Ransomware+ email

Eset小粉絲

Avira - VBS/Dldr.Nemucod.AM VBS script virus

刚入库

vm001

我来测试下金山



如何这步放过去或者说用户直接运行的是exe，那就完蛋操了



问过金山官人，我说是毒霸没有拦修改文档这个点，他们说多个拦截合并了（当我是傻子）结果屡次测试本本就拦截不了

顺便看下，毒霸当初吹牛的清爽呢？见阎王去了吧，说过极速版过不过三个月嘛，果然如此

jasonliul

Trojan.Script.Heuristic-js.iacgm Description
Trojan.Script.Heuristic-js.iacgm is a Trojan that circulates as a code in a form of a JavaScript file. This type of file commonly exists on the web server and starts once it registers a visitor.

JS:Trojan.Script.AAR can be an individual file or an obfuscated script inserted into the malicious website.
Trojan.Script.Heuristic-js.iacgm may create a code to have a unique signature for each website, thus, it may be difficult for anti-virus programs to find and uninstall Trojan.Script.Heuristic-js.iacgm.

It is included in the header of the infected file and may pose as a part of the website.
Trojan.Script.Heuristic-js.iacgm may take advantages of vulnerabilities in Adobe Reader and Flash Player.
Trojan.Script.Heuristic-js.iacgm may use this weakness to distribute the code into the PC user's default web browser and control the search results on the affected PC.
Trojan.Script.Heuristic-js.iacgm may reroute the PC user to a website that includes other malware threats or rogue applications. Trojan.Script.Heuristic-js.iacgm may attempt to divert computer users to doubtful websites that were designed by scammers to earn money through pay-per-click ads and associated resources.
Trojan.Script.Heuristic-js.iacgm may search the targeted computer for accounts that it may use to hack a legal website. Trojan.Script.Heuristic-js.iacgm may strive to steal online accounts and FTP credentials.
Trojan.Script.Heuristic-js.iacgm may store collected data into a text file and transfer it to a cybercriminal.  

这个玩具不错.........

心醉咖啡

vm001 发表于 2016-7-13 23:24
我来测试下金山

不考虑主防加个拦截点，防止对文档的修改，而是一味磕在这后台下载。谁知道毒霸是不是只要是脚本后台下载都拦截，六亲不认

windows7爱好者

试图启动下载的EXE
然而......

轩夏

Eset小粉絲 发表于 2016-7-13 20:28
怎么收到这类的邮件 我也想收收看

去注册各种恶意论坛~~~服务神马的

nick20010117

HenryWongSan

Eset小粉絲 发表于 2016-7-13 20:28
怎么收到这类的邮件 我也想收收看

1.看你运气如何
2.提升运气有以下方法，做完香城上年度科举ICT科卷
然后你会发现你的运气会比他好
http://www.hkeaa.edu.hk/DocLibra ... le-ict-Level1-C.pdf