BehavesLike.Win32.TrojanXtreme.hc

显示全部楼层 · 发表于 2016-2-12 13:46:24

并未删除样本，本身

显示全部楼层 · 发表于 2016-2-12 13:58:40

ESET：

扫描：killed；

Time;Scanner;Object type;Object;Threat;Action;User;Information;Hash

2016/2/12 13:53:40;Real-time file system protection;file;C:\Users\killer\Desktop\BehavesLike.Win32.TrojanXtreme.hc.exe;a variant of Win32/Injector.Autoit.CCD trojan;cleaned by deleting;NT AUTHORITY\SYSTEM;Event occurred during an attempt to access the file by the application: C:\Windows\System32\SearchProtocolHost.exe.;

2016/2/12 13:53:23;Real-time file system protection;file;C:\Users\killer\Desktop\BehavesLike.Win32.TrojanXtreme.hc.exe:Zone.Identifier;a variant of Win32/Injector.Autoit.CCD trojan;cleaned by deleting;;Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.;

双击：关闭监控，实机双击，AMS miss。。。。。。

AVG：

扫描：miss；

双击：实机双击，IDP击杀之。

"";"IDP.Program.D1B0A5C0, C:\Users\killer\Desktop\BehavesLike.Win32.TrojanXtreme.hc.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/2/12, 13:56:32"
"";", C:\Users\killer\Desktop\BehavesLike.Win32.TrojanXtreme.hc.exe";"Object was blocked";"Process";"2016/2/12, 13:56:32"

显示全部楼层 · 发表于 2016-2-12 14:17:24

显示全部楼层 · 发表于 2016-2-12 15:52:38

显示全部楼层 · 发表于 2016-2-12 16:12:02

Artemis!CF8B5AC3C7EF

显示全部楼层 · 发表于 2016-2-12 19:13:44

显示全部楼层 · 发表于 2016-2-12 22:32:21

卡巴斯基安全软件2016：
拦截，报毒名：Trojan-Dropper.Win32.Sysn.bizr

显示全部楼层 · 发表于 2016-2-12 23:26:16

Windows Defender：MISS
瑞星V17：MISS

显示全部楼层 · 发表于 2016-2-12 23:59:17

红伞云查杀“TR/Dropper.Gen (Cloud)”[trojan]

[可疑文件] BehavesLike.Win32.TrojanXtreme.hc

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源