File name: 197fjr1dkqw.exe Detection ratio: 5 / 54

显示全部楼层 · 发表于 2015-12-27 19:20:58

SHA256: 1a935211271fa195b317ce5020ad9f63b676dabd2c83d5c2e12d1b81e17f50b9
File name: 197fjr1dkqw.exe
Detection ratio: 5 / 54
Analysis date: 2015-12-27 11:18:30 UTC ( 0 minutes ago )
https://www.virustotal.com/en/fi ... nalysis/1451215110/

显示全部楼层 · 发表于 2015-12-27 20:07:09

27.12.2015 20.07.05;检测到的对象 ( 文件 ) 已删除。;D:\360安全浏览器下载\197fjr1dkqw\197fjr1dkqw.exe;Windows Explorer;D:\360安全浏览器下载\197fjr1dkqw\197fjr1dkqw.exe;12/27/2015 20:07:05;UDS:DangerousObject.Multi.Generic

显示全部楼层 · 发表于 2015-12-27 21:45:09

弱顿没有反应，过了……

显示全部楼层 · 发表于 2015-12-27 21:55:49

检测： TR/Crypt.XPACK.289958 (Cloud)

显示全部楼层 · 发表于 2015-12-27 22:13:33

牛逼啥呀，过了我顿，我还有我H呢

显示全部楼层 · 发表于 2015-12-27 22:50:33

AVG：

扫描：miss；

双击：实机双击（不入沙），创建启动项后不久IDP击杀母体及衍生物（need reboot）。

"";"IDP.Program.D1B0A5C0, C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-18611771\KdjSaS011arhaaaa.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2015/12/27, 22:48:02"
"";", C:\Windows\explorer.exe";"Reboot is required to finish the action";"Process";"2015/12/27, 22:48:02"
"";", C:\USERS\KILLER\DESKTOP\197FJR1DKQW.EXE";"Object was blocked";"Process";"2015/12/27, 22:48:02"
"";", HKEY_USERS\S-1-5-21-1910074467-3606790842-1030588025-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\KDJSAS011ARHAAA";"Deleted, Moved to Virus Vault";"Registry value";"2015/12/27, 22:48:02"
"";", HKEY_USERS\S-1-5-21-1910074467-3606790842-1030588025-1005\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\\KDJSAS011ARHAAA";"Deleted, Moved to Virus Vault";"Registry value";"2015/12/27, 22:48:02"

显示全部楼层 · 发表于 2015-12-28 12:58:57

baidu
Win32.Trojan.Kryptik.td.cav

显示全部楼层 · 发表于 2015-12-28 13:23:03

火绒 kill

[可疑文件] File name: 197fjr1dkqw.exe Detection ratio: 5 / 54

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块