Locky_JS

显示全部楼层 · 发表于 2016-9-22 14:48:05

Pass: infected

显示全部楼层 · 发表于 2016-9-22 15:05:54

本帖最后由胖福于 2016-9-22 15:10 编辑

文件名: tracking data ~4ef33269~.js
威胁名称: JS.Downloader完整路径: f:\norton样本\sonar漏检\诺顿排除\locky_js\tracking data ~4ef33269~.js
____________________________
____________________________

在电脑上
2016-9-22 ( 15:02:43 )

上次使用时间
2016-9-22 ( 15:04:43 )

启动项
否

已启动
否

威胁类型: 病毒。将自身插入或附加到其他程序、文件或电脑区域以感染这些媒介的程序。

tracking data ~4ef33269~.js 威胁名称: JS.Downloader
定位

未知
诺顿社区中使用了此文件的用户数未知。

未知
此文件版本当前未知。

高
此文件具有高风险。
____________________________

来源: 外部介质

源文件:
tracking data ~4ef33269~.js
____________________________

文件操作

受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ tracking data ~4ef33269~.js 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ b69a8p7702.wsf 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ dnne45601.wsf 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ fnwwlv219901.wsf 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ kr9iqpp18301.wsf 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ kv5x6203.wsf 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ lxwq2102.wsf 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ nwkg9t47501.wsf 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ qjj233601.wsf 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ rin912202.wsf 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ rxxrn463601.wsf 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ smyl8004.wsf 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ tracking data ~4e529e85~.js 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ tracking data ~b391b8~.js 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ tracking data ~c23891c1~.js 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ updated order ~5f2b541~ pdf.js 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ updated order ~a4b321a1~ pdf.js 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ updated order ~ced9114~ pdf.js 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ updated order ~d0461d3~ pdf.js 已删除
受感染文件: f:\norton样本\sonar漏检\诺顿排除\locky_js\ wy1tlgz8402.wsf 已删除
____________________________

文件指纹 - SHA:
9da027fb0ef979c5d30f32fddd5f854c7697dc91c9ff723df9466504b06c0cf6
文件指纹 - MD5:
不可用

显示全部楼层 · 发表于 2016-9-22 15:16:35

本帖最后由而我到底是谁于 2016-9-22 15:24 编辑

ESET解压 20x

显示全部楼层 · 发表于 2016-9-22 15:20:04

本帖最后由轩夏于 2016-9-22 15:21 编辑

MSE

[mw_shl_code=css,true]C:\Users\XuanXia\Desktop\Locky_JS\B69A8P7702.wsf                   Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\Locky_JS\DNNE45601.wsf                   Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\Locky_JS\FNWWLV219901.wsf                Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\Locky_JS\KR9IQPP18301.wsf                Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\Locky_JS\KV5X6203.wsf                      Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\Locky_JS\LXWQ2102.wsf                      Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\Locky_JS\NWKG9T47501.wsf                   Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\Locky_JS\QJJ233601.wsf                   Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\Locky_JS\RIN912202.wsf                   Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\Locky_JS\RXXRN463601.wsf                   Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\Locky_JS\SMYL8004.wsf                      Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\Locky_JS\tracking data ~4E529E85~.js       Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\Locky_JS\tracking data ~4EF33269~.js       Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\Locky_JS\tracking data ~B391B8~.js       Infected: TrojanDownloader:JS/Swabfex.C
C:\Users\XuanXia\Desktop\Locky_JS\tracking data ~C23891C1~.js       Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\Locky_JS\updated order ~5F2B541~ pdf.js    Infected: TrojanDownloader:JS/Swabfex.C
C:\Users\XuanXia\Desktop\Locky_JS\updated order ~A4B321A1~ pdf.js Infected: TrojanDownloader:JS/Swabfex.C
C:\Users\XuanXia\Desktop\Locky_JS\updated order ~CED9114~ pdf.js    Infected: TrojanDownloader:JS/Swabfex.C
C:\Users\XuanXia\Desktop\Locky_JS\updated order ~D0461D3~ pdf.js    Infected: TrojanDownloader:JS/Swabfex.C
C:\Users\XuanXia\Desktop\Locky_JS\WY1TLGZ8402.wsf                   Infected: TrojanDownloader:JS/Swabfex.P[/mw_shl_code]

显示全部楼层 · 发表于 2016-9-22 15:34:22

BD清空
[mw_shl_code=css,true]D:\Virus\Locky_JS\QJJ233601.wsf=>(INFECTED_JS)
JS:Trojan.Downloader.Nemucod.BB
Deleted
D:\Virus\Locky_JS\updated order ~D0461D3~ pdf.js
Generic.JS.NemucodA.57FDC160
Deleted
D:\Virus\Locky_JS\tracking data ~C23891C1~.js
Trojan.GenericKD.3539870
Deleted
D:\Virus\Locky_JS\B69A8P7702.wsf=>(INFECTED_JS)
JS:Trojan.Crypt.PV
Deleted
D:\Virus\Locky_JS\WY1TLGZ8402.wsf=>(INFECTED_JS)
JS:Trojan.Crypt.PV
Deleted
D:\Virus\Locky_JS\tracking data ~4E529E85~.js
Trojan.JS.RQL
Deleted
D:\Virus\Locky_JS\updated order ~CED9114~ pdf.js
Generic.JS.NemucodA.69935EB8
Deleted
D:\Virus\Locky_JS\KV5X6203.wsf=>(INFECTED_JS)
JS:Trojan.Crypt.PV
Deleted
D:\Virus\Locky_JS\KR9IQPP18301.wsf=>(INFECTED_JS)
JS:Trojan.Crypt.PV
Deleted
D:\Virus\Locky_JS\RIN912202.wsf=>(INFECTED_JS)
JS:Trojan.Crypt.PV
Deleted
D:\Virus\Locky_JS\SMYL8004.wsf=>(INFECTED_JS)
JS:Trojan.Crypt.PV
Deleted
D:\Virus\Locky_JS\updated order ~A4B321A1~ pdf.js
Generic.JS.NemucodA.69935EB8
Deleted
D:\Virus\Locky_JS\updated order ~5F2B541~ pdf.js
Generic.JS.NemucodA.69935EB8
Deleted
D:\Virus\Locky_JS\FNWWLV219901.wsf=>(INFECTED_JS)
JS:Trojan.Crypt.PV
Deleted
D:\Virus\Locky_JS\NWKG9T47501.wsf=>(INFECTED_JS)
JS:Trojan.Downloader.Nemucod.BB
Deleted
D:\Virus\Locky_JS\DNNE45601.wsf=>(INFECTED_JS)
JS:Trojan.Downloader.Nemucod.BB
Deleted
D:\Virus\Locky_JS\tracking data ~B391B8~.js
Trojan.GenericKD.3539857
Deleted
D:\Virus\Locky_JS\RXXRN463601.wsf=>(INFECTED_JS)
JS:Trojan.Downloader.Nemucod.BB
Deleted
D:\Virus\Locky_JS\LXWQ2102.wsf=>(INFECTED_JS)
JS:Trojan.Crypt.PV
Deleted
D:\Virus\Locky_JS\tracking data ~4EF33269~.js
Trojan.GenericKD.3540386
Deleted[/mw_shl_code]

显示全部楼层 · 发表于 2016-9-22 17:59:48

AVG 催死挣扎。。。。。全部解决

显示全部楼层 · 发表于 2016-9-22 18:16:12

蓝天二号发表于 2016-9-22 17:59
AVG 催死挣扎。。。。。全部解决

这才是我想要看到的，，，

显示全部楼层 · 发表于 2016-9-22 19:07:28

360清空

显示全部楼层 · 发表于 2016-9-22 19:59:28

火绒清空了

显示全部楼层 · 发表于 2016-9-23 13:15:41

WD全歼

[病毒样本] Locky_JS

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源