VIRUS

F-secure2009

微点2.0右键扫描报马

liulangzhecgr

2011-04-21 07:48:33    创建文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\BrandingURL.dll

2011-04-21 07:48:36    创建文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\nsDialogs.dll

2011-04-21 07:48:38    修改文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\nsDialogs.dll

2011-04-21 07:48:40    创建文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\System.dll

2011-04-21 07:48:41    修改文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\nsDialogs.dll

2011-04-21 07:48:43    修改文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\nsDialogs.dll

2011-04-21 07:48:44    修改文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\nsDialogs.dll

2011-04-21 07:48:46    修改文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\nsDialogs.dll

2011-04-21 07:48:48    修改文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\System.dll

2011-04-21 07:48:49    修改文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\System.dll

2011-04-21 07:48:51    修改文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\System.dll

2011-04-21 07:48:53    创建文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\Math.dll

2011-04-21 07:48:55    修改文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\Math.dll

2011-04-21 07:48:57    创建文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\inetc.dll

2011-04-21 07:49:06    修改文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\inetc.dll

2011-04-21 07:49:10    删除文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\BrandingURL.dll

2011-04-21 07:49:12    创建文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\WINDOWS\wininit.ini

2011-04-21 07:49:14    删除文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\inetc.dll

2011-04-21 07:49:15    删除文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\Math.dll

2011-04-21 07:49:16    删除文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\nsDialogs.dll

2011-04-21 07:49:18    删除文件      操作:允许
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\Documents and Settings\Administrator\Local Settings\Temp\nso2.tmp\System.dll

2011-04-21 07:49:24    修改文件      操作:阻止
进程路径:E:\DownLoads\eu_search_2470\eu_search_2470.exe
文件路径:C:\WINDOWS\wininit.ini


没有下文。。。

jayavira

没什么问题吧，应该不是病毒

http://camas.comodo.com/cgi-bin/ ... 526deed4b4ad8e7d2c6

http://valkyrie.comodo.com/Resul ... =eu_search_2470.exe

留侯

大蜘蛛：
eu_search_2470.exe - archive NSIS
eu_search_2470.exe/script.bin found virus Trojan.Click1.30708

arsh

微点右键扫描报毒,但解压运行微点没反应,360杀毒安全

m220011

NIS 2011 miss

小闹闹

不是病毒
毛豆拦了个联网和写入，ESET+AVIRA没反应。。。

qianyuqx

avast kill

hddu

非病毒。  

qianyuqx

to mse