Detection ratio: 2 / 53 Angler Exploit Kit Website 6 加密勒索挂马

墨家小子

windows7爱好者 发表于 2016-2-2 19:34
我发现最近你的样本经常是一样的 ，很多人不幸中招

都是外网找到的，现在基本都是加密勒索类的挂马，漏洞攻击网页AEK居多，基本就这样了

windows7爱好者

墨家小子 发表于 2016-2-2 21:32
都是外网找到的，现在基本都是加密勒索类的挂马，漏洞攻击网页AEK居多，基本就这样了

样本区来个闹事的，还得请你出山

aboringman

AVG：

扫描：miss；

双击：实机双击，IDP 击杀之。

"";"IDP.Program.D1B0A5C0, C:\Users\kiiler\Desktop\8963.tmp.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/2/2, 23:59:44"
"";", C:\Users\kiiler\Desktop\8963.tmp.exe";"Object was blocked";"Process";"2016/2/2, 23:59:44"



ESET：

扫描：killed；

Scan Log
Version of virus signature database: 12966 (20160202)
Date: 2016/2/3  Time: 0:01:05
Scanned disks, folders and files: C:\Users\kiiler\Desktop\新建文件夹\8963.tmp.exe
C:\Users\kiiler\Desktop\新建文件夹\8963.tmp.exe - Win32/Filecoder.CryptoWall.G trojan - cleaned by deleting [1]
Number of scanned objects: 1
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 0:01:06  Total scanning time: 1 sec (00:00:01)

Notes:
[1] Object has been deleted as it only contained the virus body.

双击：关闭监控，实机双击，AMS 击杀之（头次看见AMS报法与监控报法相同的）

Time;Scanner;Object type;Object;Threat;Action;User;Information;Hash

2016/2/3 0:01:59;Advanced memory scanner;file;Operating memory » C:\Users\kiiler\Desktop\新建文件夹\8963.tmp.exe;a variant of Win32/Filecoder.CryptoWall.G trojan;cleaned;;;ADDEEE075D3E10A469915EFDD9A9822DEEF49040

HEMM

已被MA入了库....
图呢？我自己传的图我自己竟然看不到= =.....什么情况......

windows7爱好者

HEMM 发表于 2016-2-3 00:06
已被MA入了库....
图呢？我自己传的图我自己竟然看不到= =.....什么情况......

论坛bug，我们也看不见，重新删除再传一下就好了