FPATCL-crk.exe

显示全部楼层 · 发表于 2011-5-16 20:21:03

大蜘蛛：
FPATCL-crk.exe infected with Trojan.PWS.Siggen.19023

显示全部楼层 · 发表于 2011-5-16 20:35:16

启发
to kis

显示全部楼层 · 发表于 2011-5-16 21:52:54

2011-5-16 21:49:35 G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\FPATCL-crk.exe context changing G:\windows\System32\winver.exe allowed 0.*
2011-5-16 21:49:30 G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\FPATCL-crk.exe protect virtual memory G:\windows\System32\winver.exe allowed 0.*
2011-5-16 21:49:28 G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\FPATCL-crk.exe protect virtual memory G:\windows\System32\winver.exe allowed 0.*
2011-5-16 21:49:26 G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\FPATCL-crk.exe protect virtual memory G:\windows\System32\winver.exe allowed 0.*
2011-5-16 21:49:24 G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\FPATCL-crk.exe protect virtual memory G:\windows\System32\winver.exe allowed 0.*
2011-5-16 21:49:22 G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\FPATCL-crk.exe protect virtual memory G:\windows\System32\winver.exe allowed 0.*
2011-5-16 21:49:18 G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\FPATCL-crk.exe protect virtual memory G:\windows\System32\winver.exe allowed 0.*
2011-5-16 21:49:14 G:\Documents and Settings\Administrator.HX-C0987054243B\桌面\FPATCL-crk.exe create process G:\windows\system32\winver.exe allowed 0.*

显示全部楼层 · 发表于 2011-5-16 21:53:34

sophos kill

显示全部楼层 · 发表于 2011-5-16 21:58:27

本帖最后由 cvn72lincoln 于 2011-5-16 21:59 编辑

avast! 6 kill Win32:Malware-gen

显示全部楼层 · 发表于 2011-5-16 22:15:42

目标: F:\360Downloads\FPATCL-crk.rar

结果: 发现 1 个恶意软件

Trojan.Generic.KDV.223262 (病毒)
F:\360Downloads\FPATCL-crk.rar\FPATCL-crk.exe

显示全部楼层 · 发表于 2011-5-17 01:06:37

MSE
PWS:Win32/Ldpinch

[可疑文件] FPATCL-crk.exe