fake alert 下載的病毒，CIMA 沒反應

显示全部楼层 · 发表于 2011-6-1 21:44:20

本帖最后由 a256886572008 于 2011-6-1 22:39 编辑

Obj.exe

2011-06-01 21:20:07 C:\WINDOWS\explorer.exe Create Process, Block File C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obj.exe

2011-06-01 21:20:09 C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obj.exe Sandboxed As Partially Limited

2011-06-01 21:20:11 C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obj.exe Modify File C:\WINDOWS\system32\sshnas21.dll

2011-06-01 21:20:11 C:\Documents and Settings\Roger\Local Settings\Temp\sshnas21.dll Sandboxed As Partially Limited

2011-06-01 21:20:17 C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obj.exe Modify Key HKLM\SYSTEM\ControlSet001\Services\SSHNAS

2011-06-01 21:20:17 C:\Documents and Settings\Roger\Local Settings\Temp\sshnas21.dll Access Memory System

Obk.exe

2011-06-01 21:24:36 C:\WINDOWS\explorer.exe Create Process, Block File, Suspicious C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obk.exe

2011-06-01 21:24:38 C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obk.exe Sandboxed As Partially Limited

2011-06-01 21:24:41 C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obk.exe Modify File C:\WINDOWS\Tasks\{810401E2-DDE0-454e-B0E2-AA89C9E5967C}.job

2011-06-01 21:25:06 C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obk.exe Modify Key HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\

2011-06-01 21:25:20 C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obk.exe Modify Key HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable

Obl.exe

2011-06-01 21:31:50 C:\WINDOWS\explorer.exe Create Process, Block File, Suspicious C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obl.exe

2011-06-01 21:31:54 C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obl.exe Sandboxed As Partially Limited

2011-06-01 21:31:58 C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obl.exe Access COM Interface, Suspicious Shell.Explorer.2

2011-06-01 21:32:14 C:\Documents and Settings\Roger\桌面\VIRUS\New-Video-Addon.48563\Obl.exe Modify Key HKUS\S-1-5-21-1214440339-1682526488-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Run\YDZ1QVAGOJ

點了允許，comodo還是照樣阻止。
感覺comodo跳這框詢問，有點多餘

显示全部楼层 · 发表于 2011-6-1 21:50:24

这个感觉不是毒吧……

显示全部楼层 · 发表于 2011-6-1 22:23:24

大蜘蛛miss

显示全部楼层 · 发表于 2011-6-1 22:29:31

诺顿不报

显示全部楼层 · 发表于 2011-6-1 22:33:03

微点报毒

显示全部楼层 · 发表于 2011-6-1 22:42:31

金山报毒

显示全部楼层 · 发表于 2011-6-1 23:07:34

360网盾报毒

显示全部楼层 · 发表于 2011-6-2 01:18:41

红伞没有反应

显示全部楼层 · 发表于 2011-6-2 06:01:47

金山，360SD ALL KILL

显示全部楼层 · 发表于 2011-6-2 06:10:57

本帖最后由 a256886572008 于 2011-6-2 06:11 编辑

comodo 云查杀

2011-06-02 05:59:54 c:\documents and settings\roger\桌面\virus\new-video-addon.48563\obj.exe TrojWare.Win32.Agent.~dfv@1

2011-06-02 06:01:03 c:\documents and settings\roger\local settings\temp\sshnas21.dll TrojWare.Win32.Agent.~dfa@1

2011-06-02 06:01:07 c:\documents and settings\roger\桌面\virus\new-video-addon.48563\obk.exe TrojWare.Win32.Agent.~gdb@1

2011-06-02 06:01:10 c:\documents and settings\roger\桌面\virus\new-video-addon.48563\obl.exe TrojWare.Win32.Agent.~dfs@1

[病毒样本] fake alert 下載的病毒，CIMA 沒反應

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块