File name: g545.exe Detection ratio: 6 / 49

墨家小子

http://1000eb.com/1iq8q

https://www.virustotal.com/en/fi ... nalysis/1454072380/

windows7爱好者

1446547521

火狐拉黑卡饭附件了？

aboringman

ESET：

扫描：killed；

Log
Scan Log
Version of virus signature database: 12946 (20160129)
Date: 2016/1/29  Time: 21:49:38
Scanned disks, folders and files: C:\Users\kiiler\Desktop\g545.exe
C:\Users\kiiler\Desktop\g545.exe - Suspicious Object - action selection postponed until scan completion
C:\Users\kiiler\Desktop\g545.exe - Suspicious Object - deleted
Number of scanned objects: 1
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 21:49:48  Total scanning time: 10 sec (00:00:10)

双击：关闭监控，实机双击，虽然结果是失败的，但AMS还是尽力了。（对注入型的无力）

Time;Scanner;Object type;Object;Threat;Action;User;Information;Hash

2016/1/29 22:00:01;Advanced memory scanner;file;Operating memory » explorer.exe(740);a variant of Win32/Dridex.AE trojan;cleaned - contained infected files;;;C72637B8E27DEE8039D26FE65CF95E6368675FD8

2016/1/29 22:00:00;Advanced memory scanner;file;Operating memory » explorer.exe(740);Win32/Dridex.U trojan;cleaned - contained infected files;;;DE1720F4CC65B5226949884B3472F0F7CEA6FD13



AVG：

扫描：miss；

双击：实机双击，IDP击杀之（need reboot）。

"";"IDP.SEMS.1G, C:\USERS\KIILER\DESKTOP\G545.EXE";"Deleted";"File or Directory";"2016/1/29, 22:01:45"
"";", C:\USERS\KIILER\DESKTOP\G545.EXE";"Object was blocked";"Process";"2016/1/29, 22:01:45"
"";", C:\Windows\explorer.exe";"Object was blocked";"Process";"2016/1/29, 22:01:45"

xflcx1991

扫描报木马，如能加上密码棒了。

icedream89

开开心心卖手机

GD拦截下载

绅博周幸

Website blocked!

G DATA TOTAL SECURITY has denied access to this website.
The site contains infected code: Gen:Variant.Zusy.179503 (Engine A).

猥琐大叔

墨家小子

aboringman 发表于 2016-1-29 22:16
ESET：

扫描：killed；

可以下次单开ESET的HIPS，试试只拦截注入，比内存扫描还爽