Adware

显示全部楼层 · 发表于 2009-12-7 01:19:14

...

显示全部楼层 · 发表于 2009-12-7 01:32:48

不算病毒吧，是而已程序

显示全部楼层 · 发表于 2009-12-7 15:14:59

to eset

显示全部楼层 · 发表于 2009-12-7 21:26:39

微点扫描版kill

显示全部楼层 · 发表于 2009-12-7 22:15:51

2009-12-7 22:14:28 c:\documents and settings\administrator\桌面\down\down.exe 修改注册表值 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{871C5380-42A0-1069-A2EA-08002B30309D}\shell\OpenHomePage\Command 允许 [注册表组]系统设置 -> [注册表]HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\command 值: C:\Program Files\Internet Explorer\iexplore.exe http://www.26dh.cn
2009-12-7 22:14:56 c:\documents and settings\administrator\桌面\down\down.exe 修改注册表值 HKEY_LOCAL_MACHINE\SOFTWARE\Classes\HTTP\shell\open\command 允许 [注册表组]系统设置 -> [注册表]HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*\command 值: C:\Program Files\Internet Explorer\iexplore.exe http://www.26dh.cn

显示全部楼层 · 发表于 2009-12-7 23:56:51

HEUR:Trojan.Win32.StartPage
fatezero 发表于 2009-12-6 17:44

我去上报下
7/12/2009 23:56:16 已偵測病毒 HEUR:Trojan.Win32.StartPage 高可能 C:\Documents and Settings\kato9096\桌面\down\down.exe

显示全部楼层 · 发表于 2009-12-8 16:40:10

Hello,

down.exe2 - Trojan.Win32.FlyStudio.pw

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

--
Best regards,
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[病毒样本] Adware

本帖子中包含更多资源