video_part_11.exe [MD5: 25032C] [VirusTotal: 11/42 (26.2%)]

显示全部楼层 · 发表于 2010-11-7 11:47:59

本帖最后由蝉鸣时于 2010-11-7 14:19 编辑

File: video_part_11.exe
MD5: 25032C3EA49537562ADA69D405269179
VirusTotal: 11/42 (26.2%)　Click here to view the VirusTotal report

This file has been submitted to KL.

Hello,

This notification is generated by automatic letter processing system.

video_part_11.exe - Trojan.Win32.FakeAV.qvy

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Best Regards, Kaspersky Lab

显示全部楼层 · 发表于 2010-11-7 11:50:49

eset kill
C:\Users\微亿毫\Desktop\video_part_11.7z > 7ZIP > video_part_11.exe - Win32/Adware.FakeAntiSpy.P 应用程序的变种

显示全部楼层 · 发表于 2010-11-7 11:53:15

瑞星 2011 Kill

显示全部楼层 · 发表于 2010-11-7 12:00:21

TO KL

显示全部楼层 · 发表于 2010-11-7 12:22:35

显示全部楼层 · 发表于 2010-11-7 12:28:25

大蜘蛛：video_part_11.exe found virus Trojan.FakeAV.1271

显示全部楼层 · 发表于 2010-11-7 12:49:52

上报A2

显示全部楼层 · 发表于 2010-11-7 12:50:21

2010-11-07 12:41:00 C:\Documents and Settings\Roger\桌面\virus\video_part_11\video_part_11.exe Sandboxed As Partially Limited

2010-11-07 12:41:01 C:\Documents and Settings\Roger\桌面\virus\video_part_11\video_part_11.exe Access COM Interface Shell.Explorer.2

2010-11-07 12:41:06 C:\WINDOWS\system32\mshta.exe Sandboxed As Partially Limited

2010-11-07 12:41:16 C:\WINDOWS\system32\mshta.exe Asked Out TCP 114.44.247.120 40200 77.78.233.2 20480

2010-11-07 12:41:06 C:\Documents and Settings\Roger\Application Data\dkfjasdfshd.bat Sandboxed As Partially Limited

2010-11-07 12:41:07 C:\WINDOWS\system32\at.exe Sandboxed As Partially Limited

2010-11-07 12:41:26 C:\Documents and Settings\Roger\Application Data\dkfjasdfshd.bat Modify File C:\Documents and Settings\Roger\桌面\virus\video_part_11\video_part_11.exe

2010-11-07 12:41:26 C:\Documents and Settings\Roger\桌面\virus\video_part_11\video_part_11.exe Modify Key HKUS\S-1-5-21-2000478354-583907252-725345543-1003\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell

2010-11-07 12:41:26 C:\WINDOWS\system32\mshta.exe Modify Key HKUS\S-1-5-21-2000478354-583907252-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable

2010-11-07 12:41:26 C:\Documents and Settings\Roger\桌面\virus\video_part_11\video_part_11.exe Access Memory C:\WINDOWS\system32\ctfmon.exe

显示全部楼层 · 发表于 2010-11-7 12:51:12

panda
Trj/CI.A

显示全部楼层 · 发表于 2010-11-7 13:27:43

http://bbs.kafan.cn/forum-attach ... EyfDUwMTI0OA==.html Win32/Adware.FakeAntiSpy.P 应用程序的变种连接中断 - 已隔离通过应用程序访问 web 时检测到威胁: C:\Program Files\Common Files\Thunder Network\TP\Ver1\1.1.2.34_1110\ThunderPlatform.exe.
http://bbs.kafan.cn/forum-attach ... EyfDUwMTI0OA==.html > 7ZIP > video_part_11.exe Win32/Adware.FakeAntiSpy.P 应用程序的变种

[病毒样本] video_part_11.exe [MD5: 25032C] [VirusTotal: 11/42 (26.2%)]

本帖子中包含更多资源

评分

本帖子中包含更多资源