加密勒索

显示全部楼层 · 发表于 2016-9-27 11:53:49

lovelive10010 发表于 2016-9-27 08:32
趋势科技对勒索怎样呢，刚刚扫描一个不杀不敢双击

要双击才能看到防护效果

显示全部楼层 · 发表于 2016-9-27 12:10:18

2016-09-26-Afraidgate-Neutrino-EK-flash-exploit.swf

AVG SWF/Exploit.11_D 20160927
AVware Exploit.SWF.Neutrino.a (v) 20160926
AhnLab-V3 SWF/Neutrino.Gen 20160926
Avast SWF:Dropper-A [Heur] 20160927
Avira (no cloud) EXP/FLASH.Pubenush.T.Gen 20160927
CAT-QuickHeal Exp.SWF.Neutrino.A 20160926
DrWeb SWF.Exploit.26 20160927
ESET-NOD32 a variant of SWF/Exploit.ExKit.AMH 20160927
Fortinet Malware_Generic.P0 20160927
GData SWF.Trojan.Agent.6D3LYB 20160927
McAfee Exploit-SWF.bd 20160923
McAfee-GW-Edition BehavesLike.Flash.Dropper.cb 20160926
Qihoo-360 susp.swf.qexvmI.80 20160927
Symantec Trojan.Swifi 20160927
Tencent Win32.Exploit.Agent.Wqdk 20160927
TrendMicro SWF_NEUTRINO.AP 20160927
TrendMicro-HouseCall SWF_NEUTRINO.AP 20160927
VIPRE Exploit.SWF.Neutrino.a (v) 20160927

2016-09-26-Afraidgate-Neutrino-EK-payload-Locky-downloader.exe

AVware BehavesLike.Win32.Malware.mmu (mx-v) 20160926
AhnLab-V3 Trojan/Win32.Kryptik.N2115073941 20160926
Avira (no cloud) TR/Crypt.ZPACK.sewch 20160927
CrowdStrike Falcon (ML) malicious_confidence_100% (W) 20160725
DrWeb Trojan.DownLoader22.52723 20160927
ESET-NOD32 a variant of Win32/Kryptik.FGWK 20160927
Invincea generic.a 20160917
Kaspersky Backdoor.Win32.Fonten.af 20160927
McAfee Artemis!1885518622A6 20160923
McAfee-GW-Edition BehavesLike.Win32.Virut.ph 20160926
Sophos Mal/Generic-S 20160927
Symantec Heur.AdvML.C 20160927
TrendMicro TROJ_CRYPLOD.SVI 20160927
TrendMicro-HouseCall TROJ_CRYPLOD.SVI 20160927

2016-09-26-another-Locky-binary-found-on-the-infected-host.exe

AVware BehavesLike.Win32.Malware.mmu (mx-v) 20160926
AhnLab-V3 Trojan/Win32.Locky.N2115074020 20160926
Avira (no cloud) TR/Crypt.ZPACK.tsflp 20160927
CrowdStrike Falcon (ML) malicious_confidence_100% (W) 20160725
DrWeb Trojan.Encoder.3976 20160927
ESET-NOD32 a variant of Win32/Kryptik.FGWK 20160927
Invincea trojan.win32.skeeyah.a!bit 20160917
Kaspersky Trojan-Ransom.Win32.Locky.cel 20160927
McAfee Artemis!986329AE1F12 20160923
McAfee-GW-Edition BehavesLike.Win32.Pate.cc 20160926
Sophos Mal/Generic-S 20160927
Symantec Heur.AdvML.B 20160927
TrendMicro Ransom_LOCKY.DLDSAPF 20160927
TrendMicro-HouseCall Ransom_LOCKY.DLDSAPF 20160927

2016-09-26-follow-up-download-Locky.exe

AVware BehavesLike.Win32.Malware.mmu (mx-v) 20160926
AhnLab-V3 Trojan/Win32.Locky.N2115074221 20160926
Avast Win32:Malware-gen 20160927
Bkav HW32.Packed.64C7 20160926
CrowdStrike Falcon (ML) malicious_confidence_100% (W) 20160725
DrWeb Trojan.Encoder.6204 20160927
ESET-NOD32 a variant of Win32/Kryptik.FGWK 20160927
Invincea trojan.win32.skeeyah.a!bit 20160917
Kaspersky Trojan-Ransom.Win32.Locky.ceg 20160927
McAfee Artemis!54DA837A93CA 20160923
McAfee-GW-Edition BehavesLike.Win32.Pate.cc 20160926
eScan Trojan.GenericKD.3554989 20160927
Panda Generic Suspicious 20160926
Qihoo-360 Win32/Trojan.Ransom.d64 20160927
Symantec Heur.AdvML.B 20160927
Tencent Win32.Trojan.Locky.Sxew 20160927
TrendMicro Ransom_LOCKY.DLDSAPF 20160927
TrendMicro-HouseCall Ransom_LOCKY.DLDSAPF 20160927

显示全部楼层 · 发表于 2016-9-27 12:25:11

mcafee kill all

显示全部楼层 · 发表于 2016-9-27 12:40:45

解压趋势kill all

显示全部楼层 · 发表于 2016-9-27 12:46:49

ESS解压后秒杀所有

显示全部楼层 · 发表于 2016-9-27 12:49:25

lovelive10010 发表于 2016-9-27 08:32
趋势科技对勒索怎样呢，刚刚扫描一个不杀不敢双击

我刚刚解压全部杀了

显示全部楼层 · 发表于 2016-9-27 12:53:43

bbszy 发表于 2016-9-27 11:53
要双击才能看到防护效果

没沙盘不敢双击

显示全部楼层 · 发表于 2016-9-27 12:54:00

bbszy 发表于 2016-9-27 12:49
我刚刚解压全部杀了

我简中11版本，依然是不杀的

显示全部楼层 · 发表于 2016-9-27 12:55:21

lovelive10010 发表于 2016-9-27 12:54
我简中11版本，依然是不杀的

简中没法用

显示全部楼层 · 发表于 2016-9-27 12:56:19

蓝天二号发表于 2016-9-27 06:25
三个 EXE 貌似执行不起来？没啥行为。。。

AVG 杀了 .swf

不可能没有行为，这三个样本是已经被分析过的
你需要挂梯子

[病毒样本] 加密勒索