Detection ratio: 3 / 54 SSF挂了，请毛豆给兄弟报仇~

墨家小子

https://www.virustotal.com/en/fi ... nalysis/1449663298/
SHA256:        cf83a91443bf82aa39a2b686eac31b195880cf0da5194c5e98470c51e31b2710
File name:        cf83a91443bf82aa39a2b686eac31b195880cf0da5194c5e98470c51e31b2710.exe
Detection ratio:        3 / 54
Analysis date:        2015-12-09 12:14:58 UTC ( 1 minute ago )



第二张截图，我选的拦截，结果是令人崩溃的，到了第四步，测试者含泪终止了explorer……

pal家族

Kaspersky
09.12.2015 20.26.27;检测到的对象（文件）已删除。;D:\360安全浏览器下载\cf83a91443bf82aa39a2b686eac31b195880cf0da5194c5e98470c51e31b2710\cf83a91443bf82aa39a2b686eac31b195880cf0da5194c5e98470c51e31b2710.exe;WinRAR 压缩文件管理器;D:\360安全浏览器下载\cf83a91443bf82aa39a2b686eac31b195880cf0da5194c5e98470c51e31b2710\cf83a91443bf82aa39a2b686eac31b195880cf0da5194c5e98470c51e31b2710.exe;12/09/2015 20:26:27;UDS:DangerousObject.Multi.Generic

lixihong10

联网，阻止

执行，允许。

好吧。ESET扫描不杀，HIPS高级内存扫描杀。 重来。

先是ESET提示内存修改。允许了。

COMODO 拦截。报仇了

XywCloud

SUD to BAV

samlin01

红伞kill，还是那些通用报法，就不上截图了

aboringman

AVG：

扫描：miss；

双击：实机双击（不入沙），等了一会儿，IDP击杀之（提示重启，重启后，可能回滚不彻底，衍生物继续被IDP击杀，继续重启，世界和平了）。

"";"IDP.Trojan.04E74D86, C:\Users\killer.Killer-PC\Desktop\cf83a91443bf82aa39a2b686eac31b195880cf0da5194c5e98470c51e31b2710.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/9, 20:27:40"
"";", C:\Users\killer.Killer-PC\Desktop\cf83a91443bf82aa39a2b686eac31b195880cf0da5194c5e98470c51e31b2710.exe";"Object was blocked";"Process";"2015/12/9, 20:27:40"
"";", C:\Windows\explorer.exe";"Object was blocked";"Process";"2015/12/9, 20:27:40"

"";"IDP.Trojan.04E74D86, C:\ProgramData\VyLBSsBEGthkXH.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/9, 20:30:42"
"";", C:\ProgramData\VyLBSsBEGthkXH.exe";"Object was blocked";"Process";"2015/12/9, 20:30:42"
"";", C:\ProgramData\VyLBSsBEGthkXH.exe";"Object was blocked";"Process";"2015/12/9, 20:30:42"
"";", C:\Windows\explorer.exe";"Object was blocked";"Process";"2015/12/9, 20:30:42"
"";", C:\ProgramData\VyLBSsBEGthkXH.exe";"Object was blocked";"Process";"2015/12/9, 20:30:42"
"";", HKEY_USERS\S-1-5-21-1910074467-3606790842-1030588025-1003\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\XVCSBGFIBEODGFKMTAAXVSVAEU";"Deleted, Moved to Virus Vault";"Registry value";"2015/12/9, 20:30:42"
"";", C:\Users\killer.Killer-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\360极速浏览器.lnk";"Healed, Moved to Virus Vault";"File or Directory";"2015/12/9, 20:30:42"
"";", C:\Users\killer.Killer-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\在沙盘中运行网页浏览器.lnk";"Healed, Moved to Virus Vault";"File or Directory";"2015/12/9, 20:30:42"
"";", C:\Users\killer.Killer-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\迅雷极速版.lnk";"Healed, Moved to Virus Vault";"File or Directory";"2015/12/9, 20:30:42"

sanhu35

沙盘没问题

ccboxes

BD实机双击，ATC击杀

清道夫900

aboringman 发表于 2015-12-9 20:47
AVG：

扫描：miss；

这两天感觉IDP查杀挺高啊？

aboringman

清道夫900 发表于 2015-12-9 22:29
这两天感觉IDP查杀挺高啊？

以前很少人使用AVG，所以它被埋没掉了，没法使出全力，现在我来发掘它原有的一些能力。
当然，我还是不会推荐AVG。