收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › grozse.exe
123下一页
返回列表 发新帖
查看: 3109|回复: 20
收起左侧

[病毒样本] grozse.exe

[复制链接]
heishen2010
发表于 2016-9-17 01:29:25 | 显示全部楼层 |阅读模式
grozse.exe


https://yunpan.cn/ckLUPUAyqs2sB （提取码：7d4e）
回复

举报

mak999
发表于 2016-9-17 03:03:45 | 显示全部楼层
xx

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

欧阳宣
头像被屏蔽
发表于 2016-9-17 03:17:01 | 显示全部楼层
拿下

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

Microsoftheihei
发表于 2016-9-17 07:02:50 | 显示全部楼层
小红伞扫描miss
双击触发APC      已上报

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x

评分

参与人数 1人气 +1 收起 理由
Johnkay.Young + 1 感谢解答： ）

查看全部评分

回复

举报

蓝天二号
发表于 2016-9-17 07:27:36 | 显示全部楼层
AVG MISS  双击未触发IDP。
回复

举报

左手
发表于 2016-9-17 08:20:33 | 显示全部楼层
2016-9-17 08:20:23    删除注册表值 风险级别:未知    阻止并结束进程
进程: c:\documents and settings\administrator\桌面\3384eb87291adcf36a9cb348bc3f85d5061f47c1\3384eb87291adcf36a9cb348bc3f85d5061f47c1\combofix.exe
目标: HKEY_CURRENT_USER\Software\Microsoft\Command Processor\Autorun
规则: [应用程序]?* -> [注册表组]拦截_命令行劫持
回复

举报

心醉咖啡
发表于 2016-9-17 09:06:10 | 显示全部楼层
360kill

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

心痛的伤不起
发表于 2016-9-17 09:19:01 | 显示全部楼层
avast 双击删除
回复

举报

pal家族
发表于 2016-9-17 10:02:48 | 显示全部楼层
17.09.2016 10.02.35;Detected object (file) deleted;D:\360安全浏览器下载\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe;WinRAR 压缩文件管理器;D:\360安全浏览器下载\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe;09/17/2016 10:02:35;Backdoor.Win32.Androm.kqtr
回复

举报

aboringman
发表于 2016-9-17 10:05:25 | 显示全部楼层
本帖最后由 aboringman 于 2016-9-17 10:07 编辑
蓝天二号 发表于 2016-9-17 07:27
AVG MISS  双击未触发IDP。


AVG：

双击：实机双击，IDP击杀之。

"";"IDP.ARES.Generic, C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"

"";", C:\Users\abori\Desktop\37E3E6CC007B4666C6E89D2D38E5826BDEEC708F\grozse.exe";"Object was blocked";"Process";"2016/9/17, 10:02:52"
回复

举报

下一页 »
123下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-13 23:44 , Processed in 0.148722 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表