木马一枚

显示全部楼层 · 发表于 2016-12-27 20:52:42

https://habo.qq.com/file/showdetail?pk=ADYGYF1vB2MIP1s8

显示全部楼层 · 发表于 2016-12-27 21:02:58

本帖最后由 ELOHIM 于 2016-12-27 21:07 编辑

但是微软提示为后门程序了。

Backdoor:Win32/Zegost.BW
—————————————
Threat behavior

Backdoor:Win32/Zegost.BW is a trojan that allows unauthorized access and control of an affected computer.

Installation

Backdoor:Win32/Zegost.BW copies itself to %windir%\pcbrcm.exe.

Payload

Allows backdoor access and control

Backdoor:Win32/Zegost.BW gives a hacker access and control of your PC. They can then perform a number of different actions, including:

Downloading and running files
Uploading files
Spreading malware to other PCs
Logging your keystrokes or stealing your sensitive data
Modifying your system settings
Running or stopping applications
Deleting files

显示全部楼层 · 发表于 2016-12-27 21:05:09

毒霸扫描miss

显示全部楼层 · 发表于 2016-12-27 21:09:12

Avira 和微軟一樣報後門
[mw_shl_code=css,true]
Type: File
Source: C:\Users\Downloads\850lobby.exe
Status: Infected
Quarantine object: 08f89649.qua
Restored: NO
Uploaded to Avira: NO
Operating system: Windows XP/VISTA Workstation/Windows 7
Search engine: 8.03.42.114
Virus definition file: 8.12.143.90
Detection: BDS/Zegost.c31d19 (Cloud)
Date/Time: 27/12/2016, 21:07[/mw_shl_code]

显示全部楼层 · 发表于 2016-12-27 21:45:30

本帖最后由 347636681 于 2016-12-27 21:51 编辑

AVG杀

显示全部楼层 · 发表于 2016-12-27 21:49:16

BDTS2017：Gen:Variant.Symmi.64707.

显示全部楼层 · 发表于 2016-12-27 22:11:34

sep B kill

显示全部楼层 · 发表于 2016-12-27 22:17:41

ka ba

850lobby.exe - Trojan.Win32.Dialer.azcg

显示全部楼层 · 发表于 2016-12-28 00:31:56

网站已屏蔽！

G DATA 互联网安全套装已阻止访问此网站。
该站点包含被感染的代码：Gen:Variant.Symmi.64707 (引擎A)。

显示全部楼层 · 发表于 2016-12-28 00:37:23

Bitdefender blocked this page
The page you are trying to access contains Gen:Variant.Symmi.64707.

Take me back to safety
I understand the risks, take me there anyway

[病毒样本] 木马一枚

本帖子中包含更多资源

本帖子中包含更多资源