QQ粘虫

显示全部楼层 · 发表于 2016-1-25 10:46:11

name="C:\Users\XuanXia\Desktop\腾讯QQ破解svip版\腾讯QQ破解svip版.exe", threat="Win32/PSW.QQPass.NTP trojan", action="", info=""

显示全部楼层 · 发表于 2016-1-25 12:49:41

卡巴斯基25.01.2016 12.48.09;检测到的对象（文件）无法清除。;http://qd2.cache.baidupcs.com/fi ... p;to=qc2&fm=Nan,B,G,ny&sta_dx=1&sta_cs=1&sta_ft=rar&sta_ct=0&fm2=Nanjing02,B,G,ny&newver=1&newfm=1&secfm=1&flow_ver=3&pkey=140027819296d77f883c0e6275349a7fdfe09b55c0060000000b0cde&sl=73728078&expires=8h&rt=sh&r=168677164&mlogid=568998549530622099&vuk=-&vbdid=3753428557&fin=%E8%85%BE%E8%AE%AFQQ%E7%A0%B4%E8%A7%A3svip%E7%89%88.rar&fn=%E8%85%BE%E8%AE%AFQQ%E7%A0%B4%E8%A7%A3svip%E7%89%88.rar&slt=pm&uta=0&rtype=1&iv=0&isw=0&dp-logid=568998549530622099&dp-callid=0.1.1//腾讯QQ破解svip版.exe;http://qd2.cache.baidupcs.com/fi ... p;to=qc2&fm=Nan,B,G,ny&sta_dx=1&sta_cs=1&sta_ft=rar&sta_ct=0&fm2=Nanjing02,B,G,ny&newver=1&newfm=1&secfm=1&flow_ver=3&pkey=140027819296d77f883c0e6275349a7fdfe09b55c0060000000b0cde&sl=73728078&expires=8h&rt=sh&r=168677164&mlogid=568998549530622099&vuk=-&vbdid=3753428557&fin=%E8%85%BE%E8%AE%AFQQ%E7%A0%B4%E8%A7%A3svip%E7%89%88.rar&fn=%E8%85%BE%E8%AE%AFQQ%E7%A0%B4%E8%A7%A3svip%E7%89%88.rar&slt=pm&uta=0&rtype=1&iv=0&isw=0&dp-logid=568998549530622099&dp-callid=0.1.1//腾讯QQ破解svip版.exe;Trojan.Win32.Diztakun.ae;木马程序;01/25/2016 12:48:09

显示全部楼层 · 发表于 2016-1-25 14:31:14

虚拟机测试，火绒自定义规则拦截

显示全部楼层 · 发表于 2016-1-25 16:20:15

微点拦截

显示全部楼层 · 发表于 2016-1-25 16:37:40

类别: 特洛伊木马

描述: 这个程序很危险，而且执行来自攻击者的命令。

推荐的操作: 立即删除这个软件。

项目:
containerfile:C:\Users\duo\Downloads\腾讯QQ破解svip版.rar
file:C:\Users\duo\Downloads\腾讯QQ破解svip版.rar->腾讯QQ破解svip版.exe->(UPX)
webfile:C:\ProgramData\Microsoft\Windows Defender\LocalCopy\{4074204A-19A0-409C-81BF-9D39E519D1E8}-腾讯QQ破解svip版.rar|http://nb.cache.baidupcs.com/fil ... p;to=nbc&fm=Nan,B,T,t&sta_dx=1&sta_cs=1&sta_ft=rar&sta_ct=0&fm2=Nanjing02,B,T,t&newver=1&newfm=1&secfm=1&flow_ver=3&pkey=140027819296d77f883c0e6275349a7fdfe09b55c0060000000b0cde&sl=79036494&expires=8h&rt=sh&r=310839513&mlogid=572684428708452724&vuk=3143666187&vbdid=18335841&fin=%E8%85%BE%E8%AE%AFQQ%E7%A0%B4%E8%A7%A3svip%E7%89%88.rar&fn=%E8%85%BE%E8%AE%AFQQ%E7%A0%B4%E8%A7%A3svip%E7%89%88.rar&slt=pm&uta=0&rtype=1&iv=0&isw=0&dp-logid=572684428708452724&dp-callid=0.1.1
webfile:C:\Users\duo\Downloads\腾讯QQ破解svip版.rar|http://nb.cache.baidupcs.com/fil ... p;to=nbc&fm=Nan,B,T,t&sta_dx=1&sta_cs=1&sta_ft=rar&sta_ct=0&fm2=Nanjing02,B,T,t&newver=1&newfm=1&secfm=1&flow_ver=3&pkey=140027819296d77f883c0e6275349a7fdfe09b55c0060000000b0cde&sl=79036494&expires=8h&rt=sh&r=310839513&mlogid=572684428708452724&vuk=3143666187&vbdid=18335841&fin=%E8%85%BE%E8%AE%AFQQ%E7%A0%B4%E8%A7%A3svip%E7%89%88.rar&fn=%E8%85%BE%E8%AE%AFQQ%E7%A0%B4%E8%A7%A3svip%E7%89%88.rar&slt=pm&uta=0&rtype=1&iv=0&isw=0&dp-logid=572684428708452724&dp-callid=0.1.1

联机获取此项的详细信息。

显示全部楼层 · 发表于 2016-1-25 18:26:43

显示全部楼层 · 发表于 2016-1-25 18:33:49

[可疑文件] QQ粘虫

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块