每日樣本

东方妖妖梦

aboringman

ericdj 发表于 2015-12-8 10:07
AVG IS business edition 右键 miss

AVG：

扫描：监控击杀之；

"";"Trojan horse Pakes2_c.BUFH, c:\Users\killer.Killer-PC\Desktop\4db0d259979ec460544677b580242cde";"Healed, Moved to Virus Vault";"File or Directory";"2015/12/8, 19:42:39"

双击：实机双击（关闭监控，不入沙），IDP击杀之。

"";"IDP.Trojan.6CEC5083, C:\Users\killer.Killer-PC\Desktop\新建文件夹\4db0d259979ec460544677b580242cde.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/8, 19:43:51"
"";", C:\Windows\System32\cmd.exe";"Object was blocked";"Process";"2015/12/8, 19:43:51"
"";", C:\Users\killer.Killer-PC\AppData\Roaming\authclen\brcovmgr.exe";"Object was blocked";"Process";"2015/12/8, 19:43:51"
"";", C:\Windows\System32\cmd.exe";"Object was blocked";"Process";"2015/12/8, 19:43:51"
"";", C:\Users\killer.Killer-PC\AppData\Local\Temp\C0BD\BE3D.bat";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/8, 19:43:51"
"";", C:\Users\killer.Killer-PC\AppData\Roaming\authclen\brcovmgr.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/8, 19:43:51"
"";", C:\Users\killer.Killer-PC\Desktop\新建文件夹\4db0d259979ec460544677b580242cde.exe";"Object was blocked";"Process";"2015/12/8, 19:43:51"
"";", HKEY_USERS\S-1-5-21-1910074467-3606790842-1030588025-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\BCDP3DLG";"Deleted, Moved to Virus Vault";"Registry value";"2015/12/8, 19:43:51"

wjy19800315

解压密码是：infected

卡巴杀

欧阳宣

mcafee miss

狐狸糊涂

BD杀

为你心碎

AVAST杀

wjy19800315

avira杀

ericdj

AVG IS business edition 右键 miss

wjy19800315

百度国内版杀

IntelVT

Norton

275751198

类型：
HEUR/QVM20.1.Malware.Gen

描述：
木马通常利用系统的漏洞，绕过系统防御，达到：盗取账号、窃取资料、篡改文件、破坏数据的目的。
经过360安全中心检验，此文件是木马，建议您立即处理。

扫描引擎：
360云查杀引擎

文件指纹(MD5)：
4db0d259979ec460544677b580242cde