infected.1

显示全部楼层 · 发表于 2017-6-22 06:11:20

微步

显示全部楼层 · 发表于 2017-6-22 07:39:49

毒霸扫描miss

显示全部楼层 · 发表于 2017-6-22 08:15:22

显示全部楼层 · 发表于 2017-6-22 09:22:00

微点拦截

显示全部楼层 · 发表于 2017-6-22 09:43:29

BD：Trojan.GenericKD.4949859

显示全部楼层 · 发表于 2017-6-22 10:04:07

显示全部楼层 · 发表于 2017-6-22 10:16:36

诺顿杀

显示全部楼层 · 发表于 2017-6-22 12:25:48

ESET KILL

显示全部楼层 · 发表于 2017-6-22 12:39:03

火绒miss

显示全部楼层 · 发表于 2017-6-22 15:41:28

AVA 25.12983
GD 25.9828

*** Process ***

Process: 7988
File name: start_page.exe
Path: d:\360极速浏览器下载\start_page\start_page.exe

Publisher: Unknown publisher
Creation date: 2017年6月22日 15:41:27
Modification date: 2017年6月22日 6:04:53

Started by: Explorer.EXE
Publisher: Microsoft Windows

*** Actions ***

The virus scanner has detected that the file is malicious.
The program is trying to create a startup item to launch a program automatically at system startup.

*** Quarantine ***

The following files were moved into quarantine:
D:\360极速浏览器下载\start_page\start_page.exe

The following registry entries were deleted:

\registry\user\s-1-5-21-1908538735-2356423330-182712670-500\software\microsoft\windows\currentversion\runonce || izgyqutzym

YHLiwHJycnJiYvBycnJyYmJwKnRyQicnJga3cnJycmJikCsnCdlycnCqcnJycmJicLrykV1jtoLykV1jtoJiYnCOcrJwj3KCAAA
Rules version: 5.0.147
OS: Windows 10.0 Service Pack 0.0 Build: 14393 - Workstation 64bit OS
dll version: 68091

"D:\360极速浏览器下载\start_page\start_page.exe"
MD5: B024717D8DA278335BC45003D51CC2AE
C:\windows\Explorer.EXE
MD5: 679D17F8CDB938C7100D7A647953677E

[病毒样本] infected.1

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源