Trojan

显示全部楼层 · 发表于 2015-7-17 16:39:03

aboringman 发表于 2015-7-17 10:36
DR.WEB block the website.
[mw_shl_code=css,true]forum.php?mod=attachment&aid=MjY2Nzg4MnwzM2UyYzI2YX ...

右键解压蜘蛛全杀。奇怪，同一个文件夹内先是干掉三个。剩下一个等了10S左右才弹窗

显示全部楼层 · 发表于 2015-7-17 18:07:27

4个都是这种报法，就不一一上图啦

显示全部楼层 · 发表于 2015-7-17 20:22:43

手中的红蜻蜓发表于 2015-7-17 16:39
右键解压蜘蛛全杀。奇怪，同一个文件夹内先是干掉三个。剩下一个等了10S左右才弹窗

不知道啊，我是网页拦截，4个都被block了

显示全部楼层 · 发表于 2015-7-17 22:38:59

AVG一个不杀

显示全部楼层 · 发表于 2015-7-17 23:27:01

开开心心卖手机发表于 2015-7-17 18:07
4个都是这种报法，就不一一上图啦

This message is an automatically generated reply -- do not reply to this message.This system is designed to analyze and process suspicious file submissions into Symantec Security Response and cannot accept correspondence or inquiries.

Submission Date 2015-07-17T06:59:25.637
Tracking # 39286852
Submitter è´µæ˜¾ é»„
Customer Notes  病毒文件Trojan

è´µæ˜¾ é»„,

We have processed your submission (Tracking #39286852) and your submission is now closed. The following is a report of our findings for the files in your submission:

Submission Summary
--------------------------------------------------------------------------------

Files Submitted# Filename MD5 Determination Signature Protection Name RR Seq#
1 Trojan.rar 0x38DF0940F51DEB8CCED7A3F751DB90C1 Archive N/A  N/A
2 360anquanweishixpgod@36_99.exe 0xB1F16D82B00773E259EEB84A9873427E NotMalicious N/A  N/A
3 acrobatkeygenxpgod@36_14075.exe 0xB1F16D82B00773E259EEB84A9873427E NotMalicious N/A  N/A
4 audacityportablexpgod@36_7360.exe 0xB1F16D82B00773E259EEB84A9873427E NotMalicious N/A  N/A
5 powermillxpgod@36_23374.exe 0xB1F16D82B00773E259EEB84A9873427E NotMalicious N/A  N/A

Developer Notes:

Trojan.rar is a container file e.g. archive, email

360anquanweishixpgod@36_99.exe is not malicious.

acrobatkeygenxpgod@36_14075.exe is not malicious.

audacityportablexpgod@36_7360.exe is not malicious.

powermillxpgod@36_23374.exe is not malicious.

--------------------------------------------------------------------------------
Assessment
--------------------------------------------------------------------------------

File1:  Trojan.rar
MD5:  0x38DF0940F51DEB8CCED7A3F751DB90C1
SHA-1:  0x7FA08FE91C487BD7DFD169B51454833C896E713A
Determination: See Dev Notes
Submission Detail:  Please see the developer notes.

--------------------------------------------------------------------------------


File2:  360anquanweishixpgod@36_99.exe
MD5:  0xB1F16D82B00773E259EEB84A9873427E
SHA-1:  0x8E6CF37F3503440254FA0A8D3E0CF49ACE53B106
Determination: See Dev Notes
Submission Detail:  Please see the developer notes.

--------------------------------------------------------------------------------


File3:  acrobatkeygenxpgod@36_14075.exe
MD5:  0xB1F16D82B00773E259EEB84A9873427E
SHA-1:  0x8E6CF37F3503440254FA0A8D3E0CF49ACE53B106
Determination: See Dev Notes
Submission Detail:  Please see the developer notes.

--------------------------------------------------------------------------------


File4:  audacityportablexpgod@36_7360.exe
MD5:  0xB1F16D82B00773E259EEB84A9873427E
SHA-1:  0x8E6CF37F3503440254FA0A8D3E0CF49ACE53B106
Determination: See Dev Notes
Submission Detail:  Please see the developer notes.

--------------------------------------------------------------------------------


File5:  powermillxpgod@36_23374.exe
MD5:  0xB1F16D82B00773E259EEB84A9873427E
SHA-1:  0x8E6CF37F3503440254FA0A8D3E0CF49ACE53B106
Determination: See Dev Notes
Submission Detail:  Please see the developer notes.

--------------------------------------------------------------------------------


This message was generated by Symantec Security Response automation.

Should you have any questions about your submission, please contact our regional technical support from the Symantec Web site, and give them the tracking number included in this message.

Symantec Technical Support

http://www.symantec.com/techsupp/

Sincerely,

Symantec Security Response

显示全部楼层 · 发表于 2015-7-18 08:06:46

本帖最后由辽宁大连~~小海于 2015-7-18 08:11 编辑

不说话，发错了！

显示全部楼层 · 发表于 2015-7-18 08:10:28

辽宁大连~~小海发表于 2015-7-18 08:06
不说话，今天是18号了，说好的云呢？

发错地方了

显示全部楼层 · 发表于 2015-7-18 08:11:30

230f4 发表于 2015-7-18 08:10
发错地方了

我擦·········，不好意~~~

显示全部楼层 · 发表于 2015-7-18 08:41:25

键盘记录、下载dll，修改IE安全区域等设置。

显示全部楼层 · 发表于 2015-7-18 10:50:07

bbszy 发表于 2015-7-17 10:26
趋势英文版全杀，报毒名字一样

Threat: TROJ_GEN.R0EBC0RGG15

趋势科技简中8.0
威胁名称: TROJ_GEN.R0EBC0RGG15
类型: 恶意软件
受感染文件: C:\Users\simplr\Desktop\powermillxpgod@36_23374.exe
处理措施: 已移除
检测方式: 实时扫描

[病毒样本] Trojan

本帖子中包含更多资源