45X

挥泪斩情思

链接: http://pan.baidu.com/s/1sjlX1uP

密码: 8ldt

欧阳宣

"E:\test\virus\HUGE\45X\db0833bbdf05366179475429fb48346a.exe"        "Artemis!DB0833BBDF05"
9/26/2014        11:33:26 AM        "E:\test\virus\HUGE\45X\139aded90404e7566d4ece8ba1ba43aa.exe"        "Generic-FAUZ!139ADED90404"        "2"

9/26/2014        11:33:27 AM        "E:\test\virus\HUGE\45X\6d098384306409d86d74463f07f1ae73.exe"        "RDN/Generic.dx!dfb"        "2"

9/26/2014        11:33:27 AM        "E:\test\virus\HUGE\45X\5e11f39501bc972d8c253b78147a8598.exe"        "RDN/Generic.bfr!hp"        "2"

9/26/2014        11:33:27 AM        "E:\test\virus\HUGE\45X\5cb43bf4b7e5329caa8d51f59f8774d5.exe"        "Ransom-FMM!5CB43BF4B7E5"        "2"

9/26/2014        11:33:27 AM        "E:\test\virus\HUGE\45X\61219e5e27d46bf56053d35771cf8ac1.exe"        "Ransom-FMQ!61219E5E27D4"        "2"

9/26/2014        11:33:27 AM        "E:\test\virus\HUGE\45X\10d3c80cd58214bdb6f8a7cd38b058a1.exe"        "RDN/Generic BackDoor!zp"        "2"

9/26/2014        11:33:27 AM        "E:\test\virus\HUGE\45X\7fd9c2ad0cc6d7a466485880c6abb8bf.exe"        "Ransom-FMQ!7FD9C2AD0CC6"        "2"

9/26/2014        11:33:28 AM        "E:\test\virus\HUGE\45X\278814ba71a45188b6c0bf6debfb7ac8.exe"        "RDN/Generic BackDoor!zp"        "2"

9/26/2014        11:33:28 AM        "E:\test\virus\HUGE\45X\7497c979d01b3591de8ca6afc15a1be5.exe"        "RDN/Generic BackDoor!zo"        "2"

9/26/2014        11:33:28 AM        "E:\test\virus\HUGE\45X\84fde54784be809a83b6f378d5d5e471.exe"        "Ransom-FMN!84FDE54784BE"        "2"

9/26/2014        11:33:28 AM        "E:\test\virus\HUGE\45X\08600973b59503dd6a6671948dc58dbf.exe"        "RDN/Generic Downloader.x!kw"        "2"

9/26/2014        11:33:28 AM        "E:\test\virus\HUGE\45X\882f3d8d04e6c77376a101561b7d3c75.exe"        "Ransom-FMN!882F3D8D04E6"        "2"

9/26/2014        11:33:28 AM        "E:\test\virus\HUGE\45X\29861335d8a9b0111bb53a70d189d0cb.exe"        "Ransom-FMQ!29861335D8A9"        "2"

9/26/2014        11:33:29 AM        "E:\test\virus\HUGE\45X\6ae8e3639780443d6abac14674523ab6.exe"        "RDN/Downloader.a!sv"        "2"

9/26/2014        11:33:29 AM        "E:\test\virus\HUGE\45X\5a1a76f5d6652816ec4bcb7cabead9a4.exe"        "RDN/Generic BackDoor!zp"        "2"

9/26/2014        11:33:29 AM        "E:\test\virus\HUGE\45X\9541b222ee10fdf31fc57c4d8847096e.exe"        "Packed-CH!9541B222EE10"        "2"

9/26/2014        11:33:29 AM        "E:\test\virus\HUGE\45X\15aac82e279f96b16e47f6c6f5c2f725.exe"        "Ransom-FMS!15AAC82E279F"        "2"

9/26/2014        11:33:29 AM        "E:\test\virus\HUGE\45X\347aa6563b3b69bca0ddf71aac21dac2.exe"        "RDN/Generic BackDoor!zp"        "2"

9/26/2014        11:33:30 AM        "E:\test\virus\HUGE\45X\4179d480dac4ddc4465f297fce93f941.exe"        "BackDoor-FBOB!4179D480DAC4"        "2"

9/26/2014        11:33:30 AM        "E:\test\virus\HUGE\45X\3b17ef0bf353617557211dde3b8903a9.exe"        "Ransom-FMN!3B17EF0BF353"        "2"

9/26/2014        11:33:30 AM        "E:\test\virus\HUGE\45X\8abf79d66e2a8969b34496ecf5f81aee.exe"        "RDN/Spybot.bfr!n"        "1"

9/26/2014        11:33:30 AM        "E:\test\virus\HUGE\45X\192ada8ded31645f8c54e96e793417cb.exe"        "RDN/Generic.bfr!hp"        "2"

9/26/2014        11:33:30 AM        "E:\test\virus\HUGE\45X\166947acf0e9f45c7bf5945ecb94cf38.exe"        "Ransom-FMN!166947ACF0E9"        "2"

9/26/2014        11:33:31 AM        "E:\test\virus\HUGE\45X\262310fd04bfde4d6128b2edb133c81e.exe"        "RDN/Generic.bfr!hp"        "2"

9/26/2014        11:33:41 AM        "E:\test\virus\HUGE\45X\e6d83128c82968d936bf489a3a9ff015.exe"        "RDN/Generic BackDoor!zp"        "2"

9/26/2014        11:33:41 AM        "E:\test\virus\HUGE\45X\fd3d9cb2162ced9d29e7e4de9e16007c.exe"        "RDN/Generic PWS.y!b2x"        "2"

9/26/2014        11:33:42 AM        "E:\test\virus\HUGE\45X\9fef822c10e621b5365317c22961c794.exe"        "Generic.so"        "2"

9/26/2014        11:33:42 AM        "E:\test\virus\HUGE\45X\99f7aea316dece629041e7774d3728cc.exe"        "RDN/Generic.bfr!hq"        "2"

9/26/2014        11:33:42 AM        "E:\test\virus\HUGE\45X\b94bcdd0d7218ef1777b0b2fb9344312.exe"        "RDN/Generic.bfr!hp"        "2"

9/26/2014        11:33:42 AM        "E:\test\virus\HUGE\45X\9ec7a3823d8f218b37e1b4c98c17b8e4.exe"        "RDN/Generic.dx!d2y"        "2"

9/26/2014        11:33:42 AM        "E:\test\virus\HUGE\45X\aa97c611c07a1095b42873d4e1addfd5.exe"        "Exploit-PDF.bo.gen"        "2"

9/26/2014        11:33:43 AM        "E:\test\virus\HUGE\45X\f88bd3dfe9fda07796a2c1ebf909b7a4.exe"        "Ransom-FMS!F88BD3DFE9FD"        "2"

9/26/2014        11:33:43 AM        "E:\test\virus\HUGE\45X\d813f7129e47df6ca0cc9d59789efaf3.exe"        "Generic.tm"        "2"

9/26/2014        11:33:43 AM        "E:\test\virus\HUGE\45X\d86f9d7b570422b5020277cbefdd08f0.exe"        "RDN/Generic.dx!d2z"        "2"

9/26/2014        11:33:43 AM        "E:\test\virus\HUGE\45X\b6b3539df642d3075f5d3d363fca1c9a.exe"        "RDN/Generic BackDoor!zp"        "2"

9/26/2014        11:33:43 AM        "E:\test\virus\HUGE\45X\ce8a4d503137624e983f8a536b24ab8e.exe"        "RDN/Generic Dropper!vc"        "2"

9/26/2014        11:33:43 AM        "E:\test\virus\HUGE\45X\9e3f4977c06030c5bb014e62a3421fe7.exe"        "RDN/Generic.bfr!hq"        "2"

9/26/2014        11:33:44 AM        "E:\test\virus\HUGE\45X\b010a2968bc48e0737dd186c90c5e922.exe"        "Ransom-FMQ!B010A2968BC4"        "2"

9/26/2014        11:33:44 AM        "E:\test\virus\HUGE\45X\c262963e573b9bd0a63bedf88daaaf1e.exe"        "Generic-FAUW!C262963E573B"        "2"

9/26/2014        11:33:44 AM        "E:\test\virus\HUGE\45X\9f6d6e5d6c62c441b49547ce3fad75bd.exe"        "RDN/Generic PWS.y!b2x"        "2"

9/26/2014        11:33:44 AM        "E:\test\virus\HUGE\45X\a33cd9a208a7056996c0e69e1c353036.exe"        "Ransom-FMQ!A33CD9A208A7"        "2"

9/26/2014        11:33:44 AM        "E:\test\virus\HUGE\45X\c619cdf28955bbd606872a4f41bb2d23.exe"        "RDN/Generic.dx!d2z"        "2"

9/26/2014        11:33:45 AM        "E:\test\virus\HUGE\45X\97267af0e4e5fd0feee83fd183daa698.exe"        "RDN/Generic PWS.y!b2x"        "2"
剩余一个。
"G:\9d02932eb16b2f23be19921311331f87.exe"        "Artemis!9D02932EB16B"
哈最后一个也干掉了

墨家小子

这个比较牛逼

启动vbc.exe，OP没有提示，然后VBC.EXE就开始键盘记录，接着马上联网，第二步OP拦截不到键盘记录，第三步很容易就放行联网

11:34:20        Allow        5A1A76F5D6652816EC4BCB7CABEAD9A4.EXE        Network-enabled

application launch        c:\windows\microsoft.net\framework\v2.0.50727\vbc.exe

11:35:09        Block        VBC.EXE        Keylogger        Setting keyboard hook

11:36:44        VBC.EXE        OUT        TCP        193.0.200.188        2124        *Allow Outbound TCP to

2124 for VBC.EXE        151        5493
11:36:28        VBC.EXE        OUT        TCP        193.0.200.188        2124        *Allow Outbound TCP to

2124 for VBC.EXE        147        1398
11:35:57        VBC.EXE        OUT        TCP        193.0.200.188        2124        *Allow Outbound TCP to

2124 for VBC.EXE        684        508

XywCloud

除掉1个PDF文件
Baidu Antivirus清空。

skyboybone

金山云引擎43

amd123

eam  48kill  好压45kill

b573684723

好压EAVKILL ALL

火绒扫描KILL 43X

Luca.l

刚下载AVG拦截44个

右键

心痛的伤不起

费尔加金山卫士剩6x

a15073324542

简直不能忍..
BDIS解压出来剩2.沙盘运行,其中一个不是可执行,一个BD不管.
手动扫描又全杀了