查看: 6492|回复: 11
收起左侧

[病毒样本] setup_5002.exe

[复制链接]
fatezero
发表于 2011-4-17 10:32:03 | 显示全部楼层 |阅读模式
62590423
发表于 2011-4-17 10:33:39 | 显示全部楼层
avg 杀
jayavira
发表于 2011-4-17 10:35:25 | 显示全部楼层
ess kill

D:\下载文件夹\setup_5002.rar > RAR > setup_5002.exe > NSIS > smes.exe > NSIS > kws.ini - NSIS/TrojanClicker.Agent.AN.Gen 特洛伊木马
星晨
发表于 2011-4-17 10:36:52 | 显示全部楼层
BitDefender
zlib_nsis0000 Trojan.Startpage.ZVB
z2009
发表于 2011-4-17 11:12:29 | 显示全部楼层
金山网盾报毒
风亡
发表于 2011-4-17 11:15:28 | 显示全部楼层
360 SD kill
留侯
发表于 2011-4-17 11:15:45 | 显示全部楼层
大蜘蛛clean,部分文件加了壳:
setup_5002.exe/Flush.exe/data004 已打包,方式: ZLIB
setup_5002.exe/Flush.exe/data004 - 压缩文件 BINARYRES

setup_5002.exe/searchcore.dll 已打包,方式: ZLIB
setup_5002.exe/searchcore.dll - 压缩文件 BINARYRES

已上报。
kinkids
发表于 2011-4-17 11:56:53 | 显示全部楼层



掃瞄偵測為【】
已進行隔離/刪除動作。

掃瞄偵測到【1】個惡意檔案,【】個 Kaspersky Cloud,【】個啟發,【1】個特徵碼,
一隻病毒一條特徵碼傻眼囧rz
剩餘【】個可疑文件MISS,無威脅存在,已提交至 Kaspersky 分析行為。
gogo8989
发表于 2011-4-17 13:02:17 | 显示全部楼层
瑞星杀


本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
liulangzhecgr
发表于 2011-4-17 14:41:26 | 显示全部楼层
本帖最后由 liulangzhecgr 于 2011-4-17 14:47 编辑



-----------------------------------------------------------------------------
added files:

C:\Documents and Settings\Administrator\Application Data\Microsoft\Internet Explorer\Quick Launch\ Intarnot Explarer .lnk
C:\Documents and Settings\Administrator\Application Data\PIPI\jfcheck.conf
C:\Documents and Settings\Administrator\Application Data\PIPI\pipisp.ico
C:\Documents and Settings\Administrator\Application Data\PIPI\pipisp.url
C:\Documents and Settings\Administrator\Application Data\Scooter Software\Beyond Compare 3\BCCommands.xml.bak
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\tabiconcache.dat
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\RecoveryStore.{E97AA574-67AB-11E0-9D86-00142ABFC05C}.dat
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Internet Explorer\Recovery\Last Active\{00CE41F0-68B6-11E0-9D8C-00142ABFC05C}.dat
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012011041620110417\index.dat
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\MSHist012011041720110418\index.dat
C:\Documents and Settings\Administrator\桌面\JJ斗地主大奖赛.lnk
C:\Documents and Settings\Administrator\桌面\免费网络电话172710.EXE
C:\Documents and Settings\All Users\Application Data\Kingsoft\kws\kws.ini
C:\Documents and Settings\All Users\Application Data\Kingsoft\kws\spitesp.dat
C:\Documents and Settings\All Users\Application Data\Kingsoft\kws\spot.ini
C:\Documents and Settings\All Users\桌面\ Intarnot   Explarer .lnk
C:\Documents and Settings\All Users\桌面\购物大全.lnk
C:\Program Files\Flush\Flush_172710.exe
C:\Program Files\Flush\Flush_172710.ini
C:\Program Files\Flush\module.log
C:\Program Files\Flush\passlist.dat
C:\Program Files\Flush\search_hist.dat
C:\Program Files\Flush\360\360core\360core.dll
C:\Program Files\Flush\360\360core\plugin.ini
C:\Program Files\Flush\360\searchcore\plugin.ini
C:\Program Files\Flush\360\searchcore\SearchCfg.dat
C:\Program Files\Flush\360\searchcore\searchcore.dll
C:\Program Files\Flush\ImgCache\hao.360.cn_favicon.ico
C:\Program Files\Flush\ImgCache\MouseGesture_0.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_1.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_10.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_11.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_12.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_13.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_14.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_15.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_16.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_17.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_18.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_19.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_2.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_3.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_4.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_5.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_6.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_7.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_8.bmp
C:\Program Files\Flush\ImgCache\MouseGesture_9.bmp
C:\Program Files\Flush\ImgCache\new.cnzz.com_favicon.ico
C:\Program Files\Flush\ImgCache\poker.wan.360.cn_favicon.ico
C:\Program Files\Flush\ImgCache\se.360.cn_favicon.ico
C:\Program Files\Flush\ImgCache\wan.360.cn_favicon.ico
C:\Program Files\Flush\ImgCache\www.2345.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.2345a.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.3234.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.360.cn_favicon.ico
C:\Program Files\Flush\ImgCache\www.360buy.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.46.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.58.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.886.la_favicon.ico
C:\Program Files\Flush\ImgCache\www.baidu.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.ename.cn_favicon.ico
C:\Program Files\Flush\ImgCache\www.google.com_favicon.ico
C:\Program Files\Flush\ImgCache\www.qihoo.com_favicon.ico
C:\Program Files\Flush\plugin\360Skinhelper\plugin.ini
C:\Program Files\Flush\plugin\360Skinhelper\Skinhelper.dll
C:\Program Files\Flush\plugin\360Skinhelper\skinhelper.ico
C:\Program Files\Flush\plugin\360snap\360snap.dll
C:\Program Files\Flush\plugin\360snap\plugin.ini
C:\Program Files\Flush\plugin\360snap\screener.exe
C:\Program Files\Flush\plugin\360snap\snap.ico
C:\Program Files\Flush\plugin\koudai\add.htm
C:\Program Files\Flush\plugin\koudai\add.ico
C:\Program Files\Flush\plugin\koudai\plugin.ini
C:\Program Files\Flush\plugin\koudai\readme.txt
C:\Program Files\Flush\plugin\zconf\conf.ico
C:\Program Files\Flush\plugin\zconf\plugin.ini
C:\Program Files\Flush\plugin\zconf\quickconf.dll
C:\Program Files\Flush\Shield\Sandboxie.ini
C:\Program Files\soft172710\172710.txt
C:\Program Files\soft172710\JJmatch_11494.exe
C:\Program Files\soft172710\pipi_dae_381.exe
C:\Program Files\soft172710\wl06079.exe
C:\Program Files\soft172710\w_1710.exe
C:\WINDOWS\system32\jfcheck.conf
C:\WINDOWS\system32\JfCheck.dll.bak
C:\WINDOWS\system32\multbp.cfg
C:\WINDOWS\system32\config\mcckmplayervod.ini




本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-6-14 13:56 , Processed in 0.132674 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表