Detection ratio: 15 / 54 Web Attack: Malicious Exploit Kit Website 41 挂马

墨家小子

SHA256:        6a706aadb48c3e2a1ee7d720dd8ffea1fac036a0f0a96cbea8ed9336588f216d
File name:        B8AF.tmp
Detection ratio:        15 / 54
Analysis date:        2016-02-07 05:16:41 UTC ( 1 minute ago )
https://www.virustotal.com/en/file/6a706aadb48c3e2a1ee7d720dd8ffea1fac036a0f0a96cbea8ed9336588f216d/analysis/1454822201/

win8.1 X64 、win10 X64 下诺顿的声纳，来呀，玩玩嘛~~

2016/2/7 13:06:22,高,阻止了 localhost 的入侵企图,已阻止,不需要操作,,不需要操作,不需要操作,Web Attack: Malicious Exploit Kit Website 41,"localhost (127.0.0.1, 6XXX8)",www.rtachicago.com/media/system/js/mootools-core.js,"localhost (127.0.0.1, 1XXX6)",localhost (127.0.0.1),"TCP, 端口 6XXX8"

windows7爱好者

衍生物被蜘蛛击杀，原样本自删除，无启动项

1446547521

双击ATC干掉

坏脾气的男生

金山删除

pal家族

z2009

avg全杀

aboringman

AVG：

扫描：pass；

双击：关闭监控，实机双击，IDP 击杀其衍生物并回滚其添加的启动项。（需重启）

"";"IDP.ALEXA.51, C:\Users\kiiler\AppData\Roaming\Microsoft\Iojivkuo\iojivku.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/2/7, 15:16:42"
"";", C:\Program Files\Internet Explorer\iexplore.exe";"Object was blocked";"Process";"2016/2/7, 15:16:42"
"";", C:\USERS\KIILER\DESKTOP\B8AF.TMP.EXE";"Object was blocked";"Process";"2016/2/7, 15:16:42"
"";", C:\Windows\System32\svchost.exe";"Object was blocked";"Process";"2016/2/7, 15:16:42"
"";", C:\Windows\System32\dwm.exe";"Object was blocked";"Process";"2016/2/7, 15:16:42"
"";", C:\Windows\System32\taskhost.exe";"Object was blocked";"Process";"2016/2/7, 15:16:42"
"";", C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe";"Object was blocked";"Process";"2016/2/7, 15:16:42"
"";", C:\Windows\System32\cscript.exe";"Object was blocked";"Process";"2016/2/7, 15:16:42"
"";", C:\Windows\System32\cmd.exe";"Object was blocked";"Process";"2016/2/7, 15:16:42"
"";", C:\Windows\System32\PING.EXE";"Object was blocked";"Process";"2016/2/7, 15:16:42"
"";", C:\USERS\KIILER\APPDATA\LOCAL\TEMP\YYIOWZDCOFFFHIIM.VBS";"Deleted";"File or Directory";"2016/2/7, 15:16:42"
"";", C:\Users\kiiler\AppData\Roaming\Microsoft\Iojivkuo\iojivk.dll";"Deleted, Moved to Virus Vault";"File or Directory";"2016/2/7, 15:16:42"
"";", C:\Program Files\Tencent\QQMicroGameBoxService\1.0.0.3\QQMGBWebserver.exe";"Object was blocked";"Process";"2016/2/7, 15:16:42"
"";", C:\USERS\KIILER\DESKTOP\B8AF.TMP.EXE";"Deleted";"File or Directory";"2016/2/7, 15:16:42"
"";", C:\Users\kiiler\AppData\Roaming\Microsoft\Iojivkuo\iojivku.exe";"Object was blocked";"Process";"2016/2/7, 15:16:42"
"";", HKEY_USERS\S-1-5-21-2236816692-667211127-2861217297-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\CCLEANER MONITORING";"Deleted, Moved to Virus Vault";"Registry value";"2016/2/7, 15:16:42"
"";", HKEY_USERS\S-1-5-21-2236816692-667211127-2861217297-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\UXAX";"Deleted, Moved to Virus Vault";"Registry value";"2016/2/7, 15:16:42"
"";", HKEY_LOCAL_MACHINE\SYSTEM\CONTROLSET001\SERVICES\ATDLCD";"Deleted";"Registry key";"2016/2/7, 15:16:42"



PS.简直丧心病狂。。。。。。

HEMM

双拉黑过MA~
新年快乐~

275751198

360  kill

蓝天二号

ess