Setup_D337_876

wz775138082

http://r.virscan.org/report/33722afac05a7706521ece1c356a0349
扫描结果:5%的杀软(2/39)报告发现病毒

样本: http://pan.baidu.com/s/1c0ASGzY 密码: 696f

EnZhSTReLniKoVa

样本了？

wz775138082

君陌潇 发表于 2015-6-10 12:42
样本了？

链接: http://pan.baidu.com/s/1c0ASGzY 密码: 696f

Luca.l

EnZhSTReLniKoVa

百度云盘 就不测了  最近在我电脑上抽风 有时候能下  有时候不能下

XywCloud

SUD to BAV

pal家族

根本不是一个游戏。。。。流氓下载器。。。
[mw_shl_code=css,true]10.06.2015 12.59.15;恶意程序的操作已回滚;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;恶意程序的操作已回滚;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\drive\c\program files (x86)\hunpeidui\testlot.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;恶意程序的操作已回滚;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\s3371072\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被恢复;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[2].txt;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[2].txt;C:\Sandbox\小之之\DefaultBox\user\current\AppData\Local\Temp\S3371072\Setup_D337_876.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被恢复;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[1].txt;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[1].txt;C:\Sandbox\小之之\DefaultBox\user\current\AppData\Local\Temp\S3371072\Setup_D337_876.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被恢复;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@soft.yongtenet[1].txt;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@soft.yongtenet[1].txt;C:\Sandbox\小之之\DefaultBox\user\current\AppData\Local\Temp\S3371072\Setup_D337_876.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时注册表键值被恢复;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\connections\savedlegacysettings;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\connections\savedlegacysettings;C:\Sandbox\小之之\DefaultBox\user\current\AppData\Local\Temp\S3371072\Setup_D337_876.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时注册表键值被恢复;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\proxyenable;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\proxyenable;C:\Sandbox\小之之\DefaultBox\user\current\AppData\Local\Temp\S3371072\Setup_D337_876.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被删除;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\s3371072\setup_d337_876.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\s3371072\setup_d337_876.exe;C:\Sandbox\小之之\DefaultBox\user\current\AppData\Local\Temp\S3371072\Setup_D337_876.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被恢复;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[2].txt;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[2].txt;C:\Sandbox\小之之\DefaultBox\drive\C\Program Files (x86)\hunpeidui\TestLot.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被恢复;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[1].txt;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[1].txt;C:\Sandbox\小之之\DefaultBox\drive\C\Program Files (x86)\hunpeidui\TestLot.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被恢复;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@soft.yongtenet[1].txt;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@soft.yongtenet[1].txt;C:\Sandbox\小之之\DefaultBox\drive\C\Program Files (x86)\hunpeidui\TestLot.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时注册表键值被恢复;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\connections\savedlegacysettings;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\connections\savedlegacysettings;C:\Sandbox\小之之\DefaultBox\drive\C\Program Files (x86)\hunpeidui\TestLot.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时注册表键值被恢复;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\proxyenable;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\proxyenable;C:\Sandbox\小之之\DefaultBox\drive\C\Program Files (x86)\hunpeidui\TestLot.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被删除;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\s3371072\setup_d337_876.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\s3371072\setup_d337_876.exe;C:\Sandbox\小之之\DefaultBox\drive\C\Program Files (x86)\hunpeidui\TestLot.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被恢复;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[2].txt;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[2].txt;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被恢复;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[1].txt;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@aoshi.dayanjing[1].txt;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被恢复;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@soft.yongtenet[1].txt;c:\sandbox\小之之\defaultbox\user\current\appdata\roaming\microsoft\windows\cookies\小之之@soft.yongtenet[1].txt;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时注册表键值被恢复;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\connections\savedlegacysettings;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\connections\savedlegacysettings;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时注册表键值被恢复;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\proxyenable;\registry\user\sandbox_小之之_defaultbox\user\current\software\microsoft\windows\currentversion\internet settings\proxyenable;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被删除;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\s3371072\setup_d337_876.exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\s3371072\setup_d337_876.exe;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被删除;c:\sandbox\小之之\defaultbox\user\current\appdata\local\microsoft\windows\temporary internet files\content.ie5\f953d57m\setup_m1_1[1].exe;c:\sandbox\小之之\defaultbox\user\current\appdata\local\microsoft\windows\temporary internet files\content.ie5\f953d57m\setup_m1_1[1].exe;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.59.15;回滚恶意程序的操作时文件被删除;c:\sandbox\小之之\defaultbox\drive\c\program files (x86)\hunpeidui\uninstall.exe;c:\sandbox\小之之\defaultbox\drive\c\program files (x86)\hunpeidui\uninstall.exe;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:59:15
10.06.2015 12.58.16;恶意程序已删除;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\s3371072\setup_d337_876.exe;06/10/2015 12:58:16
10.06.2015 12.58.16;恶意程序已删除;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\drive\c\program files (x86)\hunpeidui\testlot.exe;06/10/2015 12:58:16
10.06.2015 12.58.16;恶意程序已删除;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:58:16
10.06.2015 12.58.02;恶意程序已终止;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;C:\Sandbox\小之之\DefaultBox\user\current\AppData\Local\Temp\Setup_D337_876.exe;06/10/2015 12:58:02
10.06.2015 12.58.02;恶意程序已终止;PDM:Trojan.Win32.Bazon.a;C:\Sandbox\小之之\DefaultBox\drive\C\Program Files (x86)\hunpeidui\TestLot.exe;C:\Sandbox\小之之\DefaultBox\drive\C\Program Files (x86)\hunpeidui\TestLot.exe;06/10/2015 12:58:02
10.06.2015 12.58.02;恶意程序已终止;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\s3371072\setup_d337_876.exe;06/10/2015 12:58:02
10.06.2015 12.58.02;恶意程序已终止;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\drive\c\program files (x86)\hunpeidui\testlot.exe;06/10/2015 12:58:02
10.06.2015 12.58.02;恶意程序已终止;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:58:02
10.06.2015 12.57.57;检测到恶意程序;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\s3371072\setup_d337_876.exe;06/10/2015 12:57:57
10.06.2015 12.57.57;检测到恶意程序;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\drive\c\program files (x86)\hunpeidui\testlot.exe;06/10/2015 12:57:57
10.06.2015 12.57.57;检测到恶意程序;PDM:Trojan.Win32.Bazon.a;缘分趣味搭配软件;c:\sandbox\小之之\defaultbox\user\current\appdata\local\temp\setup_d337_876.exe;06/10/2015 12:57:57
[/mw_shl_code]

230f4

感谢pal家族。上报eset

3801187

君陌潇 发表于 2015-6-10 12:48
百度云盘 就不测了  最近在我电脑上抽风 有时候能下  有时候不能下

那是被大BD网页拦截了

欧阳宣

to mcafee