Locky 1只 Cerber 1只

230f4

密码infected


Locky在多人电脑上无法运行，已撤

蓝天二号

卡巴斯基  locky

MingzeLuZero

简中趋势

威胁名称:        Ransom_CERBER.YZC
类型:        威胁
受感染文件:        C:\Users\MingzeLuZero\…\Cerber.exe
处理措施:        已移除
检测方式:        手动扫描

xcvbaby

电脑管家

轩夏

MSE

Cerber.exe
Infected: Ransom:Win32/Cerber

心醉咖啡

毒霸都kill

aboringman

AVG：

扫描：kill all files；

"";"Trojan horse Ransom_r.SJ, C:\Users\Killer\Desktop\Cerber.exe";"Unresolved"

"";"Trojan horse Crypt5.BOQA, C:\Users\Killer\Desktop\Locky.exe";"Unresolved"

双击：关闭监控，实机双击，IDP击杀Cerber.exe【Locky.exe运行后不久自己挂掉了，未被加密】

"";"IDP.ALEXA.51, C:\Users\Killer\Desktop\Cerber.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/7/20, 16:53:20"

"";", C:\Users\Killer\AppData\Roaming\{7BD6BFAF-095E-0C2D-1534-B9629ADB78CC}\FlashPlayerApp.exe";"Object was blocked";"Process";"2016/7/20, 16:53:20"

"";", C:\Windows\System32\cmd.exe";"Object was blocked";"Process";"2016/7/20, 16:53:20"

"";", C:\Users\Killer\AppData\Roaming\{7BD6BFAF-095E-0C2D-1534-B9629ADB78CC}\FlashPlayerApp.exe";"Deleted, Moved to Virus Vault";"File or Directory";"2016/7/20, 16:53:20"

"";", C:\Users\Killer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FlashPlayerApp.lnk";"Healed, Moved to Virus Vault";"File or Directory";"2016/7/20, 16:53:20"

"";", C:\Users\Killer\Desktop\Cerber.exe";"Object was blocked";"Process";"2016/7/20, 16:53:20"

"";", HKEY_USERS\S-1-5-21-3481082169-311058013-23538480-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\FLASHPLAYERAPP";"Deleted, Moved to Virus Vault";"Registry value";"2016/7/20, 16:53:20"

"";", HKEY_USERS\S-1-5-21-3481082169-311058013-23538480-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\\FLASHPLAYERAPP";"Deleted, Moved to Virus Vault";"Registry value";"2016/7/20, 16:53:20"

"";", HKEY_USERS\S-1-5-21-3481082169-311058013-23538480-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\EXPLORER";"Deleted, Moved to Virus Vault";"Registry key";"2016/7/20, 16:53:20"

"";", HKEY_USERS\S-1-5-21-3481082169-311058013-23538480-1000\SOFTWARE\MICROSOFT\COMMAND PROCESSOR\\AUTORUN";"Deleted, Moved to Virus Vault";"Registry value";"2016/7/20, 16:53:20"

"";", HKEY_USERS\S-1-5-21-3481082169-311058013-23538480-1000\CONTROL PANEL\DESKTOP\\SCRNSAVE.EXE";"Deleted, Moved to Virus Vault";"Registry value";"2016/7/20, 16:53:20"

nick20010117

双击DPD kill
关闭监控miss cerber 我要静一静，我打了一天的文档被加密了

pal家族

20.07.2016 17.40.21;Detected object (file) deleted;D:\360安全浏览器下载\SHENMEGUI\Cerber.exe;D:\360安全浏览器下载\SHENMEGUI\Cerber.exe;Trojan-Ransom.Win32.Zerber.iln;Trojan program;07/20/2016 17:40:21
20.07.2016 17.40.21;Detected object (file) deleted;D:\360安全浏览器下载\SHENMEGUI\Locky.exe;D:\360安全浏览器下载\SHENMEGUI\Locky.exe;Trojan-Ransom.Win32.Locky.aex;Trojan program;07/20/2016 17:40:21

两个半小时之后卡巴补杀一个

nick20010117

aboringman 发表于 2016-7-20 16:59
AVG：

扫描：kill all files；

关闭监控，大蜘蛛双击cerber居然漏了@驭龙