GSDXL.EXE

fatezero

XL
KIS
检测到威胁: Trojan-Clicker.Win32.VB.gbi    E:\download\GSDXL/UPX/data0003.res/UPX        

11/42 (26.2%)


解压后有点大

ywsuda

我也是kis，就不测了

hansyu

我刚点链接就被avast!阻止了。。。
Win32:StartPage-ALZ[Trj]

瓜皮猫

eset  kill
C:\Users\微亿毫\Desktop\GSDXL.7z > 7ZIP > GSDXL.EXE - Win32/TrojanClicker.BHO.NCB 特洛伊木马 的变种

zdolo

QVM11

ppy0606

avira

在文件“D:\我的文档\viurs test\GSDXL\GSDXL.EXE”中检测到病毒或
恶意程序“TR/Crypt.ULPM.Gen [trojan]”。
-----------------------------------------------------------------------------------

2010-12-15 20:44:32    创建新进程    允许
进程: c:\windows\explorer.exe
目标: d:\我的文档\viurs test\gsdxl\gsdxl.exe
命令行: "D:\我的文档\viurs test\GSDXL\GSDXL.EXE"
规则: [应用程序组]威胁提示Ⅰ -> [应用程序]* -> [子应用程序]d:\我的文档\*

2010-12-15 20:44:35    修改注册表值    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Desktop
值: C:\Documents and Settings\Administrator\桌面
规则: [注册表组]资源管理器相关设置 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\*Shell Folders*

2010-12-15 20:44:37    修改注册表值    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\AppData
值: C:\Documents and Settings\Administrator\Application Data
规则: [注册表组]资源管理器相关设置 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\*Shell Folders*

2010-12-15 20:44:37    删除文件    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\ri4o37hj.default\prefs.js
规则: [文件组]文件阻止及保护 -> [文件]*; *.js

2010-12-15 20:44:37    修改文件    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\ri4o37hj.default\prefs.js
规则: [文件组]文件阻止及保护 -> [文件]*; *.js

2010-12-15 20:44:37    删除文件    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\ri4o37hj.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}\defaults\preferences\prefs.js
规则: [文件组]文件阻止及保护 -> [文件]*; *.js

2010-12-15 20:44:37    修改文件    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\ri4o37hj.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}\defaults\preferences\prefs.js
规则: [文件组]文件阻止及保护 -> [文件]*; *.js

2010-12-15 20:44:37    删除文件    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\febeprof.9eyes\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}\defaults\preferences\prefs.js
规则: [文件组]文件阻止及保护 -> [文件]*; *.js

2010-12-15 20:44:37    修改文件    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\febeprof.9eyes\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}\defaults\preferences\prefs.js
规则: [文件组]文件阻止及保护 -> [文件]*; *.js

2010-12-15 20:44:37    删除文件    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\febeprof.9eyes\prefs.js
规则: [文件组]文件阻止及保护 -> [文件]*; *.js

2010-12-15 20:44:37    修改文件    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\febeprof.9eyes\prefs.js
规则: [文件组]文件阻止及保护 -> [文件]*; *.js

2010-12-15 20:44:38    修改注册表值    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Local AppData
值: C:\Documents and Settings\Administrator\Local Settings\Application Data
规则: [注册表组]资源管理器相关设置 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\*Shell Folders*

2010-12-15 20:44:39    修改注册表值    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Common Desktop
值: C:\Documents and Settings\All Users\桌面
规则: [注册表组]资源管理器相关设置 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\*Shell Folders*

2010-12-15 20:44:40    修改注册表值    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ITBar7Layout
值: 13 00 00 00 00 00 00 00 00 00 00 00 30 00 00 00 14 00 00 00 16 00 00 00 01 00 00 00 00 07 00 00 80 01 00 00 03 00 00 00 01 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
规则: [注册表组]浏览器相关设置 -> [注册表]*\Software\Microsoft\Internet explorer\Toolbar*

2010-12-15 20:44:41    修改注册表值    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\ITBarLayout
值: 11 00 00 00 5c 00 00 00 00 00 00 00 34 00 00 00 1f 00 00 00 6e 00 00 00 01 00 00 00 a0 06 00 00 a0 0f 00 00 05 00 00 00 22 04 00 00 26 00 00 00 02 00 00 00 a1 06 00 00 a0 0f 00 00 04 00 00 00 a1 00 00 00 0f 02 00 00 03 00 00 00 a1 02 00 00 3b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
规则: [注册表组]浏览器相关设置 -> [注册表]*\Software\Microsoft\Internet explorer\Toolbar*

2010-12-15 20:44:42    修改注册表值    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Favorites
值: d:\我的文档\收藏夹
规则: [注册表组]资源管理器相关设置 -> [注册表]*\Software\Microsoft\Windows\CurrentVersion\Explorer\*Shell Folders*

2010-12-15 20:44:42    创建文件    阻止
进程: d:\我的文档\viurs test\gsdxl\gsdxl.exe
目标: C:\b.txt
规则: [文件组]文件阻止及保护 -> [文件]?:\

萧剑

360卫士鉴定 未知
COMODO  packed.win32.mupx.gen@129019204

zst470396853

又是一个过 云杀软的毒?? 那么多00

zst470396853

金山网盾 和360网盾 下载报毒了~~~~~~~

huangqian202

双击~~~