H网播放器

adad2008

kv主动防御报

e:\documents and settings\xubo\桌面\pptv\pptv.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Directory = E:\Documents and Settings\xubo\Local Settings\Temporary Internet Files\Content.IE5     2009-11-5 14:02:24     
e:\documents and settings\xubo\桌面\pptv\pptv.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Path1\CachePath = E:\Documents and Settings\xubo\Local Settings\Temporary Internet Files\Content.IE5\Cache1     2009-11-5 14:03:09     
e:\documents and settings\xubo\桌面\pptv\pptv.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Path2\CachePath = E:\Documents and Settings\xubo\Local Settings\Temporary Internet Files\Content.IE5\Cache2     2009-11-5 14:03:10     
e:\documents and settings\xubo\桌面\pptv\pptv.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Path3\CachePath = E:\Documents and Settings\xubo\Local Settings\Temporary Internet Files\Content.IE5\Cache3     2009-11-5 14:03:11     
e:\documents and settings\xubo\桌面\pptv\pptv.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\Path4\CachePath = E:\Documents and Settings\xubo\Local Settings\Temporary Internet Files\Content.IE5\Cache4     2009-11-5 14:03:11     
e:\documents and settings\xubo\桌面\pptv\pptv.exe     创建注册表键     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders     2009-11-5 14:03:12     
e:\documents and settings\xubo\桌面\pptv\pptv.exe     创建注册表键     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders     2009-11-5 14:03:12     
e:\documents and settings\xubo\桌面\pptv\pptv.exe     修改注册表     HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common AppData = E:\Documents and Settings\All Users.WINNT\Application Data     2009-11-5 14:03:13     
e:\documents and settings\xubo\桌面\pptv\pptv.exe     创建网络服务     TCP: 0.0.0.0:2604(LOCAL)     2009-11-5 14:03:15     
e:\documents and settings\xubo\桌面\pptv\pptv.exe     发现疑似木马程序     
修改注册表;
创建注册表键;
创建网络服务;
连接网络;

[ 本帖最后由 adad2008 于 2009-11-5 14:08 编辑 ]

Love=卡巴+费尔

Kaspersky已入库！

Spoolv.exe
Smsss.exe
kuodousetup.exe
yxkss[1].exe
Lsas.exe

as4524

Hello,

pptv.exe__

No malicious code was found in this file.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

--
Best regards,
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

BING126

to McAfee

尤金卡巴斯基

pptv.exe_ - Trojan-Downloader.Win32.Agent.ctrp

以上文件包含恶意代码，下次更新后即可查杀。感谢您的上报。