Ransom:Win32/Tescrypt.H Detection ratio: 3 / 55

显示全部楼层 · 发表于 2016-2-25 20:39:01

SHA256: 800cabcf1aa7ef777c334ec4a60c25419a786295b79030129ff0f2c9e7b104d1
File name: 30.rar
Detection ratio: 3 / 55
Analysis date: 2016-02-25 12:34:08 UTC ( 0 minutes ago )

ESET-NOD32 Win32/Filecoder.TeslaCrypt.I
Microsoft Ransom:Win32/Tescrypt.H
Rising PE:Trojan.Ransom-Tesla!1.A456 [F]

显示全部楼层 · 发表于 2016-2-25 20:41:57

卡巴解压杀

25.02.2016 20.40.34;检测到的对象（文件）已删除。;C:\Users\Administrator\Downloads\30.exe;C:\Users\Administrator\Downloads\30.exe;UDS:DangerousObject.Multi.Generic;未知威胁;02/25/2016 20:40:34
25.02.2016 20.40.34;检测到的对象（文件）已删除。;C:\Users\Administrator\Downloads\29.exe;C:\Users\Administrator\Downloads\29.exe;UDS:DangerousObject.Multi.Generic;未知威胁;02/25/2016 20:40:34

显示全部楼层 · 发表于 2016-2-25 20:59:44

过bg扫描，360下载保护杀
恢复，双击，29号，360杀，30号bg杀

显示全部楼层 · 发表于 2016-2-25 20:59:56

ESS9

显示全部楼层 · 发表于 2016-2-25 21:57:35

AVG：

扫描：miss all；

双击：实机双击，IDP双杀。（终于正常了。。。。。。）

"";"IDP.ALEXA.51, C:\USERS\KILLER\DESKTOP\29.EXE";"Deleted";"File or Directory";"2016/2/25, 21:53:26"

"";", C:\USERS\KILLER\DESKTOP\29.EXE";"Object was blocked";"Process";"2016/2/25, 21:53:26"

"";", C:\Windows\jywavgasamel.exe";"Object was blocked";"Process";"2016/2/25, 21:53:26"

"";", C:\Windows\System32\cmd.exe";"Object was blocked";"Process";"2016/2/25, 21:53:26"

"";", C:\Windows\jywavgasamel.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/2/25, 21:53:26"

"";", C:\USERS\KILLER\DESKTOP\29.EXE";"Object was blocked";"Process";"2016/2/25, 21:53:26"

"";"IDP.SMP.12, C:\USERS\KILLER\DESKTOP\30.EXE";"Deleted";"File or Directory";"2016/2/25, 21:54:12"

"";", C:\USERS\KILLER\DESKTOP\30.EXE";"Object was blocked";"Process";"2016/2/25, 21:54:12"

"";", C:\Windows\jatytlajvacj.exe";"Object was blocked";"Process";"2016/2/25, 21:54:12"

"";", C:\Windows\System32\cmd.exe";"Object was blocked";"Process";"2016/2/25, 21:54:12"

"";", C:\Windows\jatytlajvacj.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/2/25, 21:54:12"

"";", C:\USERS\KILLER\DESKTOP\30.EXE";"Object was blocked";"Process";"2016/2/25, 21:54:12"

显示全部楼层 · 发表于 2016-2-25 22:00:52

360双解压云QVM杀

显示全部楼层 · 发表于 2016-2-26 00:06:45

本帖最后由 windows7爱好者于 2016-2-26 00:34 编辑

显示全部楼层 · 发表于 2016-2-26 10:10:56

发现威胁就应该杀掉啊不然有啥用

显示全部楼层 · 发表于 2016-2-26 11:10:38

icedream89 发表于 2016-2-25 20:59
ESS9

你ESS试用期过了咋办 9又不能用精睿的获取器了

显示全部楼层 · 发表于 2016-2-26 11:11:03

aboringman 发表于 2016-2-25 21:57
AVG：

扫描：miss all；

趋势科技呢？

[病毒样本] Ransom:Win32/Tescrypt.H Detection ratio: 3 / 55

本帖子中包含更多资源

本帖子中包含更多资源

评分

本帖子中包含更多资源