Detection ratio: 2 / 55

墨家小子

SHA256:        2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c
File name:        2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c.exe
Detection ratio:        2 / 55
Analysis date:        2015-12-02 12:14:02 UTC ( 0 minutes ago )
https://www.virustotal.com/en/fi ... nalysis/1449058442/



2015/12/2 20:14:16,C:\Windows\explorer.exe,53,Allowed ;执行应用程序 ("C:\Users\AAAAA\Desktop\2222\2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c.exe" )

2015/12/2 20:14:16,C:\Users\AAAAA\Desktop\2222\2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c.exe,53,Allowed ;执行应用程序 (\??\C:\windows\system32\conhost.exe 0xffffffff)

2015/12/2 20:14:16,C:\Windows\System32\conhost.exe,40,Allowed ;以修改权限打开进程或线程 (2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c.exe(pid=5492))

2015/12/2 20:14:21,C:\Users\AAAAA\Desktop\2222\2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c.exe,50,Allowed ;使用 DNS 解析服务访问网络

2015/12/2 20:14:22,C:\Users\AAAAA\Desktop\2222\2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c.exe,48,Allowed ;出站网络访问

2015/12/2 20:17:07,C:\Users\AAAAA\Desktop\2222\2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c.exe,40,Blocked ;以修改权限打开进程或线程 (explorer.exe(pid=3712))

挥泪斩情思

dr.web miss

wjy19800315

驭龙

ESS MISS

XywCloud

SUD to BAV

sanhu35

卡巴云

追影子的十三

红伞云杀

yzt1004

双击后emsisoft 没反应，调用卡巴清之

aboringman

AVG:

扫描：miss；

双击：实机（不入沙），等了一会IDP击杀之（并回滚）。

"";"IDP.ARES.Generic, C:\Users\Killer\Desktop\2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/2, 22:17:16"
"";", C:\Users\Killer\Desktop\2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c.exe";"Object was blocked";"Process";"2015/12/2, 22:17:16"
"";", C:\Users\Killer\Desktop\2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c.exe";"Object was blocked";"Process";"2015/12/2, 22:17:16"
"";", C:\Users\Killer\Desktop\2363e6665ef266f35f7119f4bb9e411c3766b1a595b7760c5d429d283a90200c.exe";"Object was blocked";"Process";"2015/12/2, 22:17:16"

NIS：

扫描：miss；

双击：我这里miss，不过倒是没有造成什么破坏。。。。。。

胖福

双诺顿被过了，文件删除自身！