Detection ratio: 3 / 55

墨家小子

SHA256:        76de9c760f5529e6e52a71c681dfef7a46b86f407cd979a0e1ea1026ba69d3da
File name:        73.exe
Detection ratio:        3 / 55
Analysis date:        2015-11-29 03:38:52 UTC ( 1 minute ago )
https://www.virustotal.com/en/fi ... nalysis/1448768332/



2015/11/29 11:40:03,C:\Users\AAAAA\AppData\Roaming\ppecg-a.exe,53,Blocked ;执行应用程序 (bcdedit.exe /set {current} bootems off)
2015/11/29 11:40:08,C:\Users\AAAAA\AppData\Roaming\ppecg-a.exe,53,Terminated ;执行应用程序 (bcdedit.exe /set {current} advancedoptions off)

pal家族

卡巴关闭云双击!
主防拦截！
[mw_shl_code=css,true]29.11.2015 13.43.35;检测到的对象 ( 处理内存 ) 已删除。;c:\users\yingzhi\appdata\roaming\myedm-a.exe;c:\users\yingzhi\appdata\roaming\myedm-a.exe;;未知威胁;11/29/2015 13:43:35
29.11.2015 13.43.36;检测到的对象 ( 处理内存 ) 已删除。;c:\users\yingzhi\desktop\73.exe;c:\users\yingzhi\desktop\73.exe;PDM:Trojan.Win32.Generic;其它恶意软件;11/29/2015 13:43:36
[/mw_shl_code]

回滚
[mw_shl_code=css,true]29.11.2015 13.43.57;回滚恶意程序的操作时注册表键值被恢复;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;C:\Users\yingzhi\Desktop\73.exe;c:\users\yingzhi\desktop\73.exe;11/29/2015 13:43:57
29.11.2015 13.43.57;回滚恶意程序的操作时注册表键值被恢复;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;C:\Users\yingzhi\AppData\Roaming\myedm-a.exe;c:\users\yingzhi\desktop\73.exe;11/29/2015 13:43:57
29.11.2015 13.43.57;回滚恶意程序的操作时注册表键值被恢复;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;C:\Users\yingzhi\AppData\Roaming\myedm-a.exe;c:\users\yingzhi\desktop\73.exe;11/29/2015 13:43:57
29.11.2015 13.43.57;回滚恶意程序的操作时注册表键值被恢复;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;C:\Users\yingzhi\Desktop\73.exe;c:\users\yingzhi\desktop\73.exe;11/29/2015 13:43:57
[/mw_shl_code]

pal家族

Kaspersky
29.11.2015 11.50.32;检测到的对象（文件）已删除。;D:\360安全浏览器下载\73\73.exe;
UDS:DangerousObject.Multi.Generic;未知威胁;11/29/2015 11:50:32

送信Y

不指望管家能扫出来

SIOAEN

我这段时间胆儿比较肥，数字卫士和avira扫描没结果，我就双击，实机下双击。

xyz0703

BD ATC

wjy19800315

eset监控杀

230f4

xyz0703 发表于 2015-11-29 12:06
BD ATC

是不是会出现一种快感
随着双击次数的增加，见一个就想双击一个

yzt1004

安利一下俺的Emsisoft 汉化：





最后一图没有汉化，我这就去补上

墨家小子

yzt1004 发表于 2015-11-29 12:16
安利一下俺的Emsisoft 汉化：

回头补RQ

Yuri1st