1x

Ｍy↘じ★ve

你看我头像

aboringman

ESET：

扫描：killed；

C:\Users\Killer\Desktop\500394b31feeb1e2ed796fbc8123c259bfe9b77b22d51249c3644e33fd3ee253.exe - a variant of MSIL/Kryptik.GSZ trojan - cleaned by deleting [1]

双击：关闭监控，实机双击，AMS击杀之。【本体未被清除】

Time：2016/7/25 14:28:00;

Scanner：Advanced memory scanner;

Object type：file;

Object：Operating memory » 500394b31feeb1e2ed796fbc8123c259bfe9b77b22d51249c3644e33fd3ee253.exe(7196);

Threat：a variant of MSIL/Injector.LNF trojan;

Action：cleaned - contained infected files;

Hash：EB65AA72E4025EDABA718A52350DE7EDB35AE7A7

xcvbaby

百度杀毒：kill

aboringman

AVG：

扫描：killed；

"";"Trojan horse Atros3.CECT, C:\Users\Killer\Desktop\500394b31feeb1e2ed796fbc8123c259bfe9b77b22d51249c3644e33fd3ee253.bin";"Unresolved"

双击：关闭监控，实机双击，IDP击杀本体及其衍生物。【又现SMP及一般行为检测】

"";"IDP.SMP.15, C:\Users\Killer\AppData\Roaming\Microsoft\Windows\ScreenToGif\netprotocol.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/7/25, 14:35:40"

"";", C:\Users\Killer\AppData\Roaming\Microsoft\Windows\ScreenToGif\netprotocol.exe";"Object was blocked";"Process";"2016/7/25, 14:35:40"

"";", C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe";"Object was blocked";"Process";"2016/7/25, 14:35:40"

"";", C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe";"Object was blocked";"Process";"2016/7/25, 14:35:40"

"";", C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe";"Object was blocked";"Process";"2016/7/25, 14:35:40"

"";", C:\Program Files\NVIDIA Corporation\Display\nvtray.exe";"Object was blocked";"Process";"2016/7/25, 14:35:40"

"";", C:\Program Files\Client\client.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/7/25, 14:35:40"

"";", C:\Users\Killer\AppData\Roaming\Microsoft\Windows\ScreenToGif\netprotocol.exe";"Object was blocked";"Process";"2016/7/25, 14:35:40"





"";"General behavioral detection, C:\Users\Killer\Desktop\500394b31feeb1e2ed796fbc8123c259bfe9b77b22d51249c3644e33fd3ee253.bin.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/7/25, 14:35:47"

"";", C:\Users\Killer\Desktop\500394b31feeb1e2ed796fbc8123c259bfe9b77b22d51249c3644e33fd3ee253.bin.exe";"Object was blocked";"Process";"2016/7/25, 14:35:47"

"";", C:\Users\Killer\Documents\man.log";"Deleted, Moved to Virus Vault";"File or Directory";"2016/7/25, 14:35:47"

"";", C:\Users\Killer\Desktop\500394b31feeb1e2ed796fbc8123c259bfe9b77b22d51249c3644e33fd3ee253.bin.exe";"Object was blocked";"Process";"2016/7/25, 14:35:47"

轩夏

MSE

Infected: Trojan:Win32/Skeeyah.A!rfn

Eset小粉絲

Avira
500394b31feeb1e2ed796fbc8123c259bfe9b77b22d51249c3644e33fd3ee253.bin
contained the pattern of 'TR/Dropper.MSIL.vrxq' [trojan]