1   1  /  1  页   跳转

[求助] 关于几个未知病毒的病毒名及其危害

关于几个未知病毒的病毒名及其危害

现有三个病毒不知名称及危害,百度也查不到,请求帮忙!谢谢!
Trojan.Ransom-Tesla.Instruction!1.A457
Malware.25789
Trojan.Win32.Generic.11E73918

用户系统信息:Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 BIDUBrowser/7.6 Safari/537.36
分享到:
gototop
 

回复:关于几个未知病毒的病毒名及其危害

楼主安装的企业版版本是什么?
如果方便,请将相关的病毒样本压缩跟帖发来。
gototop
 

回复 2F 瑞星工程师16 的帖子

瑞星网络版杀毒软件,24版本的。这是杀毒日志中显示病毒名,因为是涉密单位拍照和提日志比较困难。
领导想了解下这三个病毒。你介绍下这病毒叫什么名字,简单说下感染它后的一两点危害就行了。谢谢!
gototop
 

回复:关于几个未知病毒的病毒名及其危害

经核实还是需要提供下病毒样本。
如果方便,请将您的QQ通过短消息发来,工程师会尽快与您联系的。
最后编辑瑞星工程师16 最后编辑于 2016-04-13 16:38:45
gototop
 

回复:关于几个未知病毒的病毒名及其危害

TR/AD.TeslaCrypt.Y.176
摘要

    名稱
    TR/AD.TeslaCrypt.Y.176
    发现日期
    2016年2月12日
    VDF 版本
    7.12.53.104 (2016-02-04 09:26)

病毒說明

'TR' 一詞表示特洛伊木馬程式,它能夠偵察資料來侵害您的隱私,或是對系統執行有害的通知。

作業系統:Microsoft Windows。

傳播方法:透過執行受感染的檔案。

傳播方法:透過造訪受感染的網站。

此惡意程式xxx會竊取敏感性資訊。

    VDF
    7.12.53.104 (2016-02-04 09:26)
    別名
    Avast: Win32:Trojan-gen
    AVG: Generic_r.HEB
    Dr. Web: Trojan.Encoder.3750
    McAfee: GenericR-FVV!8BA8CD6294BB
    Microsoft: Ransom:Win32/Tescrypt!rfn
    G Data: Trojan.Agent.BQEJ
    Kaspersky Lab: Trojan-Banker.Win32.Shifu.akb
    Bitdefender: Trojan.Agent.BQEJ
    ESET: Win32/Filecoder.TeslaCrypt.I trojan
    檔案
    建立下列自身複本:
        %APPDATA%\gcdyomy.exe
    建立下列檔案:
        %USERPROFILE%\My Documents\recover_file_voevqoook.txt
        %DISKDRIVE%\492c324b9eefd9d79f77\amd64\HELP_RECOVER_instructions+cgo.png
        %DISKDRIVE%\492c324b9eefd9d79f77\amd64\HELP_RECOVER_instructions+cgo.txt
        %DISKDRIVE%\492c324b9eefd9d79f77\amd64\HELP_RECOVER_instructions+cgo.html
    重新命名下列檔案:
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1025.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1028.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1029.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1030.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1031.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1032.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1033.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1035.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1036.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1037.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1038.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1040.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1041.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1042.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1043.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1044.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1045.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1046.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1049.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1053.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1055.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.2052.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.2070.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.3082.rtf
        %DISKDRIVE%\Documents and Settings\All Users\Documents\My Music\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma
        %DISKDRIVE%\Documents and Settings\All Users\Documents\My Music\Sample Music\New Stories (Highway Blues).wma
        %DISKDRIVE%\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Blue hills.jpg
        %DISKDRIVE%\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Sunset.jpg
        %DISKDRIVE%\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Water lilies.jpg
    變更下列檔案:
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1025.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1028.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1029.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1030.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1031.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1032.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1033.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1035.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1036.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1037.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1038.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1040.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1041.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1042.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1043.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1044.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1045.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1046.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1049.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1053.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.1055.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.2052.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.2070.rtf
        %DISKDRIVE%\67edd601553864307ce739a3c57414fe\eula.3082.rtf
        %DISKDRIVE%\Documents and Settings\All Users\Documents\My Music\Sample Music\Beethoven's Symphony No. 9 (Scherzo).wma
        %DISKDRIVE%\Documents and Settings\All Users\Documents\My Music\Sample Music\New Stories (Highway Blues).wma
        %DISKDRIVE%\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Blue hills.jpg
        %DISKDRIVE%\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Sunset.jpg
        %DISKDRIVE%\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Water lilies.jpg
        %DISKDRIVE%\Documents and Settings\All Users\Documents\My Pictures\Sample Pictures\Winter.jpg
    刪除下列檔案:
        %temporary internet files%\Content.IE5\QH9ZEEV0\mzsys[1].htm
    插入
        %APPDATA%\gcdyomy.exe
    登錄
    新增下列登錄授權xxx:
        HKEY_CURRENT_USER\Software\xxxsys ("ID": %hex values%)
        HKEY_CURRENT_USER\Software\81C371DB69316EB ("data": %hex values%)
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system ("EnableLinkedConnections": dword:00000001)
        HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ("gatert-12010": "%APPDATA%\gcdyomy.exe")
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run ("gatert-12010": "%APPDATA%\gcdyomy.exe")
    HTTP 請求
        southinstrument.*****emplates/protostar/less/mzsys.php
        bddadmin.*****rdins.fr/js/openlayers/theme/default/img/mzsys.php
        grant-pro.*****emplates/beez3/html/com_newsfeeds/categories/mzsys.php
        iicsdrd.*****mp/mzsys.php
gototop
 

回复 5F 光明右使 的帖子

谢谢,右使
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT