这个注册机到底是病毒么？

显示全部楼层 · 发表于 2009-12-30 16:54:46

http://www.namipan.com/d/Keymaker.exe/a34e121cda84b9f838ad9d31318aa928fd591965009e1200
有什么行为请分析一下！

显示全部楼层 · 发表于 2009-12-30 17:04:29

注册机一般可不是病毒

显示全部楼层 · 发表于 2009-12-30 17:08:24

本帖最后由 will 于 2009-12-30 17:12 编辑

疑似Clean，一般报都是报壳

[ Changes to filesystem ]
* No changes

[ Changes to registry ]
* Creates value "Reseller=01000000" in key HKEY_LOCAL_MACHINE\software\Diskeeper Corporation\Diskeeper\Licensing
* Creates value "PACData=TH4A4EL76U5Q9CAHVBM6L4RTMR73T" in key HKEY_LOCAL_MACHINE\software\Diskeeper Corporation\Diskeeper\Licensing\B2B80E1BE6B24D9700
* Creates value "PAC=01000000" in key HKEY_LOCAL_MACHINE\software\Diskeeper Corporation\Diskeeper\Licensing\B2B80E1BE6B24D9700
* Creates value "PACKey=TH4A4EL76U5Q9CAHVBM6L4RTMR73T" in key HKEY_LOCAL_MACHINE\software\Diskeeper Corporation\Diskeeper\UserSettings

[ Process/window information ]
* Creates a mutex MSCTF.Shared.MUTEX.ELB.
* Creates a mutex MSCTF.Shared.MUTEX.INI.
* Creates an event named "MSCTF.SendReceive.Event.INI.IC".
* Creates an event named "MSCTF.SendReceiveConection.Event.INI.IC".

显示全部楼层 · 发表于 2009-12-30 18:44:20

瑞星2010

查询编号：RS20091211200740421282
文件名称：Kiss_DK09r.exe
文件MD5：58D79E3A29CCC1857539CA21C3020209
文件状态：

安全文件

显示全部楼层 · 发表于 2009-12-30 22:14:42

报注册机很正常。。肯定是误报。。

显示全部楼层 · 发表于 2009-12-30 22:20:49

namipan……
wo pei

[病毒样本] 这个注册机到底是病毒么？