N1H1 loader

显示全部楼层 · 发表于 2015-5-15 21:27:29

乍一看，还以为是禽流感。

感谢EP_X0FF

读国外的东西太费劲，换了几个翻译工具没一个好使的，好像来自卡巴的故乡@pal家族

https://damagelab.org/index.php?showtopic=25839

显示全部楼层 · 发表于 2015-5-15 21:28:27

火绒漏了dll文件，上报~

显示全部楼层 · 发表于 2015-5-15 21:30:49

ess剩dll

显示全部楼层 · 发表于 2015-5-15 21:31:05

[mw_shl_code=css,true]15.05.2015 21.30.53;检测到的对象（文件）已删除。;D:\搜狗高速下载\H1N1\903d299b366ef1ba11538924dd57811aff80b8b91123889b872a098639a8effa;WinRAR 压缩文件管理器;D:\搜狗高速下载\H1N1\903d299b366ef1ba11538924dd57811aff80b8b91123889b872a098639a8effa;05/15/2015 21:30:53;Trojan-Ransom.Win32.Foreign.mhmy
15.05.2015 21.30.53;检测到的对象（文件）已删除。;D:\搜狗高速下载\H1N1\newdev.dll;WinRAR 压缩文件管理器;D:\搜狗高速下载\H1N1\newdev.dll;05/15/2015 21:30:53;HEUR:Trojan.Win32.Generic
[/mw_shl_code]

显示全部楼层 · 发表于 2015-5-15 21:34:24

显示全部楼层 · 发表于 2015-5-15 21:38:44

KES10扫描无果

显示全部楼层 · 发表于 2015-5-15 21:42:28

红伞kill
[mw_shl_code=css,true]Starting the file scan:

Begin scan in 'C:\Documents and Settings\adminstartor\桌面\newdev.dll'
C:\Documents and Settings\adminstartor\桌面\newdev.dll
  [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
Begin scan in 'C:\Documents and Settings\adminstartor\桌面\903d299b366ef1ba11538924dd57811aff80b8b91123889b872a098639a8effa'
C:\Documents and Settings\adminstartor\桌面\903d299b366ef1ba11538924dd57811aff80b8b91123889b872a098639a8effa
  [DETECTION] Is the TR/Crypt.ZPACK.143066 Trojan

Beginning disinfection:
C:\Documents and Settings\adminstartor\桌面\903d299b366ef1ba11538924dd57811aff80b8b91123889b872a098639a8effa
  [DETECTION] Is the TR/Crypt.ZPACK.143066 Trojan
  [NOTE]    The file was moved to the quarantine directory under the name '51f7535d.qua'!
C:\Documents and Settings\adminstartor\桌面\newdev.dll
  [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
  [NOTE]    The file was moved to the quarantine directory under the name '49247caf.qua'![/mw_shl_code]

显示全部楼层 · 发表于 2015-5-15 21:44:01

avira杀

显示全部楼层 · 发表于 2015-5-15 21:53:14

蛋挞剩下dll不杀

显示全部楼层 · 发表于 2015-5-15 22:02:05

dfr1986 发表于 2015-5-15 21:38
KES10扫描无果

KIS可以杀啊

[可疑文件] N1H1 loader

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块