File name: 69184.exe Detection ratio: 2 / 55

aboringman

AVG：

扫描：miss；

双击：实机双击，过了一会儿IDP击杀之。

"";"IDP.SMP.11, C:\USERS\KIILER\DESKTOP\69184.EXE";"Deleted";"File or Directory";"2016/1/28, 18:45:41"
"";", C:\USERS\KIILER\DESKTOP\69184.EXE";"Object was blocked";"Process";"2016/1/28, 18:45:41"
"";", C:\Users\kiiler\AppData\Roaming\wjswbhe45.exe";"Object was blocked";"Process";"2016/1/28, 18:45:41"
"";", C:\Windows\System32\cmd.exe";"Object was blocked";"Process";"2016/1/28, 18:45:41"
"";", C:\Users\kiiler\AppData\Roaming\wjswbhe45.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/1/28, 18:45:41"
"";", C:\USERS\KIILER\DESKTOP\69184.EXE";"Object was blocked";"Process";"2016/1/28, 18:45:41"

墨家小子

aboringman 发表于 2016-1-28 18:46
AVG：

扫描：miss；

试试这个：http://bbs.kafan.cn/thread-1935532-1-1.html

aboringman

墨家小子 发表于 2016-1-28 18:48
试试这个：http://bbs.kafan.cn/thread-1935532-1-1.html

AVG：

扫描：killed（终于杀了，呜呜呜。。。。。。）；

"";"Trojan horse Ransomer.KUI, att.kafan.cn/forum.php?mod=attachment&aid=Mjc0OTA0MXxkMDFjZGFjYXwxNDUzOTc4MTcyfDEwMDA1MDF8MTkzNTUzMg%3D%3D";"Object was blocked";"URL";"2016/1/28, 18:50:17"
"";"Trojan horse Ransomer.KUI, att.kafan.cn/forum.php?mod=attachment&aid=Mjc0OTA0MXxkMDFjZGFjYXwxNDUzOTc4MTcyfDEwMDA1MDF8MTkzNTUzMg%3D%3D:\TMPD2E1.tmp";"Unresolved";"Embedded element in the archive, email attachment, cookie etc.";"2016/1/28, 18:50:17"

双击：关闭监控，实机双击，IDP瞬间击杀之，好久没看到这么猛烈击杀了。。。。。。

"";"IDP.Trojan.65EFFD52, C:\Users\kiiler\Desktop\TMPD2E1.tmp.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/1/28, 18:52:02"
"";", C:\Users\kiiler\Desktop\TMPD2E1.tmp.exe";"Object was blocked";"Process";"2016/1/28, 18:52:02"

275751198

墨家小子 发表于 2016-1-28 17:35
排版不严谨，不够花哨，没有吸引眼球的元素，建议楼主多多学习样本区一些人在自己帖子里有事没事混脸熟，很 ...

每个人都有自己的个性啦，驭龙饭友是很乐于助人的

验证码

瑞星v16也报毒了，就不知道是不是瑞星v17报的了。

amocken

百度kill