红伞报

saga3721

langzi2009

NOD32未报

zane_xzz

金山未报

rasis

	2010-10-11 Variant:Downloader.Agent.Dlel		2010-10-11 Trojan:W32/DelfInject.R
	2010-10-10 Found nothing		2010-10-10 Found nothing
	2010-10-10 Found nothing		2010-10-11 Virus.Win32.Downloader.ALQ
	2010-10-10 TR/ATRAPS.Gen		2010-10-09 Found nothing
	2010-10-10 Found nothing		2010-10-09 Found nothing
	2010-10-10 Exploit.MS03-43		2010-10-09 Found nothing
	2010-10-11 Troj.Exploit.W32.MS03-043.M		2010-10-11 Found nothing
	2010-10-11 Found nothing		2010-10-08 Found nothing
	2010-10-10 Found nothing		2010-10-10 Found nothing

rasis

File Info
Name        Value
Size        1327104
MD5        fd09d263b15401c7fa0840f2e268b7de
SHA1        5f84ea34d927929fae91cdfb4b4062c029b83daf
SHA256        b0885275d0c81166f3a3c84da55296b209379825729e69d0a39c53e3bc55ed41
Process        Active
• Keys Created
• Keys Changed
• Keys Deleted
• Values Created
• Values Changed
• Values Deleted
• Directories Created
• Directories Changed
• Directories Deleted
• Files Created
• Files Changed
• Files Deleted
• Directories Hidden
• Files Hidden
• Drivers Loaded
• Drivers Unloaded
• Processes Created
• Processes Terminated
• Threads Created
PId        Process Name        TId        Start        Start Mem        Win32 Start        Win32 Start Mem
0x348        svchost.exe        0xf8        0x7c810856        MEM_IMAGE        0x7c910760        MEM_IMAGE
0x3f4        svchost.exe        0x298        0x7c810856        MEM_IMAGE        0x77e76bf0        MEM_IMAGE
• Modules Loaded
• Windows Api Calls
• DNS Queries
• HTTP Queries
• Verdict
Auto Analysis Verdict
Undetected
• Mutexes Created or Opened
PId        Image Name        Address        Mutex Name
0x684        C:\TEST\sample.exe        0x771ba3ae        _!MSFTHISTORY!_
0x684        C:\TEST\sample.exe        0x771bc21c        WininetConnectionMutex
0x684        C:\TEST\sample.exe        0x771bc23d        WininetProxyRegistryMutex
0x684        C:\TEST\sample.exe        0x771bc2dd        WininetStartupMutex
0x684        C:\TEST\sample.exe        0x771d9710        c:!documents and settings!user!cookies!
0x684        C:\TEST\sample.exe        0x771d9710        c:!documents and settings!user!local settings!history!history.ie5!
0x684        C:\TEST\sample.exe        0x771d9710        c:!documents and settings!user!local settings!temporary internet files!content.ie5!
0x684        C:\TEST\sample.exe        0x777904d3        WininetStartupMutex
• Events Created or Opened
PId        Image Name        Address        Event Name
0x684        C:\TEST\sample.exe        0x40124f        9255.client
0x684        C:\TEST\sample.exe        0x77a89422        Global\crypt32LogoffEvent

z474818164

NOD32不报

will

bc3252da.exe    Worm.Win32.Dropper.gen_1446545@105409960

星晨

BitDefender2011沒報

hansyu

启发，to xandora(panda)

Palkia

回复 1楼 saga3721 的帖子