每日樣本

aboringman

ericdj 发表于 2015-12-8 10:07
AVG IS business edition 右键 miss

AVG：

扫描：监控击杀之；

"";"Trojan horse Pakes2_c.BUFH, c:\Users\killer.Killer-PC\Desktop\4db0d259979ec460544677b580242cde";"Healed, Moved to Virus Vault";"File or Directory";"2015/12/8, 19:42:39"

双击：实机双击（关闭监控，不入沙），IDP击杀之。

"";"IDP.Trojan.6CEC5083, C:\Users\killer.Killer-PC\Desktop\新建文件夹\4db0d259979ec460544677b580242cde.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/8, 19:43:51"
"";", C:\Windows\System32\cmd.exe";"Object was blocked";"Process";"2015/12/8, 19:43:51"
"";", C:\Users\killer.Killer-PC\AppData\Roaming\authclen\brcovmgr.exe";"Object was blocked";"Process";"2015/12/8, 19:43:51"
"";", C:\Windows\System32\cmd.exe";"Object was blocked";"Process";"2015/12/8, 19:43:51"
"";", C:\Users\killer.Killer-PC\AppData\Local\Temp\C0BD\BE3D.bat";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/8, 19:43:51"
"";", C:\Users\killer.Killer-PC\AppData\Roaming\authclen\brcovmgr.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/8, 19:43:51"
"";", C:\Users\killer.Killer-PC\Desktop\新建文件夹\4db0d259979ec460544677b580242cde.exe";"Object was blocked";"Process";"2015/12/8, 19:43:51"
"";", HKEY_USERS\S-1-5-21-1910074467-3606790842-1030588025-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\BCDP3DLG";"Deleted, Moved to Virus Vault";"Registry value";"2015/12/8, 19:43:51"

nick20010117

aboringman 发表于 2015-12-8 19:46
AVG：

扫描：监控击杀之；

不错