Detection ratio: 3 / 55 绕过系统防火墙、记录键盘输入、联网

墨家小子

SHA256:        317dba2542d53bda870d1b911f08e66cf83eed6a2eb7cfb93924c3ce12fac54d
File name:        317dba2542d53bda870d1b911f08e66cf83eed6a2eb7cfb93924c3ce12fac54d.exe
Detection ratio:        3 / 55
Analysis date:        2015-12-05 06:08:34 UTC ( 1 minute ago )
https://www.virustotal.com/en/fi ... nalysis/1449295714/

aboringman

AVG：

扫描：miss；

双击：实机双击（不入沙），等了一会，IDP击杀本体和衍生物。

"";"Unknown, C:\ProgramData\SkyTel2.exe";"Healed, Moved to Virus Vault";"File or Directory";"2015/12/5, 16:21:31"
"";", C:\ProgramData\SkyTel2.exe";"Object was blocked";"Process";"2015/12/5, 16:21:31"
"";", C:\Users\Killer\Desktop\317dba2542d53bda870d1b911f08e66cf83eed6a2eb7cfb93924c3ce12fac54d.exe";"Object was blocked";"Process";"2015/12/5, 16:21:31"
"";", C:\Windows\System32\netsh.exe";"Object was blocked";"Process";"2015/12/5, 16:21:31"
"";", C:\Users\Killer\Desktop\317dba2542d53bda870d1b911f08e66cf83eed6a2eb7cfb93924c3ce12fac54d.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/5, 16:21:31"
"";", HKEY_USERS\S-1-5-21-1910074467-3606790842-1030588025-1001\SOFTWARE\C2284C4022C204AEDB6684FABDDAC4B3";"Deleted, Moved to Virus Vault";"Registry key";"2015/12/5, 16:21:31"

Mary04

感谢楼主分享
已下载  

XywCloud

BAV云杀

pal家族

05.12.2015 15.13.24;检测到的对象（文件）已删除。;D:\360安全浏览器下载\317dba2542d53bda870d1b911f08e66cf83eed6a2eb7cfb93924c3ce12fac54d\317dba2542d53bda870d1b911f08e66cf83eed6a2eb7cfb93924c3ce12fac54d.exe;WinRAR 压缩文件管理器;D:\360安全浏览器下载\317dba2542d53bda870d1b911f08e66cf83eed6a2eb7cfb93924c3ce12fac54d\317dba2542d53bda870d1b911f08e66cf83eed6a2eb7cfb93924c3ce12fac54d.exe;12/05/2015 15:13:24;UDS:DangerousObject.Multi.Generic
卡巴拉黑

nick20010117

@aboringman

samlin01

红伞kill

275751198

类型：
HEUR/QVM03.0.Malware.Gen

描述：
木马通常利用系统的漏洞，绕过系统防御，达到：盗取账号、窃取资料、篡改文件、破坏数据的目的。
经过360安全中心检验，此文件是木马，建议您立即处理。

扫描引擎：
360云查杀引擎

文件指纹(MD5)：
30f378bc2584cd32b0f7b6ef80ee70a4

230f4

Bitdefender blocked this page

The page you are trying to access contains
Gen:Variant.Kazy.778760.

IntelVT

Windows Defender