Detection ratio: 1 / 54 SoakSoak ExploitKit 和 Angler Exploit Kit 双料挂马

显示全部楼层 · 发表于 2016-1-21 19:08:52

huicuan 发表于 2016-1-21 18:52
看来大诺顿不赖啊，瑞星拦截你怎么不上图看看啊

好赖话看不出来？

显示全部楼层 · 发表于 2016-1-21 19:09:23

本帖最后由 275751198 于 2016-1-23 10:00 编辑

360 入库
类型:木马-Win32/Trojan.Ransom.2fd
描述:木马是一种伪装成正常文件的恶意软件，会盗取您的帐号、密码等隐私资料。
扫描引擎:云安全引擎
文件路径:D:\邮件\新建文件夹\新建文件夹 (2)\新建文件夹\新建文件夹 (3)\新建文件夹 (5)\搬运中转站\62F4.tmp.exe
文件大小:417.5K (427,520 字节)
文件指纹（MD5）:53461edf1a480d976f2daf03c98b1c76
处理建议:隔离文件

类型:木马-Win32/Trojan.Ransom.2fd
描述:木马是一种伪装成正常文件的恶意软件，会盗取您的帐号、密码等隐私资料。
扫描引擎:云安全引擎
文件路径:D:\邮件\新建文件夹\新建文件夹 (2)\新建文件夹\新建文件夹 (3)\新建文件夹 (5)\搬运中转站\D5A7.tmp.exe
文件大小:417.5K (427,520 字节)
文件指纹（MD5）:53461edf1a480d976f2daf03c98b1c76
处理建议:隔离文件

显示全部楼层 · 发表于 2016-1-21 19:12:45

墨家小子发表于 2016-1-21 19:08
好赖话看不出来？

我没仔细看啊，你看到个瑞星

显示全部楼层 · 发表于 2016-1-21 19:52:14

275751198 发表于 2016-1-21 19:09
360 miss 有图标啊，制作精心了啊

是的呢，毕竟知名品牌

显示全部楼层 · 发表于 2016-1-21 20:54:38

FS：

扫描：监控云杀，扫描后却无法清除，FS果然是怪胎。。。。。。

Backdoor:W32/Cycbot.c7e271e613!Online

显示全部楼层 · 发表于 2016-1-21 21:33:09

歌德塔实机双击被过，文件被加密，10586 x64

显示全部楼层 · 发表于 2016-1-21 22:00:30

Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: INC01978423.

We received the following archive files:
File ID Filename Size (Byte) Result
28702005 62F4.tmp.rar 233.08 KB OK
28702007 D5A7.tmp.rar 233.08 KB OK
A listing of files contained inside archives alongside their results can be found below:

File ID Filename Size (Byte) Result
28702006 62F4.tmp.exe 417.5 KB MALWARE
28702006 D5A7.tmp.exe 417.5 KB MALWARE

Please find a detailed report concerning each individual sample below:

Filename Result
62F4.tmp.exe MALWARE
The file '62F4.tmp.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Samca.2111400. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system. Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename Result
D5A7.tmp.exe MALWARE
The file 'D5A7.tmp.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Samca.2111400. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system. Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2016-1-21 22:56:11

开开心心卖手机发表于 2016-1-21 21:33
歌德塔实机双击被过，文件被加密，10586 x64

估计明天会有GD粉丝在win7 X64下挽尊的

显示全部楼层 · 发表于 2016-1-22 08:05:17

显示全部楼层 · 发表于 2016-1-22 08:18:30

墨家小子发表于 2016-1-21 17:58
我擦，标题的长度已经明显满足不了我，我想加上最新最强加密勒索样本，样本区首发，全卡饭首发，全拆那首发 ...

再加个墨家小子独创首发

[可疑文件] Detection ratio: 1 / 54 SoakSoak ExploitKit 和 Angler Exploit Kit 双料挂马

本帖子中包含更多资源