MD5 8a5f15 file.exe

显示全部楼层 · 发表于 2007-6-10 06:57:13

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

Trojan.Downloader.Small.AAAO

显示全部楼层 · 发表于 2007-6-10 09:21:51

運行file.exe，發現下列行為，被EQ-Secure RC1攔截！
--------------
2007-06-10 09:20:22 運行應用程序    操作:允許
進成路徑:C:\WINDOWS\Explorer.EXE
文件路徑:D:\桌面\virus\file_kafan\file.exe
规则:應用程序規則->系統程序->%windir%\Explorer.EXE

2007-06-10 09:20:38 運行應用程序    操作:阻止
進成路徑:D:\桌面\virus\file_kafan\file.exe
文件路徑:C:\Documents and Settings\Hung Jui Hung\Local Settings\Temp\D167.tmp
规则:黑名單->2.1禁止從Temp文件夾運行程序->*\*temp*\*

2007-06-10 09:20:41 運行應用程序    操作:阻止
進成路徑:D:\桌面\virus\file_kafan\file.exe
文件路徑:C:\Documents and Settings\Hung Jui Hung\Local Settings\Temp\D169.tmp
规则:黑名單->2.1禁止從Temp文件夾運行程序->*\*temp*\*

------------------
1.他想要運行下列應用程序
D167.tmp
D169.tmp

[病毒样本] MD5 8a5f15 file.exe