貌似锁硬盘一枚！！！切勿双击！

wenshui1013

链接: http://pan.baidu.com/s/1qWBbemK 密码: tjq4

运行后的图片：

本贴转自吾爱。再次强调：切勿双击。。双击（如果防不住）后果估计很严重。

流年在消逝

eset kill

XywCloud

bav不杀

wenshui1013

XywCloud 发表于 2014-8-15 17:56
bav不杀

敢不敢双击？？？

利刀1937

过360.。

寒山竹语

ie就把它咔嚓了

一路风雨

下载时，avast信誉云，建议种植连接

XywCloud

wenshui1013 发表于 2014-8-15 17:57
敢不敢双击？？？

没时间折腾。

tony223322

360 HIPS (按下230按钮后杀)
SONAR MISS
virtual total: https://www.virustotal.com/en/fi ... nalysis/1408098392/
HABO: http://tav.qq.com/habo/file/showdetail?pk=ADEGYF1uB2Q=
SANDBOX:

饭@avast

Filename: 无视016.exe
Threat name: SONAR.Heuristic.120Full Path: Not Available

____________________________

Details
Very Few Users,  Very New,  Risk High

Origin
Downloaded from
http://sh.yun.ftn.qq.com/ftn_han ... 1a2b36288cc/?fname=无视016.exe&cn=0&cv=30111

Activity
Actions performed: 4

____________________________


On computers as of 2014-8-15 at 18:40:32
Last Used 2014-8-15 at 18:40:32
Startup Item No
Launched Yes

____________________________


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.

SONAR Protection monitors for suspicious program activity on your computer.


____________________________


http://sh.yun.ftn.qq.com/ftn_han ... 1a2b36288cc/?fname=无视016.exe&cn=0&cv=30111
Downloaded File 无视016.exe
Threat name: SONAR.Heuristic.120 from qq.comSource: External Media
无视016.exe


____________________________

File Actions

File: c:\documents and settings\rusb\my documents\downloads\无视016.exe
Removed
____________________________

System Settings Actions

Event: Process start (Performed by c:\documents and settings\rusb\my documents\downloads\无视016.exe, PID:1864)
No action taken
Event: PE file creation: c:\ccp.exe (Performed by c:\documents and settings\rusb\my documents\downloads\无视016.exe, PID:1864)
No action taken
Event: Process start: c:\documents and settings\rusb\my documents\downloads\无视016.exe, PID:1864 (Performed by c:\documents and settings\rusb\my documents\downloads\无视016.exe, PID:1864)
No action taken
____________________________


File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available