xl2168_soft002.rar.exe

显示全部楼层 · 发表于 2010-10-17 16:43:02

http://www.vdisk.cn/down/index/5139700A8195

显示全部楼层 · 发表于 2010-10-17 16:44:00

显示全部楼层 · 发表于 2010-10-17 16:47:00

to eset

http://samples.nod32.com.sg/inde ... 1d594bfae58e8df7c98

显示全部楼层 · 发表于 2010-10-17 16:50:45

回复 2楼 8887 的帖子

怎么我的不报？

显示全部楼层 · 发表于 2010-10-17 16:51:25

回复 4楼 521HDL 的帖子

不知

显示全部楼层 · 发表于 2010-10-17 16:52:43

本帖最后由 schumi小粉于 2010.10.17 16:54 编辑

to avast! and TF

质量不错哦

Result:
1/ 43 (2.3%)

2010-10-17 16:53:42 修改其它进程内存    操作:阻止
进程路径:C:\WINDOWS\explorer.exe
目标进程:C:\Documents and Settings\Administrator\桌面\xl2168_soft002.rar\xl2168_soft002.rar.exe
触发规则:所有程序规则->A02…禁止运行的高危程序（黑名单）->*\桌面\*

2010-10-17 16:53:42 创建文件    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\xl2168_soft002.rar\xl2168_soft002.rar.exe
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temp\nsm4B9A.tmp\nsRandom.dll
触发规则:所有程序规则->A02…有关文件创建修改组（含黑名单）->*\*.dll

2010-10-17 16:53:42 创建文件    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\xl2168_soft002.rar\xl2168_soft002.rar.exe
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temp\nsm4B9A.tmp\nsRandom.dll
触发规则:所有程序规则->A02…有关文件创建修改组（含黑名单）->*\*.dll

2010-10-17 16:53:42 创建文件    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\xl2168_soft002.rar\xl2168_soft002.rar.exe
文件路径:C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temp\nsm4B9A.tmp\nsRandom.dll
触发规则:所有程序规则->A02…有关文件创建修改组（含黑名单）->*\*.dll

2010-10-17 16:53:42 修改文件    操作:阻止
进程路径:C:\Documents and Settings\Administrator\桌面\xl2168_soft002.rar\xl2168_soft002.rar.exe
文件路径:C:\Sandbox\Administrator\DefaultBox\drive\C\Program Files\emule100\100.txt
触发规则:所有程序规则->A04…创建文件的目录（黑白）->*\Program Files\*

2010-10-17 16:53:42 创建文件    操作:阻止并结束进程
进程路径:C:\Documents and Settings\Administrator\桌面\xl2168_soft002.rar\xl2168_soft002.rar.exe
文件路径:C:\Sandbox\Administrator\DefaultBox\drive\C\Program Files\emule100\100.bat
触发规则:所有程序规则->A02…有关文件创建修改组（含黑名单）->*\*.bat

显示全部楼层 · 发表于 2010-10-17 17:29:48

miss，to xandora(panda)

显示全部楼层 · 发表于 2010-10-17 17:57:06

TO KL

显示全部楼层 · 发表于 2010-10-17 18:04:15

金山毒霸 Kill

显示全部楼层 · 发表于 2010-10-17 18:46:08

avira

Begin scan in 'D:\DOWNLOAD\xl2168_soft002.rar.rar'
D:\DOWNLOAD\xl2168_soft002.rar.rar
[0] Archive type: RAR
  [DETECTION] The file contains an executable program that is disguised by a harmless file extension (HIDDENEXT/Worm.Gen)
  --> xl2168_soft002.rar.exe
[1] Archive type: NSIS
--> ProgramFilesDir/top.jse
  [DETECTION] Contains recognition pattern of the HTML/Crypted.Gen HTML script virus
[NOTE]    The detection was classified as suspicious.
[NOTE]    The file was moved to quarantine directory and named '4f54756a.qua'!

[病毒样本] xl2168_soft002.rar.exe

浏览过的版块