TSPY_TRICKLOAD.END armanistand.png

greenfinger168

ESS

PanzerVIIIMaus

abcxzr5 发表于 2017-8-15 16:04
360kill

呃我三鹿灵的怎么报QVM20.1.30D3……

左手

2017-8-16 07:39:28    创建文件夹 风险级别:未知    允许
进程: c:\documents and settings\administrator\桌面\cqgcf.exe
目标: C:\Documents and Settings\Administrator\Application Data\winapp
规则: [应用程序]?:\*\*\*\* -> [文件]c:\documents and settings\*\application data\*

2017-8-16 07:39:35    创建文件 风险级别:未知    允许
进程: c:\documents and settings\administrator\桌面\cqgcf.exe
目标: C:\Documents and Settings\Administrator\Application Data\winapp\Bpfbe.exe
规则: [应用程序]?:\*\*\*\* -> [文件]c:\documents and settings\*\application data\*

2017-8-16 07:39:40    创建新进程 风险级别:未知    允许
进程: c:\documents and settings\administrator\桌面\cqgcf.exe
目标: c:\documents and settings\administrator\application data\winapp\bpfbe.exe
命令行: "C:\Documents and Settings\Administrator\Application Data\winapp\Bpfbe.exe"
规则: [应用程序]??\?* -> [子应用程序]c:\documents and settings\*\application data\*\*.exe

2017-8-16 07:39:40    加载动态链接库 风险级别:中    阻止
进程: c:\documents and settings\administrator\application data\winapp\bpfbe.exe
目标: c:\windows\system32\mstask.dll
规则: [应用程序]* -> [动态链接库]*\mstask.dll

cdyism

X-Sec KILL
[mw_shl_code=css,true]**********************X-Sec CommandLine Scanner File Scan*********************
Log: Enabled
Heuristic Engine: Enabled
Cloud Engine: Enabled
Resolve Threats: Scan only
Database Version: 2017.08.15.01
Scan Target: C:\Users\Downloads\Cqgcf
******************************X-Sec Antivirus Team****************************
[!]C:\Users\Downloads\Cqgcf\Cqgcf.exe -> Trojan.Win32.DynaCall.A
Scan finished!
Elapsed Time: Less than 1 second
Total File: 1
Skipped File: 0
Infected File: 1[/mw_shl_code]