查看: 3904|回复: 15
收起左侧

[病毒样本] 2014-07-01 #53

[复制链接]
malware1
发表于 2014-7-2 00:00:19 | 显示全部楼层 |阅读模式
本帖最后由 malware1 于 2014-7-2 00:14 编辑

http://kuai.xunlei.com/d/XLDoFN3zQNyyUwQA07b / https://mega.co.nz/#!vBhiwIpD!qc ... VaIxgffbpTJP2qoz5EU / http://www74.zippyshare.com/v/89075000/file.html

密码(7Z) infected

该文件已提交至:

Anvisoft
Avast
Avira
Baidu
BitDefender
Comodo
Dr.Web
Emsisoft
ESET
F-Prot
F-Secure
Fortinet
Ikarus
Immunet
K7
Kaspersky
Kompas
Malwarebytes
McAfee
Microsoft
Nano
Norman
Outpost
Panda
PCMAV
Qihoo 360
Quick Heal
Sophos
Spybot
Symantec
TotalDefense
Trend Micro
Twister
Vipre
VirIT
Xvirus
Zillya
fzshot
发表于 2014-7-2 00:40:55 | 显示全部楼层
本帖最后由 fzshot 于 2014-7-2 18:32 编辑

Dr.Web kill 41x Miss 12
Object(s) to scan:
- C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53


C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\amazon_order_invoice.pif - infected with Trojan.Siggen6.19987
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\amazon_order_invoice.pif - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\ayyee.exe - infected with Trojan.DownLoader11.10942
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\ayyee.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\c.exe - infected with Trojan.Siggen6.20019
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\c.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\chinco.exe - infected with Trojan.Winlock.11362
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\chinco.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Bein Sport.exe - infected with Trojan.AVKill.17790
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Bein Sport.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\crypted file don.exe - infected with Trojan.PWS.Panda.7504
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\crypted file don.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\BIN.exe - infected with Trojan.BtcMine.323
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\BIN.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\beet.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\b6.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Fax_30062014.scr - infected with Trojan.Hottrend.based
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Fax_30062014.scr - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\explorer.exe - infected with Trojan.Click3.8705
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\explorer.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\dokument 0503279005.xml.exe - infected with Trojan.Hottrend.based
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\dokument 0503279005.xml.exe - infected
>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Hardcore_Porn_Movie_82.mpeg.exe - packed by FLY-CODE
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\installer.exe - infected with BackDoor.Andromeda.22
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\installer.exe - infected
>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\crypted.exe is RAR archive
>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Bin(1).exe is RAR archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Habbo_Selfie_Voting_APP.exe - infected with BackDoor.Comet.884
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Habbo_Selfie_Voting_APP.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\IMOUT2.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\ijpQb.exe - infected with Trojan.DownLoader9.40808
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\ijpQb.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Bin(1).exe\BIN.exe - infected with Trojan.BtcMine.323
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Bin(1).exe\BIN.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Hardcore_Porn_Movie_82.mpeg.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\j7juj.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\lsass.exe - infected with Trojan.Winlock.11362
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\lsass.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\joiSy.exe - infected with BackDoor.Comet.884
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\joiSy.exe - infected
>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\lgm_payment_invoice.pif - packed by FLY-CODE
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\LuxNet900000009.exe - infected with Trojan.Keylog.640
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\LuxNet900000009.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\n.exe - is hacktool program Tool.PassView.849
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\n.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\n4.exe - infected with Trojan.Siggen6.20012
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\n4.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\mod.exe - infected with Trojan.AutoIt.92
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\mod.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Naughty pic for you baby.................................(1).exe - infected with Trojan.Siggen6.20014
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Naughty pic for you baby.................................(1).exe - infected
>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Item Gen.exe is RAR archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Naughty pic for you baby..................................exe - infected with Trojan.KeyLogger.25348
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Naughty pic for you baby..................................exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\My Nudes.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\ng(1).exe - infected with BackDoor.IRC.NgrBot.146
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\ng(1).exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Omegle.exe - infected with Trojan.DownLoader11.17129
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Omegle.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\OldschoolRs Duplication Bug By HaxUnit Tutorial 2014.exe - infected with BackDoor.Comet.884
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\OldschoolRs Duplication Bug By HaxUnit Tutorial 2014.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Item Gen.exe\ijpQb.exe - infected with Trojan.DownLoader9.40808
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Item Gen.exe\ijpQb.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Item Gen.exe - infected archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Item Gen.exe - infected archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\ng.exe - infected with Trojan.Siggen6.19986
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\ng.exe - infected
>>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\crypted.exe\nijEs.exe is AUTOIT container
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\order_id_783624782367842367846238751111.exe - infected with BackDoor.Tishop.122
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\order_id_783624782367842367846238751111.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\opp.exe - infected with Trojan.BtcMine.323
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\opp.exe - infected
>>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Bin(1).exe\odmWo.exe is AUTOIT container
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Output.file1.exe - infected with Trojan.Inject1.43560
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Output.file1.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\photo-541212.exe - infected with Trojan.DownLoader6.56876
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\photo-541212.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\testrun.doc - infected with W97M.DownLoader.33
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\testrun.doc - infected
>>>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Bin(1).exe\odmWo.exe\Users\MATTRO~1\AppData\Local\Temp\aut62C1.tmp - packed by ASCRIPT
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Purchase_Order.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\property listing and request.exe - Ok
>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Habbo Selfie Voting App(1).exe is AUTOIT container
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\sol.exe - infected with Trojan.Hottrend.355
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\sol.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\srrr.exe - infected with Trojan.DownLoader10.61159
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\srrr.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\sdvEt.exe - infected with Trojan.DownLoader10.45391
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\sdvEt.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\PO.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\testrunneer.exe - infected with BackDoor.Comet.884
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\testrunneer.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\tnummk.exe - infected with Trojan.PWS.Multi.911
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\tnummk.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\uuu.exe - infected with Trojan.DownLoader10.61159
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\uuu.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\win64.exe - infected with Trojan.Hottrend.355
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\win64.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Bin(1).exe\odmWo.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Bin(1).exe - infected archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Bin(1).exe - infected archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\win_update.exe - infected with BackDoor.Comet.884
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\win_update.exe - infected
>>>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\crypted.exe\nijEs.exe\Users\Rishabh\AppData\Local\Temp\aut63CE.tmp - packed by ASCRIPT
>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\VaporBooter.exe is RAR archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\VaporBooter.exe\joEDnAEoeJlD.PDB - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\crypted.exe\nijEs.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\crypted.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\crypted.exe - archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\VaporBooter.exe\XEXI.com - Ok
>>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Habbo Selfie Voting App(1).exe\Users\Daynaa\AppData\Local\Temp\aut6DF9.tmp - packed by ASCRIPT
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\VaporBooter.exe\OokxNTcPoy.MGV - infected with Trojan.MulDrop5.8889
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\VaporBooter.exe\OokxNTcPoy.MGV - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\VaporBooter.exe\AqLmNXvDo.PNW - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\VaporBooter.exe - infected archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\VaporBooter.exe - infected archive
>>>C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Habbo Selfie Voting App(1).exe\Users\Daynaa\AppData\Local\Temp\aut6DF9.tmp is JS-HTML container
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\Habbo Selfie Voting App(1).exe - container
C:\Users\PRODUCTION I.G\Desktop\2014-07-01_53\2014-07-01_53\lgm_payment_invoice.pif - Ok



Rest to Dr.Web
Original file name: beet.exe         Threat: Trojan.Betabot.3
Original file name: b6.exe         Threat: Trojan.PWS.Multi.1182
Original file name: crypted.exe         Threat: BackDoor.Spy.2450
Original file name: Habbo Selfie Voting App(1).exe         Threat: BackDoor.Comet.884
Original file name: Hardcore_Porn_Movie_82.mpeg.exe         Threat: Trojan.PWS.Panda.6755
Original file name: j7juj.exe         Threat: Trojan.Packed.28041
Original file name: IMOUT2.exe         Threat: BackDoor.Comet.1746
Original file name: My Nudes.exe         Threat: Trojan.DownLoader9.52537
Original file name: PO.exe         Threat: Trojan.Siggen4.20010
Original file name: lgm_payment_invoice.pif         Threat: Trojan.Betabot.3
Original file name: Purchase_Order.exe         Threat: Trojan.PWS.Stealer.13020
Original file name: property listing and request.exe         Threat: Trojan.Betabot.3

评分

参与人数 1人气 +1 收起 理由
挥泪斩情思 + 1 辛苦

查看全部评分

cn86li
发表于 2014-7-2 00:43:36 | 显示全部楼层
360IS KIll 50X

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
malware1
 楼主| 发表于 2014-7-2 02:16:52 | 显示全部楼层
fzshot 发表于 2014-7-2 00:40
Dr.Web kill 41x Miss 12

All files were already submitted by me

beet.exe - [drweb.com #4819503] - will be detected as Trojan.Betabot.3
b6.exe - [drweb.com #4820788] - will be detected as Trojan.PWS.Multi.1182
crypted.exe - [drweb.com #4820819] - will be detected as Trojan.Siggen6.20025
Habbo Selfie Voting App(1).exe - [drweb.com #4821136] - no reply yet
Hardcore_Porn_Movie_82.mpeg.exe - [drweb.com #4819637] - no reply yet
j7juj.exe - [drweb.com #4819501] - no reply yet
IMOUT2.exe - [drweb.com #4820669] - no reply yet
My Nudes.exe - [drweb.com #4821110] - no reply yet
PO.exe - [drweb.com #4821489] - no reply yet
lgm_payment_invoice.pif - [drweb.com #4821162] - no reply yet
Purchase_Order.exe - [drweb.com #4820873] - no reply yet
property listing and request.exe - [drweb.com #4820707] - no reply yet
malware1
 楼主| 发表于 2014-7-2 03:33:09 | 显示全部楼层
AhnLab V3 Internet Security
16/53
30.18%

Undetected files - submitted.
蓝天二号
发表于 2014-7-2 08:04:25 | 显示全部楼层
诺顿阻止:类别: 已解决的安全风险
日期和时间,风险,活动,状态,推荐的操作
2014/7/2 8:01:41,高,po.exe (Trojan.Zbot) 检测方 自动防护,已阻止,已解决 - 不需要操作
2014/7/2 8:01:37,高,order_id_783624782367842367846238751111.exe (Trojan.Smoaler) 检测方 自动防护,已阻止,已解决 - 不需要操作
2014/7/2 8:01:06,高,installer.exe (Trojan.Gen) 检测方 自动防护,已阻止,已解决 - 不需要操作
2014/7/2 8:00:56,高,dokument 0503279005.xml.exe (Trojan.FakeAV) 检测方 自动防护,已阻止,已解决 - 不需要操作
2014/7/2 8:00:49,高,win64.exe (Infostealer.Napolar) 检测方 自动防护,已阻止,已解决 - 不需要操作
2014/7/2 8:00:42,高,fax_30062014.scr (Backdoor.Trojan) 检测方 自动防护,已阻止,已解决 - 不需要操作
2014/7/2 8:00:40,高,amazon_order_invoice.pif (Trojan.Zbot) 检测方 自动防护,已阻止,已解决 - 不需要操作

蓝天二号
发表于 2014-7-2 08:05:08 | 显示全部楼层
Q管  30X

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
传说中的淘淘
发表于 2014-7-2 09:17:05 | 显示全部楼层
蜘蛛

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
xzkid
发表于 2014-7-2 09:59:35 | 显示全部楼层
火绒2.5还可以!!

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
fuzhk
发表于 2014-7-2 10:32:11 | 显示全部楼层
本帖最后由 fuzhk 于 2014-7-2 10:36 编辑

VSE规则杀了两个

剩余


D:\Program Files\360\360zip\360zip.exe        F:\INFECTED\2014-07-01_53\EXPLORER.EXE        防病毒标准保护:禁止伪装 Windows 进程        已阻止的操作: 创建
2014-7-2        10:29:32        已由访问保护规则禁止         PC0902-48809\Admin       
D:\Program Files\360\360zip\360zip.exe        F:\INFECTED\2014-07-01_53\LSASS.EXE        防病毒标准保护:禁止伪装 Windows 进程        已阻止的操作: 创建

2014-7-2        10:29:36        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\ayyee.exe        Artemis!1AF4C037D7CC (特洛伊)
2014-7-2        10:29:36        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\Bein Sport.exe        Artemis!84BA2F8E1E6E (特洛伊)
2014-7-2        10:29:36        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\amazon_order_invoice.pif        Artemis!38ADD1854118 (特洛伊)
2014-7-2        10:29:37        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\Bin(1).exe        Artemis!F86B00BE3693 (特洛伊)
2014-7-2        10:29:41        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\Fax_30062014.scr        Artemis!66DCF2E32AA9 (特洛伊)
2014-7-2        10:29:41        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\crypted file don.exe        Artemis!4EEAF99AF388 (特洛伊)
2014-7-2        10:29:41        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\b6.exe        Artemis!AFCCCAB7C02C (特洛伊)
2014-7-2        10:29:43        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\Habbo Selfie Voting App(1).exe        Artemis!34CD476E95B4 (特洛伊)
2014-7-2        10:29:44        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\chinco.exe        Artemis!87791A712BD0 (特洛伊)
2014-7-2        10:29:44        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\crypted.exe        Artemis!10A589FEF39B (特洛伊)
2014-7-2        10:29:45        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\dokument 0503279005.xml.exe        Artemis!043EEEC8F688 (特洛伊)
2014-7-2        10:29:45        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\Habbo_Selfie_Voting_APP.exe        Artemis!7DEF6A064479 (特洛伊)
2014-7-2        10:29:47        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\BIN.exe        Artemis!C36A10715234 (特洛伊)
2014-7-2        10:29:49        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\c.exe        Artemis!D92DB63958D7 (特洛伊)
2014-7-2        10:29:50        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\IMOUT2.exe        Artemis!785860E2377E (特洛伊)
2014-7-2        10:29:51        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\ijpQb.exe        Artemis!DEAEA7462E9A (特洛伊)
2014-7-2        10:29:51        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\installer.exe        Artemis!DC575D181019 (特洛伊)
2014-7-2        10:29:52        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\Item Gen.exe        Artemis!4E98B212A6D9 (特洛伊)
2014-7-2        10:29:53        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\Hardcore_Porn_Movie_82.mpeg.exe        Artemis!519332C5A31E (特洛伊)
2014-7-2        10:29:54        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\LuxNet900000009.exe        Artemis!6113C5B27FD1 (特洛伊)
2014-7-2        10:29:54        已删除         PC0902-48809\Admin        C:\WINDOWS\Explorer.EXE        F:\infected\2014-07-01_53\uuu.exe        Artemis!C67D2A38FB42 (特洛伊)
2014-7-2        10:29:57        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\mod.exe        Artemis!FCF1EFDF7DA7 (可能有害的程序)
2014-7-2        10:29:57        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\n.exe        Artemis!A7C954214F34 (特洛伊)
2014-7-2        10:29:57        已删除         PC0902-48809\Admin        C:\WINDOWS\Explorer.EXE        F:\infected\2014-07-01_53\testrunneer.exe        Artemis!F78DAC2B681F (特洛伊)
2014-7-2        10:29:58        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\Naughty pic for you baby.................................(1).exe        Artemis!EE42D4F2C4DE (特洛伊)
2014-7-2        10:29:59        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\ng(1).exe        Artemis!D2C175C5DFD3 (病毒)
2014-7-2        10:29:59        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\Omegle.exe        Artemis!19E0D60A2E8A (特洛伊)
2014-7-2        10:30:00        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\opp.exe        Artemis!F71307877F7E (特洛伊)
2014-7-2        10:30:01        已删除         PC0902-48809\Admin        C:\WINDOWS\Explorer.EXE        F:\infected\2014-07-01_53\srrr.exe        Artemis!496DDC16130E (特洛伊)
2014-7-2        10:30:01        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\Output.file1.exe        Artemis!85A7B22DF133 (特洛伊)
2014-7-2        10:30:03        已删除         PC0902-48809\Admin        C:\WINDOWS\Explorer.EXE        F:\infected\2014-07-01_53\sdvEt.exe        RDN/Generic.dx!ddm (特洛伊)
2014-7-2        10:30:03        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\OldschoolRs Duplication Bug By HaxUnit Tutorial 2014.exe        Artemis!98719596E37B (特洛伊)
2014-7-2        10:30:03        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\joiSy.exe        Artemis!BAC0EAEFD792 (特洛伊)
2014-7-2        10:30:03        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\Naughty pic for you baby..................................exe        Artemis!0447A13E5283 (特洛伊)
2014-7-2        10:30:04        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\ng.exe        Artemis!5369B4B9FB2E (病毒)
2014-7-2        10:30:04        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\order_id_783624782367842367846238751111.exe        Artemis!C31F54BB78D5 (特洛伊)
2014-7-2        10:30:07        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\win64.exe        Trojan-FDFI!BA2B7206FF5E (特洛伊)
2014-7-2        10:30:09        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\PO.exe        Artemis!977F9BD40787 (特洛伊)
2014-7-2        10:30:10        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\win_update.exe        Artemis!3F2856B711A5 (特洛伊)
2014-7-2        10:30:13        已删除         PC0902-48809\Admin        D:\Program Files\360\360zip\360zip.exe        F:\infected\2014-07-01_53\photo-541212.exe        Artemis!D2CC5DC22DD0 (特洛伊)

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-9-18 05:48 , Processed in 0.132111 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表