Trojan-Ransom.Win32.PornoBlocker [Update_#2] [2010-08-21]

显示全部楼层 · 发表于 2010-8-22 08:32:41

submit to jiangmin

显示全部楼层 · 发表于 2010-8-22 08:40:29

2010/8/22 08:39:34 c:\users\administrator\desktop\#1 [2010-08-20]\vip_porno_78563.avi.exe 修改注册表值 HKEY_USERS\SANDBOX_ADMINISTRATOR_DEFAULTBOX\user\current\software\Microsoft\Windows\CurrentVersion\Policies\system\DisableTaskMgr 阻止并结束进程 [注册表组]系统关键设置保护(结束进程) -> [注册表]*\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\SYSTEM; DisableTaskMgr 值: 0x00000001(1)

显示全部楼层 · 发表于 2010-8-22 09:39:24

8.20
微点杀
8.21
to mp

显示全部楼层 · 发表于 2010-8-22 11:04:15

mcafee定义

显示全部楼层 · 发表于 2010-8-22 11:12:51

To Avira!
A listing of files contained inside archives alongside their results can be found below:

File ID Filename Size (Byte) Result
25856498 vip_porno_96372.avi.exe 149 KB UNDER ANALYSIS

显示全部楼层 · 发表于 2010-8-22 13:01:58

QQ拼音截图未命名12.png

[病毒样本] Trojan-Ransom.Win32.PornoBlocker [Update_#2] [2010-08-21]

浏览过的版块