Repair.exe----Trj/CI.A

显示全部楼层 · 发表于 2011-5-4 13:38:24

本帖最后由 xwhmm 于 2011-5-4 19:40 编辑

手机先占位

秒杀

显示全部楼层 · 发表于 2011-5-4 13:51:31

BitDefender 2011

此网页已被BitDefender反病毒实时防护拦截！

被BitDefender拦截的网页包含（可能）已被病毒感染的对象。您的系统未被感染

显示全部楼层 · 发表于 2011-5-4 14:57:15

大蜘蛛clean，文件加了殼：
REPAIR.EXE packed by UPX
REPAIR.EXE - archive AUTOIT
REPAIR.EXE/DOCUME~1\ADMINI~1\LOCALS~1\Temp\aut2ECE.tmp packed by ASCRIPT
已上報！

显示全部楼层 · 发表于 2011-5-4 15:54:55

Program Guard: REPAIR.EXE -> cmd.exe 2011/5/4 15:51 Blocked C:\Users\xxxx\Desktop\dll\REPAIR.EXE(1988) wants to start C:\Windows\SysWOW64\cmd.exe(4552)
Program Guard: cmd.exe 2011/5/4 15:51 Trusted C:\Windows\SysWOW64\cmd.exe was trusted by dictionary.
Program Guard: REPAIR.EXE 2011/5/4 15:51 Allowed C:\Users\xxxx\Desktop\dll\REPAIR.EXE wants to get a list of the files C:\Windows\Temp\*
Program Guard: REPAIR.EXE -> regedit.exe 2011/5/4 15:51 Blocked C:\Users\xxxx\Desktop\dll\REPAIR.EXE(1988) wants to start C:\Windows\SysWOW64\regedit.exe(2236)
Program Guard: REPAIR.EXE 2011/5/4 15:50 Blocked C:\Users\xxxx\Desktop\dll\REPAIR.EXE wants to get a list of the files C:\Users\xxxx\Favorites\*
Program Guard: REPAIR.EXE -> regedit.exe 2011/5/4 15:50 Blocked C:\Users\xxxx\Desktop\dll\REPAIR.EXE(1988) wants to start C:\Windows\SysWOW64\regedit.exe(4220)
Program Guard: regedit.exe 2011/5/4 15:50 Trusted C:\Windows\SysWOW64\regedit.exe was trusted by dictionary.
Program Guard: REPAIR.EXE 2011/5/4 15:50 Allowed C:\Windows\explorer.exe -> C:\Users\xxxx\Desktop\dll\REPAIR.EXE

显示全部楼层 · 发表于 2011-5-4 23:42:02

已上报趋势～
未侦测到威胁～～

显示全部楼层 · 发表于 2011-5-5 07:43:43

qianyuqx 发表于 2011-5-4 12:26
回复 2楼 saga3721 的帖子

是番茄把

你没看上上周新闻？已抓

[病毒样本] Repair.exe----Trj/CI.A

本帖子中包含更多资源

浏览过的版块