Detection ratio: 3 / 55 87.exe

显示全部楼层 · 发表于 2015-12-11 23:32:40

SHA256: 717f9c952ab524b1b265fad27e7a63071228e0462c9a03901d5094085ce1d576
File name: 87.exe
Detection ratio: 3 / 55
Analysis date: 2015-12-11 15:29:36 UTC ( 0 minutes ago )
https://www.virustotal.com/en/fi ... nalysis/1449847776/
AhnLab-V3 Win-Trojan/Teslacrypt.Gen 20151211
Fortinet W32/Kryptik.ECLT!tr 20151211
Rising PE:Trojan.Ransom-Tesla!1.A322 [F] 20151210

总算抢到一个VT首测，果然看不到卡巴云和数字拉黑

显示全部楼层 · 发表于 2015-12-11 23:34:14

黑寡妇miss

显示全部楼层 · 发表于 2015-12-11 23:36:15

卡巴miss

显示全部楼层 · 发表于 2015-12-11 23:37:21

Sophos
扫描未检测
双击未检测

显示全部楼层 · 发表于 2015-12-11 23:41:27

沙盘双击

显示全部楼层 · 发表于 2015-12-11 23:44:37

本帖最后由 pal家族于 2015-12-12 00:13 编辑

扫描也miss，双击？不双击？这是一个问题。

双击SW击杀，详见楼下！！！！

卧槽才双击，结果发现已经拉黑了！！还是可以的！

显示全部楼层 · 发表于 2015-12-11 23:47:10

pal家族发表于 2015-12-11 23:44
扫描也miss，双击？不双击？这是一个问题。

你家卡巴就在VT上收集提取吧

显示全部楼层 · 发表于 2015-12-11 23:51:27

墨家小子发表于 2015-12-11 23:47
你家卡巴就在VT上收集提取吧

哈哈，who knows？

显示全部楼层 · 发表于 2015-12-12 00:01:51

红伞kill

显示全部楼层 · 发表于 2015-12-12 00:08:37

[mw_shl_code=css,true]
12.12.2015 00.02.54;恶意程序的操作已回滚;PDM:Trojan.Win32.Generic;Refocussing Sanding Readies;c:\users\yingzhi\desktop\87.exe;12/12/2015 00:02:54
12.12.2015 00.02.54;恶意程序的操作已回滚;PDM:Trojan.Win32.Generic;Refocussing Sanding Readies;c:\users\yingzhi\desktop\87.exe;12/12/2015 00:02:54
12.12.2015 00.02.54;恶意程序的操作已回滚;PDM:Trojan.Win32.Generic;Refocussing Sanding Readies;c:\users\yingzhi\appdata\roaming\uonxxacroic.exe;12/12/2015 00:02:54
12.12.2015 00.02.54;恶意程序的操作已回滚;PDM:Trojan.Win32.Generic;Refocussing Sanding Readies;c:\users\yingzhi\appdata\roaming\uonxxacroic.exe;12/12/2015 00:02:54
12.12.2015 00.02.54;回滚恶意程序的操作时注册表键值被恢复;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;Refocussing Sanding Readies;c:\users\yingzhi\desktop\87.exe;12/12/2015 00:02:54
12.12.2015 00.02.54;回滚恶意程序的操作时注册表键值被恢复;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;Refocussing Sanding Readies;c:\users\yingzhi\desktop\87.exe;12/12/2015 00:02:54
12.12.2015 00.02.54;回滚恶意程序的操作时注册表键值被恢复;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;Refocussing Sanding Readies;c:\users\yingzhi\desktop\87.exe;12/12/2015 00:02:54
12.12.2015 00.02.54;回滚恶意程序的操作时注册表键值被恢复;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system\enablelinkedconnections;Refocussing Sanding Readies;c:\users\yingzhi\desktop\87.exe;12/12/2015 00:02:54
12.12.2015 00.02.41;恶意程序已删除;PDM:Trojan.Win32.Generic;Refocussing Sanding Readies;c:\users\yingzhi\desktop\87.exe;12/12/2015 00:02:41
12.12.2015 00.02.41;恶意程序已删除;PDM:Trojan.Win32.Generic;Refocussing Sanding Readies;c:\users\yingzhi\desktop\87.exe;12/12/2015 00:02:41
12.12.2015 00.02.41;恶意程序已删除;PDM:Trojan.Win32.Generic;Refocussing Sanding Readies;c:\users\yingzhi\appdata\roaming\uonxxacroic.exe;12/12/2015 00:02:41
12.12.2015 00.02.41;恶意程序已删除;PDM:Trojan.Win32.Generic;Refocussing Sanding Readies;c:\users\yingzhi\appdata\roaming\uonxxacroic.exe;12/12/2015 00:02:41
12.12.2015 00.02.39;检测到恶意程序;PDM:Trojan.Win32.Generic;Refocussing Sanding Readies;c:\users\yingzhi\appdata\roaming\uonxxacroic.exe;12/12/2015 00:02:39
12.12.2015 00.02.39;检测到恶意程序;PDM:Trojan.Win32.Generic;Refocussing Sanding Readies;c:\users\yingzhi\desktop\87.exe;12/12/2015 00:02:39
12.12.2015 00.02.39;检测到恶意程序;PDM:Trojan.Win32.Generic;Refocussing Sanding Readies;c:\users\yingzhi\desktop\87.exe;12/12/2015 00:02:39
[/mw_shl_code]

还是双击了下。。。

[可疑文件] Detection ratio: 3 / 55 87.exe

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

评分