假火绒剑

hhhw

2849 发表于 2018-8-28 19:58
你是不是搞了个 @安全守护者 今天帖子里的那个？

不是的，今天打开过火绒剑，然后就在桌面上发现了

2849

hhhw 发表于 2018-8-29 12:13
不是的，今天打开过火绒剑，然后就在桌面上发现了

我比过你发的和https://bbs.kafan.cn/thread-2130933-1-1.html中的文件，md5都一样，你和我说不是他那贴里拿来的？

www-tekeze

hhhw 发表于 2018-8-29 12:13
不是的，今天打开过火绒剑，然后就在桌面上发现了

打开火绒剑就出现了？ 那是火绒剑释放的病毒文件？？ 你很不老实啊，楼上都帮你比较过MD5了。。

静影沉璧

BD2019，双击后似乎报勒索
1.The process C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\HRsword.exe manifests ransomware behavior and was blocked. Your files have been protected from being altered.
2.The file c:\users\administrator.sxcsxc-ajkjjubr\desktop\hrsword.exe is infected with Atc4.Detection and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.
3.The file c:\users\administrator.sxcsxc-ajkjjubr\appdata\local\temp\a519.tmp\a51a.tmp\a51b.bat is infected with Atc4.Detection and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.
4.The file c:\users\administrator.sxcsxc-ajkjjubr\desktop\helper.exe is infected with Atc4.Detection and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.
5.The file c:\users\administrator.sxcsxc-ajkjjubr\appdata\local\temp\a846.tmp\a847.tmp\a857.bat is infected with Atc4.Detection and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.
6.The file c:\users\administrator.sxcsxc-ajkjjubr\appdata\local\temp\aa2a.tmp\aa2b.tmp\aa2c.bat is infected with Atc4.Detection and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.
7.The file c:\users\administrator.sxcsxc-ajkjjubr\appdata\local\temp\aa59.tmp\aa5a.tmp\aa5b.bat is infected with Atc4.Detection and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.
8.Feature:Advanced Threat Defense
Bitdefender detected potentially malicious behavior and blocked all applications involved.

话说好久不见这么多条日志

xique666

火绒kill

hhhw

2849 发表于 2018-8-29 12:49
我比过你发的和https://bbs.kafan.cn/thread-2130933-1-1.html中的文件，md5都一样，你和我说不是他那贴 ...

hhhw

www-tekeze 发表于 2018-8-29 13:15
打开火绒剑就出现了？ 那是火绒剑释放的病毒文件？？ 你很不老实啊，楼上都帮你比较过MD5了。。

......

hhhw

我也忘了是不是我下的了

独赢缠身

hhhw 发表于 2018-9-2 10:57
我也忘了是不是我下的了

你很不老实，