan.cn/attachment.php?aid=506705&k=c9732931e489700023f36c095e26c4f6&t=1239093881"
a virus or unwanted program 'GAME/Casino.Gen' [game] was found.
Action taken: Blocked file

显示全部楼层 · 发表于 2009-4-7 16:55:17

DW
D:\Documents and Settings\Administrator\桌面\SetupPoker.exe\data001 - is an adware program Adware.Casino
D:\Documents and Settings\Administrator\桌面\SetupPoker.exe\data002 - is an adware program Adware.Casino
D:\Documents and Settings\Administrator\桌面\SetupPoker.exe\data003 - is an adware program Adware.Casino

Archive contains 3 infected items

显示全部楼层 · 发表于 2009-4-7 17:08:36

TO KL

显示全部楼层 · 发表于 2009-4-7 17:57:53

过卡巴

显示全部楼层 · 发表于 2009-4-7 18:55:50

风险程序 2009-04-07 18:56:28 F:\DownLoad\SetupPoker.rar\SetupPoker.exe Win32.Adware.Agent.1864221 (广告软件) 跳过，未处理

显示全部楼层 · 发表于 2009-4-7 19:07:49

to VB

显示全部楼层 · 发表于 2009-4-7 19:15:05

McAfee potentially unwanted program CasOnline

显示全部楼层 · 发表于 2009-4-7 19:25:37

2009-04-07 19:25:20 修改注册表内容操作:阻止
进程路径:E:\virus\SetupPoker.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
注册表名称:Personal
触发规则:所有程序规则->07-系统和软件操作（黑白名单）->*\Software\Microsoft\Windows*\*

2009-04-07 19:25:21 修改注册表内容操作:阻止
进程路径:E:\virus\SetupPoker.exe
注册表路径:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
注册表名称:Desktop
触发规则:所有程序规则->07-系统和软件操作（黑白名单）->*\Software\Microsoft\Windows*\*

显示全部楼层 · 发表于 2009-4-7 20:01:21

瑞星

[病毒样本] Adware.Casino...罕见

本帖子中包含更多资源

本帖子中包含更多资源