10S+10M（18.06.07）

小淘气

我发现卡巴的主房很给力当然前提是关闭云防御。

真小读者

微点：S（4/10）+M（3/10）=T（7/20）

双击：





双击M：

Severn'

小淘气 发表于 2018-6-8 01:40
关闭云防御，卡巴主房杀得剩下1个，一个8运行不了

兄弟免费版有主防？

Jirehlov1234

小淘气 发表于 2018-6-8 01:40
关闭云防御，卡巴主房杀得剩下1个，一个8运行不了

感谢测试主防

tao8023yy

nod试试。

aboringman

BD：S【10/10】+M【4/10】=T【14/20】，70%

ATD killed all the rest of files.【except the 9.exe，its ramification was killed by the Antivirus Component；and the 10.exe was blocked by the Web Protection【Not killed】】

The ramification of 9.exe：

The file c:\users\killer\appdata\local\temp\38386703.bat is infected with Trojan.BAT.AAGK and was moved to quarantine.


10.exe：

1. The application 10.exe accesses a web resource http://185.243.112.157/~zadmin/kzy/conn.php  that has been detected as infected. The web resource has been successfully blocked and your PC is now safe.

复制代码

2605276004x

，就一个. 发表于 2018-6-7 20:45
我这里 诺顿 全杀 大部分都是 ABC杀

他那NS可能是MAC版，库和win版不一致。ABC都是机器学习杀，和云无关

ATP_synthase

Severn' 发表于 2018-6-8 03:33
兄弟免费版有主防？

19版有

Nocria

ESET emptied.

/Users/sergioramos/Documents/TTKN/10/1.exe - Win32/Spy.Ursnif.BO trojan
/Users/sergioramos/Documents/TTKN/10/2.exe - Win32/TrojanDownloader.Zurgop.DA trojan
/Users/sergioramos/Documents/TTKN/10/3.exe - a variant of Win32/Injector.CLNQ trojan
/Users/sergioramos/Documents/TTKN/10/4.exe - Win32/Spy.Ursnif.BO trojan
/Users/sergioramos/Documents/TTKN/10/5.exe - Win32/Emotet.BK trojan
/Users/sergioramos/Documents/TTKN/10/6.exe - a variant of Win32/Kryptik.GHNV trojan
/Users/sergioramos/Documents/TTKN/10/7.exe - a variant of MSIL/Kryptik.OIM trojan
/Users/sergioramos/Documents/TTKN/10/8.scr - a variant of Win32/Injector.DYMD trojan
/Users/sergioramos/Documents/TTKN/10/9.exe » NSIS » deflation.dll - a variant of Win32/Injector.DYND trojan
/Users/sergioramos/Documents/TTKN/10/10.exe » NSIS » presuppositions.dll - a variant of Win32/Injector.DYND trojan
/Users/sergioramos/Documents/TTKN/10/Modifed/1.exe - Win32/Spy.Ursnif.BO trojan
/Users/sergioramos/Documents/TTKN/10/Modifed/10.exe » NSIS » presuppositions.dll - a variant of Win32/Injector.DYND trojan
/Users/sergioramos/Documents/TTKN/10/Modifed/2.exe - Win32/TrojanDownloader.Zurgop.DA trojan
/Users/sergioramos/Documents/TTKN/10/Modifed/3.exe - a variant of Win32/Injector.CLNQ trojan
/Users/sergioramos/Documents/TTKN/10/Modifed/4.exe - Win32/Spy.Ursnif.BO trojan
/Users/sergioramos/Documents/TTKN/10/Modifed/5.exe - Win32/Emotet.BK trojan
/Users/sergioramos/Documents/TTKN/10/Modifed/6.exe - Suspicious Object
/Users/sergioramos/Documents/TTKN/10/Modifed/7.exe - a variant of MSIL/Kryptik.OIM trojan
/Users/sergioramos/Documents/TTKN/10/Modifed/8.scr - a variant of Win32/Injector.DYMD trojan
/Users/sergioramos/Documents/TTKN/10/Modifed/9.exe » NSIS » deflation.dll - a variant of Win32/Injector.DYND trojan

，就一个.

2605276004x 发表于 2018-6-8 10:10
他那NS可能是MAC版，库和win版不一致。ABC都是机器学习杀，和云无关

谢谢解答