File name: rad1FC53.tmp.exe Detection ratio: 3 / 54 加密勒索挂马

显示全部楼层 · 发表于 2016-1-12 21:29:18

SHA256: c4b3d5dd0f041c793e85e9f84ccda54f66b7604b6b06244eaca222d45228086f
File name: rad1FC53.tmp.exe
Detection ratio: 3 / 54
Analysis date: 2016-01-12 13:24:15 UTC ( 1 minute ago )
https://www.virustotal.com/en/fi ... nalysis/1452605055/

McAfee-GW-Edition BehavesLike.Win32.PWSZbot.fc 20160112
Qihoo-360 HEUR/QVM10.1.Malware.Gen 20160112
Symantec Suspicious.Cloud.5 20160111

显示全部楼层 · 发表于 2016-1-12 21:50:05

ESET：

扫描：killed（by cloud）；

Time;Scanner;Object type;Object;Threat;Action;User;Information
2016/1/12 21:46:15;Real-time file system protection;file;C:\Users\killer\Desktop\rad1FC53.tmp.exe;Suspicious Object;deleted - quarantined;;Event occurred on a new file created by the application: D:\Haozip\HaoZip.exe.

双击：关闭监控，实机双击，这次AMS靠谱了。。。。。。

Time;Scanner;Object type;Object;Threat;Action;User;Information
2016/1/12 21:48:37;Advanced memory scanner;file;Operating memory » C:\Users\killer\Desktop\rad1FC53.tmp.exe;a variant of Win32/Filecoder.FJ trojan;cleaned - quarantined;;

显示全部楼层 · 发表于 2016-1-12 23:14:33

费尔拦截，但会弹出网页，图片，文档警告，文件没被加密

显示全部楼层 · 发表于 2016-1-13 08:47:58

BD双击,ATC杀掉

显示全部楼层 · 发表于 2016-1-13 09:30:03

猎豹过

显示全部楼层 · 发表于 2016-1-13 09:30:11

是 TR/Crypt.ZPACK.210302 特洛伊木马

显示全部楼层 · 发表于 2016-1-13 13:00:50

360 HEUR/QVM10.1.Malware.Gen

[可疑文件] File name: rad1FC53.tmp.exe Detection ratio: 3 / 54 加密勒索挂马

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块