Detection ratio: 8 / 54 b50b6.exe

墨家小子

https://www.virustotal.com/en/fi ... nalysis/1449486021/
SHA256:        3a3023e8d5d0c92fdc54b96189549c0dbc37e973b40c8f0d429b5fceecd2f07a
File name:        b50b6.exe
Detection ratio:        8 / 54
Analysis date:        2015-12-07 11:00:21 UTC ( 0 minutes ago )



2015/12/7 19:02:42,C:\Windows\explorer.exe,53,Allowed ;执行应用程序 ("C:\Users\AAAAA\Desktop\1\b50b6.exe" )

2015/12/7 19:02:43,C:\Users\AAAAA\Desktop\1\b50b6.exe,53,Allowed ;执行应用程序 (C:\Users\AAAAA\Desktop\1\b50b6.exe)

2015/12/7 19:02:45,C:\Users\AAAAA\Desktop\1\b50b6.exe,53,Allowed ;执行应用程序 (C:\windows\SYSTEM32\explorer.exe)

2015/12/7 19:02:49,C:\Windows\SysWOW64\explorer.exe,53,Blocked ;执行应用程序 (cmd.exe /c makecab "C:\windows\SysWOW64\bthudtask.exe" "C:\Users\AAAAA\AppData\Roaming\cabfile.cab")

2015/12/7 19:02:51,C:\Windows\SysWOW64\explorer.exe,47,Allowed ;创建交换数据流 (C:\Users\AAAAA\Documents\Lenovo Voice SDK\Lenovo Voice SDK.scr:Zone.Identifier)

2015/12/7 19:02:54,C:\Windows\SysWOW64\explorer.exe,53,Allowed ;执行应用程序 (C:\windows\SysWOW64\WerFault.exe -u -p 2724 -s 484)

wjy19800315

卡巴杀

samlin01

红伞kill

XywCloud

BAV云杀

275751198

360 HEUR/QVM07.1.Malware.Gen

aboringman

AVG：

扫描：miss；

双击：实机双击（不入沙），等了一会，IDP击杀之。

"";"IDP.HELU.UES10, C:\USERS\KILLER.KILLER-PC\DESKTOP\B50B6.EXE";"Deleted";"File or Directory";"2015/12/7, 22:50:29"
"";", C:\USERS\KILLER.KILLER-PC\DESKTOP\B50B6.EXE";"Object was blocked";"Process";"2015/12/7, 22:50:29"
"";", C:\USERS\KILLER.KILLER-PC\DESKTOP\B50B6.EXE";"Object was blocked";"Process";"2015/12/7, 22:50:29"
"";", C:\USERS\KILLER.KILLER-PC\DESKTOP\B50B6.EXE";"Object was blocked";"Process";"2015/12/7, 22:50:29"
"";", C:\Windows\explorer.exe";"Object was blocked";"Process";"2015/12/7, 22:50:29"
"";", C:\Windows\explorer.exe";"Object was blocked";"Process";"2015/12/7, 22:50:29"
"";", C:\WINDOWS\SYSTEM32\SETUP\BTHUDTASK.EXE";"Object was blocked";"Process";"2015/12/7, 22:50:29"
"";", C:\Windows\System32\tasklist.exe";"Object was blocked";"Process";"2015/12/7, 22:50:29"
"";", C:\Windows\explorer.exe";"Object was blocked";"Process";"2015/12/7, 22:50:29"
"";", C:\Windows\System32\svchost.exe";"Object was blocked";"Process";"2015/12/7, 22:50:29"
"";", C:\Windows\System32\Clean Master\Clean Master.lnk";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/7, 22:50:29"
"";", HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\CLEAN MASTER";"Deleted, Moved to Virus Vault";"Registry value";"2015/12/7, 22:50:29"
"";", C:\WINDOWS\SYSTEM32\SETUP\BTHUDTASK.EXE";"Deleted";"File or Directory";"2015/12/7, 22:50:29"
"";", C:\USERS\KILLER.KILLER-PC\DESKTOP\B50B6.EXE";"Object was blocked";"Process";"2015/12/7, 22:50:29"
"";", HKEY_USERS\S-1-5-21-1910074467-3606790842-1030588025-1003\SOFTWARE\B50B6";"Deleted, Moved to Virus Vault";"Registry key";"2015/12/7, 22:50:29"

Mary04

感谢楼主分享
已下载