SPYBANKER

显示全部楼层 · 发表于 2011-5-4 08:33:05

麻烦看看行为

谢谢

显示全部楼层 · 发表于 2011-5-4 08:47:09

ess kill

D:\下载文件夹\Cadastro_Real_Santander.rar > RAR > Cadastro_Real_Santander.exe > RAR > gsPlugin.exe - Win32/Spy.Banker.VTK 特洛伊木马的变种

显示全部楼层 · 发表于 2011-5-4 08:55:45

to BitDefender

显示全部楼层 · 发表于 2011-5-4 09:13:57

大蜘蛛clean，已上报！

显示全部楼层 · 发表于 2011-5-4 09:37:23

360

Malware.QVM05.Gen

显示全部楼层 · 发表于 2011-5-4 10:10:12

本帖最后由 xwhmm 于 2011-5-4 10:10 编辑

秒杀

显示全部楼层 · 发表于 2011-5-4 10:23:04

Firewall: User decision 2011/5/4 10:17 Allowed C:\Users\x\Desktop\Cadastro_Real_Santander\gsPlugin.exe, Outgoing TCP access allowed to: (www.familiennavigator.de) 78.31.71.113:80
Program Guard: kernel event 2011/5/4 10:17 None OADriver: OB_OPERATION_HANDLE_DUPLICATE, PID: 3156, pid: 4292, SP: 111905584, TP: 111905584, Mask: 1FFFFF - 1FF414
Program Guard: Cadastro_Real_Santander.exe -> gsPlugin.exe 2011/5/4 10:17 Allowed C:\Users\x\Desktop\Cadastro_Real_Santander\Cadastro_Real_Santander.exe(3156) wants to start C:\Users\x\Desktop\Cadastro_Real_Santander\gsPlugin.exe
Program Guard: Cadastro_Real_Santander.exe -> gsPlugin.exe 2011/5/4 10:17 Allowed C:\Users\x\Desktop\Cadastro_Real_Santander\Cadastro_Real_Santander.exe wants to create executable file C:\Users\x\Desktop\Cadastro_Real_Santander\gsPlugin.exe
Program Guard: Cadastro_Real_Santander.exe 2011/5/4 10:17 Allowed C:\Windows\explorer.exe -> C:\Users\x\Desktop\Cadastro_Real_Santander\Cadastro_Real_Santander.exe

显示全部楼层 · 发表于 2011-5-4 10:41:48

卡巴没报

显示全部楼层 · 发表于 2011-5-4 10:49:54

daddy55 发表于 2011-5-4 10:41
卡巴没报

显示全部楼层 · 发表于 2011-5-4 10:55:11

sonar kill

[病毒样本] SPYBANKER

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块