八姨太

显示全部楼层 · 发表于 2016-1-30 23:21:57

显示全部楼层 · 发表于 2016-1-30 23:43:08

360 下载保护全杀

显示全部楼层 · 发表于 2016-1-30 23:43:17

AVG：

扫描：仅 kill25.exe。。。。。。（by WP）

"";"Trojan horse Inject3.ZGA, https://att.kafan.cn/forum.php?mo ... DF8MTkzNjg4OA%3D%3D";"Object was blocked";"URL";"2016/1/30, 23:29:01"
"";"Trojan horse Inject3.ZGA, https://att.kafan.cn/forum.php?mo ... F8MTkzNjg4OA%3D%3D:\25.exe";"Unresolved";"Embedded element in the archive, email attachment, cookie etc.";"2016/1/30, 23:29:01"

双击：仅双击23和25，程序运行后不久自动退出，没有留下什么可疑的痕迹，初步判断为safe

显示全部楼层 · 发表于 2016-1-31 00:46:02

ESET

94.exe;a variant of Win32/Kryptik.EMHJ trojan;cleaned by deleting

93.exe;a variant of Win32/Kryptik.EMHJ trojan;cleaned by deleting

80.exe;a variant of Win32/Kryptik.EMHJ trojan;cleaned by deleting

30.exe;a variant of Win32/Kryptik.EMHJ trojan;cleaned by deleting

29.exe;a variant of Win32/Kryptik.EMHJ trojan;cleaned by deleting

26.exe;a variant of Win32/Kryptik.EMHJ trojan;cleaned by deleting

25.exe;a variant of Win32/Injector.CRFM trojan;cleaned by deleting

23.exe;a variant of Win32/Kryptik.EMHJ trojan;cleaned by deleting

显示全部楼层 · 发表于 2016-1-31 01:20:25

唉

"D:\Virus\Virus\25.exe" "Artemis!735C75F840BA"

显示全部楼层 · 发表于 2016-1-31 02:14:43

Avast企业免费版，8个点击均弹窗，锁页面。

显示全部楼层 · 发表于 2016-1-31 09:23:25

360ts下载保护全杀，隔离区恢复解压后杀2只，右键剩余扫描提示上传，二扫全灭

显示全部楼层 · 发表于 2016-1-31 10:08:06

vm001 发表于 2016-1-31 09:23
360ts下载保护全杀，隔离区恢复解压后杀2只，右键剩余扫描提示上传，二扫全灭

感谢测试

[可疑文件] 八姨太

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源