1.exe

xu3160668

BD   atc拦截    链接: http://pan.baidu.com/s/1kVPULYf 密码: ktqy

pal家族

百度云分享exe
还得存下来打开客户端才能下载。不测了。。。。

xu3160668

pal家族 发表于 2017-1-7 20:31
百度云分享exe
还得存下来打开客户端才能下载。不测了。。。。

已更改

钓喵的鱼

avast秒拦

fireherman

ESET blocked [killed]

pal家族

啊 某某的私fu客户端吧？
需要提醒你，这种东西90%夹带一些具有广告推广功能的驱动，删掉还有，很难以杀除

xu3160668

pal家族 发表于 2017-1-7 20:58
啊 某某的私fu客户端吧？
需要提醒你，这种东西90%夹带一些具有广告推广功能的驱动，删掉还有，很难以杀除

应该是外{过}{滤}挂  应该很多都能杀了  BD没入库  不过ATC拦截了

pal家族

该文件已经不可用，提示下载新版，下载下来一个220k的exe
实测为流氓推广。
至少安装快压和瑞星
快压的加驱行为被卡巴拦截，疯狂回滚。。。。

07.01.2017 21.07.49;Detected object (process memory) cannot be disinfected;d:\360安全浏览器下载\notudilbchlieieb.exe;d:\360安全浏览器下载\notudilbchlieieb.exe;PDM:Suspicious.Driver.Installation.a;Legitimate software that can be used by criminals to damage your computer or personal data;01/07/2017 21:07:49
07.01.2017 21.07.45;Detected object (file) will be processed after computer restart;c:\windows\system32\drivers\kuaizipdrive.sys;c:\windows\system32\drivers\kuaizipdrive.sys;01/07/2017 21:07:45
07.01.2017 21.06.45;Detected object (file) will be processed after computer restart;c:\program files\快压\x86\kuaizipupdatechecker.dll;c:\program files\快压\x86\kuaizipupdatechecker.dll;01/07/2017 21:06:45

整个快压被回滚了。。。。。。

07.01.2017 21.04.06;File deleted when rolling back actions of detected object.;c:\program files\快压\x64\7z.dll;c:\program files\快压\x64\7z.dll;01/07/2017 21:04:06
07.01.2017 21.04.06;File deleted when rolling back actions of detected object.;c:\program files\快压\x64\kuaizipdrive.sys;c:\program files\快压\x64\kuaizipdrive.sys;01/07/2017 21:04:06
07.01.2017 21.04.06;File deleted when rolling back actions of detected object.;c:\program files\快压\x64\kzformat.dll;c:\program files\快压\x64\kzformat.dll;01/07/2017 21:04:06
07.01.2017 21.04.06;File deleted when rolling back actions of detected object.;c:\program files\快压\x64\kzipshell.dll;c:\program files\快压\x64\kzipshell.dll;01/07/2017 21:04:06
07.01.2017 21.04.07;File deleted when rolling back actions of detected object.;c:\program files\快压\x64\kzmodule.dll;c:\program files\快压\x64\kzmodule.dll;01/07/2017 21:04:07
07.01.2017 21.04.15;File deleted when rolling back actions of detected object.;c:\program files\快压\x64\lang\chs_lang.dll;c:\program files\快压\x64\lang\chs_lang.dll;01/07/2017 21:04:15
07.01.2017 21.04.19;File deleted when rolling back actions of detected object.;c:\program files\快压\x64\mount.dll;c:\program files\快压\x64\mount.dll;01/07/2017 21:04:19
07.01.2017 21.04.19;File deleted when rolling back actions of detected object.;c:\program files\快压\x64\mountcore.dll;c:\program files\快压\x64\mountcore.dll;01/07/2017 21:04:19
07.01.2017 21.04.19;File deleted when rolling back actions of detected object.;c:\program files\快压\x64\setuphelper.exe;c:\program files\快压\x64\setuphelper.exe;01/07/2017 21:04:19
07.01.2017 21.04.19;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\7z.dll;c:\program files\快压\x86\7z.dll;01/07/2017 21:04:19
07.01.2017 21.04.19;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\diskopt.exe;c:\program files\快压\x86\diskopt.exe;01/07/2017 21:04:19
07.01.2017 21.04.20;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\duilib.dll;c:\program files\快压\x86\duilib.dll;01/07/2017 21:04:20
07.01.2017 21.04.20;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\finderlib.dll;c:\program files\快压\x86\finderlib.dll;01/07/2017 21:04:20
07.01.2017 21.04.23;File deleted when rolling back actions of detected object.;C:\Users\xzz\Desktop\快压.lnk;C:\Users\xzz\Desktop\快压.lnk;01/07/2017 21:04:23
07.01.2017 21.04.23;File deleted when rolling back actions of detected object.;C:\Users\xzz\AppData\Roaming\Microsoft\Windows\Start Menu\快压.lnk;C:\Users\xzz\AppData\Roaming\Microsoft\Windows\Start Menu\快压.lnk;01/07/2017 21:04:23
07.01.2017 21.04.23;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\kuaizip.exe;c:\program files\快压\x86\kuaizip.exe;01/07/2017 21:04:23
07.01.2017 21.04.26;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\kzformat.dll;c:\program files\快压\x86\kzformat.dll;01/07/2017 21:04:26
07.01.2017 21.04.27;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\kzmodule.dll;c:\program files\快压\x86\kzmodule.dll;01/07/2017 21:04:27
07.01.2017 21.04.27;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\kzreport.exe;c:\program files\快压\x86\kzreport.exe;01/07/2017 21:04:27
07.01.2017 21.04.27;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\kztui.exe;c:\program files\快压\x86\kztui.exe;01/07/2017 21:04:27
07.01.2017 21.04.27;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\lang\chs_lang.dll;c:\program files\快压\x86\lang\chs_lang.dll;01/07/2017 21:04:27
07.01.2017 21.04.27;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\mount.dll;c:\program files\快压\x86\mount.dll;01/07/2017 21:04:27
07.01.2017 21.04.27;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\mountcore.dll;c:\program files\快压\x86\mountcore.dll;01/07/2017 21:04:27
07.01.2017 21.04.28;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\setuphelper.exe;c:\program files\快压\x86\setuphelper.exe;01/07/2017 21:04:28
07.01.2017 21.04.28;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\sfx\kzsetup_chs.sfx;c:\program files\快压\x86\sfx\kzsetup_chs.sfx;01/07/2017 21:04:28
07.01.2017 21.04.28;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\uninst.exe;c:\program files\快压\x86\uninst.exe;01/07/2017 21:04:28
07.01.2017 21.04.28;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\update.exe;c:\program files\快压\x86\update.exe;01/07/2017 21:04:28
07.01.2017 21.04.28;File deleted when rolling back actions of detected object.;c:\program files\快压\x86\updatechecker.exe;c:\program files\快压\x86\updatechecker.exe;01/07/2017 21:04:28
07.01.2017 21.04.28;File deleted when rolling back actions of detected object.;c:\users\xzz\appdata\local\microsoft\windows\inetcache\ie\l3j764mi\55902abv_1202000632[1].exe;c:\users\xzz\appdata\local\microsoft\windows\inetcache\ie\l3j764mi\55902abv_1202000632[1].exe;01/07/2017 21:04:28
07.01.2017 21.04.29;File deleted when rolling back actions of detected object.;c:\users\xzz\appdata\local\microsoft\windows\inetcache\ie\li85gk01\rav3490022[1].exe;c:\users\xzz\appdata\local\microsoft\windows\inetcache\ie\li85gk01\rav3490022[1].exe;01/07/2017 21:04:29
07.01.2017 21.04.29;File deleted when rolling back actions of detected object.;c:\users\xzz\appdata\local\microsoft\windows\inetcache\ie\q7ypfajp\kuaizip_setup_-957132086_liuyy_001[1].exe;c:\users\xzz\appdata\local\microsoft\windows\inetcache\ie\q7ypfajp\kuaizip_setup_-957132086_liuyy_001[1].exe;01/07/2017 21:04:29
07.01.2017 21.04.33;File deleted when rolling back actions of detected object.;c:\users\xzz\appdata\local\temp\nss882d.tmp\55902abv_1202000632.exe;c:\users\xzz\appdata\local\temp\nss882d.tmp\55902abv_1202000632.exe;01/07/2017 21:04:33
07.01.2017 21.04.37;Registry value deleted when rolling back actions of detected object.;HKLM\System\ControlSet001\Services\KuaiZipDrive\KuaiZipDrive;HKLM\System\ControlSet001\Services\KuaiZipDrive\KuaiZipDrive;01/07/2017 21:04:37
07.01.2017 21.07.28;File deleted when rolling back actions of detected object.;c:\users\xzz\appdata\roaming\microsoft\windows\start menu\快压.lnk;c:\users\xzz\appdata\roaming\microsoft\windows\start menu\快压.lnk;01/07/2017 21:07:28
07.01.2017 21.07.28;File deleted when rolling back actions of detected object.;c:\users\xzz\desktop\快压.lnk;c:\users\xzz\desktop\快压.lnk;01/07/2017 21:07:28
07.01.2017 21.07.41;File deleted when rolling back actions of detected object.;c:\users\xzz\appdata\roaming\microsoft\windows\start menu\快压.lnk;c:\users\xzz\appdata\roaming\microsoft\windows\start menu\快压.lnk;01/07/2017 21:07:41
07.01.2017 21.07.41;File deleted when rolling back actions of detected object.;c:\users\xzz\desktop\快压.lnk;c:\users\xzz\desktop\快压.lnk;01/07/2017 21:07:41

xu3160668

pal家族 发表于 2017-1-7 21:13
该文件已经不可用，提示下载新版，下载下来一个220k的exe
实测为流氓推广。
至少安装快压和瑞星

真够流氓！

Eset小粉絲

Avira Miss