123
返回列表 发新帖
楼主: MagicFuzzX
收起左侧

[病毒样本] YY官网下的疑似被捆绑病毒?

[复制链接]
328397663
发表于 2009-10-13 15:24:32 | 显示全部楼层
估计LZ上的是钓鱼网..官方的没捆绑病毒哦
XinDOS
发表于 2009-10-13 15:26:11 | 显示全部楼层
我也中了这个病毒了,果然是钓鱼网站,疏忽了
wptyh73hm
发表于 2009-10-13 17:24:52 | 显示全部楼层
里面加了不少料

2009-10-13 17:16:13    创建新进程    允许
进程: f:\program files\7-zip\7zfm.exe
目标: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\7zO4.tmp\yy-1.14.14.exe"
规则: [应用程序]*

2009-10-13 17:16:22    挂起其他进程    允许
进程: c:\program files\comodo\comodo internet security\cmdagent.exe
目标: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
规则: [应用程序]*

2009-10-13 17:17:04    创建新进程    允许
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\yy-1.14.14.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\yy-1.14.14.exe"
规则: [应用程序]*

2009-10-13 17:17:08    创建新进程    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\01ms.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\01ms.exe"
规则: [应用程序]*

2009-10-13 17:17:10    创建新进程    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\02kk.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\02kk.exe"
规则: [应用程序]*

2009-10-13 17:17:14    创建新进程    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\10jx.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\10jx.exe"
规则: [应用程序]*

2009-10-13 17:17:16    创建新进程    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\20zxa.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\20zxa.exe"
规则: [应用程序]*

2009-10-13 17:17:18    创建新进程    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\dx102x12.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\dx102X12.exe"
规则: [应用程序]*

2009-10-13 17:17:36    创建新进程    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\dh222.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\dh222.exe"
规则: [应用程序]*

2009-10-13 17:17:38    创建新进程    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\wm14.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\wm14.exe"
规则: [应用程序]*

2009-10-13 17:17:41    创建新进程    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\jx3-003xaa.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\jx3-003xaa.exe"
规则: [应用程序]*

2009-10-13 17:17:43    创建新进程    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\cj.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\cj.exe"
规则: [应用程序]*

2009-10-13 17:17:46    创建新进程    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\tx2a.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\tx2a.exe"
规则: [应用程序]*

2009-10-13 17:17:48    创建新进程    阻止
进程: c:\documents and settings\administrator\local settings\temp\7zo4.tmp\yy-1.14.14.exe
目标: c:\documents and settings\administrator\local settings\temp\zzcibi.exe
命令行: "C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zzcibi.exe"
规则: [应用程序]*
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2026-4-20 06:12 , Processed in 0.082240 second(s), 7 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表