更新:csdnsd.exe [MD5: CB317B]--（6/42）

jun131470

2010-8-9 18:52:22    创建注册表项    阻止
进程: d:\我的文档\桌面\csdnsd\csdnsd.exe
目标: HKEY_USERS\Sandbox_Administrator_DefaultBox\user\current\Software\Microsoft\Internet Explorer\Main\Frist
规则: [注册表组][A]IE浏览器设置 -> [注册表]*\Software\Microsoft\Internet Explorer\Main\*

2010-8-9 18:52:22    创建注册表项    阻止
进程: d:\我的文档\桌面\csdnsd\csdnsd.exe
目标: HKEY_USERS\Sandbox_Administrator_DefaultBox\user\current\software\Microsoft\Internet Explorer\Main\Frist
规则: [注册表组][A]IE浏览器设置 -> [注册表]*\Software\Microsoft\Internet Explorer\Main\*

2010-8-9 18:52:22    创建注册表项    阻止并结束进程
进程: d:\我的文档\桌面\csdnsd\csdnsd.exe
目标: HKEY_USERS\Sandbox_Administrator_DefaultBox\user\current\software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu
规则: [注册表组][S]高度危险项_最多可改它为仅“阻止” -> [注册表]*\Software\Microsoft\window*\CurrentVersion\Explorer\HideDesktopIcons*

njjsxy

Hello,

csdnsd.exe_ - Trojan.Win32.StartPage.adhd

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

--
Best regards,
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/