厉害木马

aboringman

AVG：

扫描：killed；（com文件）

"";"Trojan horse Generic_r.GIK, http://sz.yun.ftn.qq.com/ftn_handler/f2796ed46b9f18612b11aa4dcd7ac566e1366bcabe5e4a1754e84171f8e42b52/?fname=%E5%9C%B0%E5%9B%BE%E5%9D%90%E6%A0%87.rar&from=30111&version=2.0.0.2&uin=2822504848";"Object was blocked";"URL";"2016/3/14, 19:10:11"

"";", http://sz.yun.ftn.qq.com/ftn_handler/f2796ed46b9f18612b11aa4dcd7ac566e1366bcabe5e4a1754e84171f8e42b52/?fname=%E5%9C%B0%E5%9B%BE%E5%9D%90%E6%A0%87.rar&from=30111&version=2.0.0.2&uin=2822504848:\地图坐标\1地图坐标.lnk";"Clean";"Embedded element in the archive, email attachment, cookie etc.";"2016/3/14, 19:10:11"

"";"Trojan horse Generic_r.GIK, http://sz.yun.ftn.qq.com/ftn_handler/f2796ed46b9f18612b11aa4dcd7ac566e1366bcabe5e4a1754e84171f8e42b52/?fname=%E5%9C%B0%E5%9B%BE%E5%9D%90%E6%A0%87.rar&from=30111&version=2.0.0.2&uin=2822504848:\地图坐标\picture.com";"Unresolved";"Embedded element in the archive, email attachment, cookie etc.";"2016/3/14, 19:10:11"

"";", http://sz.yun.ftn.qq.com/ftn_handler/f2796ed46b9f18612b11aa4dcd7ac566e1366bcabe5e4a1754e84171f8e42b52/?fname=%E5%9C%B0%E5%9B%BE%E5%9D%90%E6%A0%87.rar&from=30111&version=2.0.0.2&uin=2822504848:\地图坐标\Release.dll";"Clean";"Embedded element in the archive, email attachment, cookie etc.";"2016/3/14, 19:10:11"

双击：关闭监控，实机双击，IDP击杀之。

"";"IDP.Trojan.6AFF9849, C:\Users\killer\Desktop\地图坐标\picture.com";"Deleted, Moved to Virus Vault";"File or Directory";"2016/3/14, 19:11:35"

"";", C:\Users\killer\AppData\Roaming\31205c585191ee8f274a222cbdc2b55b\crossfire.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/3/14, 19:11:35"

"";", C:\Users\killer\AppData\Roaming\31205c585191ee8f274a222cbdc2b55b\Release.dll";"Deleted, Moved to Virus Vault";"File or Directory";"2016/3/14, 19:11:35"

"";", C:\Users\killer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\31205c585191ee8f274a222cbdc2b55b.lnk";"Deleted, Moved to Virus Vault";"File or Directory";"2016/3/14, 19:11:35"

"";", C:\Users\killer\Desktop\地图坐标\picture.com";"Object was blocked";"Process";"2016/3/14, 19:11:35"

真是熟面孔。。。。。。

送信Y

数字杀了

z2009

过bg扫描，双击，杀

275751198

360入库了

ymb668888

卡巴下载直接拦截
14.03.2016 20.15.30;检测到的对象 ( 文件 ) 无法清除。;http://sz.yun.ftn.qq.com/ftn_han ... mp;uin=2822504848//地图坐标\Release.dll;http://sz.yun.ftn.qq.com/ftn_han ... mp;uin=2822504848//地图坐标\Release.dll;Backdoor.Win32.Farfli.adbc;木马程序;03/14/2016 20:15:30

cxy密斯

sophos删除

僵尸爱上猫

nis kill

沧桑浪子

和你上次那个是同一类应该
http://bbs.kafan.cn/thread-2030744-1-1.html

沧桑浪子

木马的行为是什么？远控还是盗号？

llcy

类型:木马-QVM16.0.Malware.Gen
描述:木马是一种伪装成正常文件的恶意软件，会盗取您的帐号、密码等隐私资料。
扫描引擎:QVM Ⅱ人工智能引擎
文件路径:C:\Users\DurWre\Desktop\Down\地图坐标\picture.com
文件大小:328K (335,872 字节)
文件版本:6.1.7600.16385 (win7_rtm.090713-1255)
文件描述:Microsoft Management Console
文件指纹（MD5）:aa83e598c2b4f7efbcec116780919b05
处理建议:隔离文件