一枚凶残的敲竹杠……

显示全部楼层 · 发表于 2015-9-5 13:21:53

DrWeb扫描不杀，双击未测

显示全部楼层 · 发表于 2015-9-5 13:52:11

驭龙发表于 2015-9-5 13:21
DrWeb扫描不杀，双击未测

双击杀了个HOOK.DLL

显示全部楼层 · 发表于 2015-9-5 13:52:57

Avast Win32:Evo-gen [Susp] 8.0.1489.320 20150905
Qihoo-360 Win32/Trojan.97a 1.0.0.1015 20150905
Tencent Win32.Packed.Multipacked.Wsuh 1.0.0.1 20150905
AhnLab-V3 Win-Trojan/Malpacked5.Gen 2015.09.05.00 20150904
Sophos W32/Pidgeon-A 4.98.0 20150905
Fortinet W32/OnLineGames.AJN!tr 5.1.220.0 20150904
NANO-Antivirus Virus.Win32.Agent.dvixmz 0.30.24.3283 20150905
Arcabit Trojan.Symmi.D42CC 1.0.0.425 20150905
Ikarus Trojan.Graftor.Elzob T3.1.9.5.0 20150905
Panda Trj/Genetic.gen 4.6.4.2 20150904
VBA32 SScope.Trojan.PWS.22627 3.12.26.4 20150905
Rising PE:Packer.Win32.Agent.g!1395558[F1] 25.0.0.17 20150904
Comodo Packed.Win32.MUPX.Gen 23172 20150904
Kaspersky Packed.Multi.MultiPacked.gen 15.0.1.10 20150905
Bkav HW32.Packed.8BDB 1.3.0.7133 20150905
Emsisoft Gen:Variant.Symmi.17100 (B) 3.5.0.642 20150905
MicroWorld-eScan Gen:Variant.Symmi.17100 12.0.250.0 20150904
ALYac Gen:Variant.Symmi.17100 1.0.1.4 20150905
BitDefender Gen:Variant.Symmi.17100 7.2 20150905
Ad-Aware Gen:Variant.Symmi.17100 12.0.163.0 20150905
F-Secure Gen:Variant.Symmi.17100 11.0.19100.45 20150905
GData Gen:Variant.Symmi.17100 25 20150905
McAfee Flyagent 6.0.6.653 20150905
McAfee-GW-Edition BehavesLike.Win32.Downloader.dc v2015 20150905
ESET-NOD32 a variant of Win32/FlyStudio.Packed.AD potentially unwanted 12205 20150905

显示全部楼层 · 发表于 2015-9-5 13:55:30

paul_guo 发表于 2015-9-5 13:52
双击杀了个HOOK.DLL

报毒名是什么？系统被锁屏了吗？我好奇的问一下

显示全部楼层 · 发表于 2015-9-5 14:04:54

本帖最后由 aboringman 于 2015-9-5 14:28 编辑

趋势国际双击killed（监控等级：高）

[mw_shl_code=css,true]Threat: HEU_AEGIS_HttpDownloadChecker
Source: Threat
Affected Files: c:\documents and…视密码登入器.exe
Response: Removed
Detected By: Real Time Scan[/mw_shl_code]

另一结果，趋势国际双击杀本体及衍生物（监控等级：普通）

[mw_shl_code=css,true]Threat: HEU_CDPLC016
Source: Threat
Affected Files: C:\Documents and Setting…\Test.lnk
Response: Removed
Detected By: Correlation Scan
Where did this come from?

Threat: HEU_CDPLC012
Source: Threat
Affected Files: C:\1.exe
Response: Removed
Detected By: Correlation Scan
Where did this come from?

Threat: TROJ_FLYSTUDI.IJ
Source: Threat
Affected Files: C:\Documents and Setting…\Hook.dll
Response: Removed
Detected By: Queued Scan

Threat: HEU_AEGISCS985
Source: Threat
Affected Files: C:\Documents an…视密码登入器.exe
Response: Removed
Detected By: Real Time Scan[/mw_shl_code]

显示全部楼层 · 发表于 2015-9-5 14:05:20

驭龙发表于 2015-9-5 13:55
报毒名是什么？系统被锁屏了吗？我好奇的问一下

沙盘并不能真正锁屏。。。。报的TROJAN.SIGGEN

显示全部楼层 · 发表于 2015-9-5 14:18:12

paul_guo 发表于 2015-9-5 14:05
沙盘并不能真正锁屏。。。。报的TROJAN.SIGGEN

看来这敲竹杠有壳，黑寡妇拆不了，双击以后释放出的病毒会被黑寡妇杀掉，我猜测可能是这样的

显示全部楼层 · 发表于 2015-9-5 15:02:11

卡饭怎么了，下载不了附件，无法访问，被攻击了？

显示全部楼层 · 发表于 2015-9-5 15:05:05

狐狸糊涂发表于 2015-9-5 15:02
卡饭怎么了，下载不了附件，无法访问，被攻击了？

我这同样也出现了无法下载的情况，等等看吧

显示全部楼层 · 发表于 2015-9-5 15:13:29

aboringman 发表于 2015-9-5 14:04
趋势国际双击killed（监控等级：高）
[mw_shl_code=css,true]Threat: HEU_AEGIS_HttpDownloadCheck ...

你看看重启电脑密码被改没有

[病毒样本] 一枚凶残的敲竹杠……