每日樣本

显示全部楼层 · 发表于 2016-4-3 08:29:59

链接：http://pan.baidu.com/s/1dEIk8MH 密码：e1l5
解壓密碼：infected

显示全部楼层 · 发表于 2016-4-3 08:47:25

诺顿 MISS

双击报错

显示全部楼层 · 发表于 2016-4-3 08:55:42

卡巴miss
看起来没啥问题

显示全部楼层 · 发表于 2016-4-3 10:42:50

2016-4-3 10:42:06 底层磁盘写操作风险级别:高阻止
进程: c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe
目标: \Device\Ide\IdePort0
规则: [应用程序]*.exe

2016-4-3 10:42:06 底层磁盘写操作风险级别:高阻止
进程: c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe
目标: \Device\Ide\IdePort0
规则: [应用程序]c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe

2016-4-3 10:42:06 底层磁盘写操作风险级别:高阻止
进程: c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe
目标: \Device\Ide\IdePort1
规则: [应用程序]c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe

2016-4-3 10:42:06 底层磁盘写操作风险级别:高阻止
进程: c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe
目标: \Device\Ide\IdePort2
规则: [应用程序]c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe

2016-4-3 10:42:06 底层磁盘写操作风险级别:高阻止
进程: c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe
目标: \Device\Ide\IdePort3
规则: [应用程序]c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe

2016-4-3 10:42:06 底层磁盘写操作风险级别:高阻止
进程: c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe
目标: \Device\Harddisk0\DR0
规则: [应用程序]c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe

2016-4-3 10:42:06 创建注册表项风险级别:中阻止
进程: c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe
目标: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.key
规则: [注册表组]拦截_重要关联 -> [注册表]HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*

2016-4-3 10:42:06 创建注册表项风险级别:中阻止
进程: c:\documents and settings\administrator\桌面\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3\9eb823eae86ed017f16487808518034aac8a7d3f40836f0144d03c15f7c105e3.exe
目标: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.pte
规则: [注册表组]拦截_重要关联 -> [注册表]HKEY_LOCAL_MACHINE\SOFTWARE\Classes\*

显示全部楼层 · 发表于 2016-4-3 11:37:47

BD扫描miss
ATCkill

显示全部楼层 · 发表于 2016-4-3 12:08:44

火绒pass。。。。。

显示全部楼层 · 发表于 2016-4-5 10:55:01

ESET Miss

显示全部楼层 · 发表于 2016-4-5 15:26:13

瑞星报毒

显示全部楼层 · 发表于 2016-4-5 15:59:21

红伞杀'BDS/Pigeon.AA [backdoor]'

显示全部楼层 · 发表于 2016-4-8 21:30:02

AVG双击miss
程序成功运行
不排除我中毒了

[可疑文件] 每日樣本

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块