BDS/Backdoor.Gen

猥琐大叔

nick20010117

断网双击
报毒真准确

1446547521

URL： https://att.kafan.cn/forum.php?mo ... DkwNjUyMHwxOTYzMDE0
感染: URL:Mal
进程: D:\firefox\firefox.exe

xiaoxiaode1994

火绒（Huorong）        Backdoor/Fynloski.a        2016-02-15
AVG        Trojan horse BackDoor.Generic15.CFFJ        2016-02-15
大蜘蛛（Dr.Web）        BackDoor.Comet.884        2016-02-15
腾讯（Tencent）        Backdoor.Win32.Darkkomet.a        2016-02-15
百度（Baidu）        Trojan.Backdoor.Heur.gen        2016-02-15
瑞星（Rising）        PE:Malware.Generic(Thunder)!1.A1C4        2016-02-15
360（Qihoo 360）        HEUR/QVM11.1.Malware.Gen        2016-02-15
趋势（TrendMicro）        BKDR_FYNLOS.SMM        2016-02-15
熊猫（Panda）        Trj/Genetic.gen        2016-02-15
Avast        Win32:Agent-AWZS        2016-02-15
IKARUS        Backdoor.Win32.DarkKomet        2016-02-15
GDATA        Trojan.Inject.AUZ        2016-02-15
微软（MSE）        Backdoor:Win32/Fynloski.A        2016-02-15
ESET        a variant of Win32/Fynloski.AN trojan        2016-02-15
小红伞（Avira）        BDS/Backdoor.Gen        2016-02-15

https://virusbook.cn/report/scan ... cd9e2-1455519012495

欧阳宣

"D:\Virus\Virus\hooatanition.exe"        "Generic.gj"

aboringman

AVG：

扫描：killed（by WP）；

"";"Trojan horse BackDoor.Generic15.CFFJ, https://att.kafan.cn/forum.php?mo ... DF8MTk2MzAxNA%3D%3D";"Object was blocked";"URL";"2016/2/15, 15:31:36"

"";"Trojan horse BackDoor.Generic15.CFFJ, https://att.kafan.cn/forum.php?mo ... F8MTk2MzAxNA%3D%3D:\hooatanition.exe";"Unresolved";"Embedded element in the archive, email attachment, cookie etc.";"2016/2/15, 15:31:36"

双击：关闭监控，实机双击，IDP击杀之。

"";"IDP.ALEXA.51, C:\Users\killer\Desktop\hooatanition.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/2/15, 15:33:01"
"";", C:\Users\killer\Documents\MSDCSC\msdcsc.exe";"Object was blocked";"Process";"2016/2/15, 15:33:01"
"";", C:\Users\killer\Documents\MSDCSC\msdcsc.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/2/15, 15:33:01"
"";", C:\Users\killer\Desktop\hooatanition.exe";"Object was blocked";"Process";"2016/2/15, 15:33:01"
"";", HKEY_USERS\S-1-5-21-540828005-2055914412-3868506426-1000\SOFTWARE\DC3_FEXEC";"Deleted, Moved to Virus Vault";"Registry key";"2016/2/15, 15:33:01"
"";", HKEY_USERS\S-1-5-21-540828005-2055914412-3868506426-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\MICROUPDATE";"Deleted, Moved to Virus Vault";"Registry value";"2016/2/15, 15:33:01"
"";", HKEY_LOCAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON\\Userinit";"Healed, Moved to Virus Vault";"Registry value";"2016/2/15, 15:33:01"