tmp00104aed

显示全部楼层 · 发表于 2016-6-11 23:21:00

qqddliu 发表于 2016-6-11 22:31
加个后缀.exe运行了。

看来kms激活后卸载，再删除目录文件，也还是有残留

显示全部楼层 · 发表于 2016-6-12 07:21:47

McAfee

显示全部楼层 · 发表于 2016-6-12 10:10:54

微软

[mw_shl_code=css,true]C:\Users\XuanXia\Desktop\tmp00104aed\tmp00104aed->(inno#000000)->[b64mz]->(Base64) Infected: HackTool:Win32/AutoKMS [non_writable_container]
C:\Users\XuanXia\Desktop\tmp00104aed\tmp00104aed->(inno#000003)                      Infected: HackTool:Win32/AutoKMS!rfn [non_writable_container]
C:\Users\XuanXia\Desktop\tmp00104aed\tmp00104aed->(inno#000004)->[b64mz]->(Base64) Infected: HackTool:Win32/AutoKMS [non_writable_container]
C:\Users\XuanXia\Desktop\tmp00104aed\tmp00104aed->(inno#000359)                      Infected: HackTool:Win32/AutoKMS [non_writable_container]
C:\Users\XuanXia\Desktop\tmp00104aed\tmp00104aed->(inno#000360)                      Infected: HackTool:Win32/AutoKMS [non_writable_container]
C:\Users\XuanXia\Desktop\tmp00104aed\tmp00104aed->(inno#000365)                      Infected: HackTool:Win32/AutoKMS [non_writable_container][/mw_shl_code]

显示全部楼层 · 发表于 2016-6-12 12:10:34

蓝天二号发表于 2016-6-12 07:21
McAfee

谢谢

显示全部楼层 · 发表于 2016-6-12 12:11:02

轩夏发表于 2016-6-12 10:10
微软

[mw_shl_code=css,true]C:%users\XuanXia\Desktop\tmp00104aed\tmp00104aed->(inno#000000)->->(Ba ...

windows defender

显示全部楼层 · 发表于 2016-6-12 13:39:15

脑控发表于 2016-6-12 12:11
windows defender

MSE

[病毒样本] tmp00104aed

本帖子中包含更多资源

浏览过的版块