恶意样本一枚

显示全部楼层 · 发表于 2018-7-4 08:21:30

Thank you for contacting Kaspersky Lab

The files have been scanned in automatic mode.

No information about the specified files can be found in the antivirus databases:
1.reg
Sysprep.inf
filtered_attachments.txt

We will thoroughly analyze the files you sent. If the result of the analysis is different from this automatic scan result, you will be notified via email.

This is an automatically generated message. Please do not reply to it.

Anti-Virus Lab, Kaspersky Lab HQ

显示全部楼层 · 发表于 2018-7-4 10:08:17

360 Win32/Trojan

显示全部楼层 · 发表于 2018-7-4 10:48:37

操作程序：C:\Documents and Settings\\Local Settings\Temp\360zip$Temp\360$0\优启通\Program Files\xt\xt.exe
网络动作：外联 TCP 120.25.97.75:80
本地地址:0.0.0.0:1489
用户操作：已允许

操作者：C:\Documents and Settings\Local Settings\Temp\360zip$Temp\360$0\优启通\Program Files\xt\xt.exe
病毒路径：C:\Documents and Settings\Local Settings\Temp\360zip$Temp\360$0\优启通\Program Files\xt\jk.exe
病毒名称：HVM:TrojanDownloader/VBCode.gen!A
病毒ID：4D089366BDAA1B03
用户操作：已清除

显示全部楼层 · 发表于 2018-7-4 21:50:19

双击那个exe的会报。。

显示全部楼层 · 发表于 2018-7-4 21:53:15

122324963 发表于 2018-7-4 21:51
Tr/ransom.jb

这名字真亮。

显示全部楼层 · 发表于 2018-7-7 21:56:13

[病毒样本] 恶意样本一枚

本帖子中包含更多资源