HoadleyPortfolioApps.exe VT(11/66) llaods8s.exe VT(17/67)

Agu

HoadleyPortfolioApps.exe
掛馬網址：hoadley.net/options/downloads/HoadleyPortfolioApps.exe
VT(11/66)：https://www.virustotal.com/#/fil ... da9139bad/detection

llaods8s.exe
掛馬網址：0959tg.dagestan.su/llaods8s.exe
VT(17/67)：https://www.virustotal.com/#/fil ... 04f77987a/detection

樣本載點(SHA-256前六碼8AF082、1FFF8D，密碼infected)：
https://we.tl/t-puEyRbqYV0

測試：
Malwarebytes - Miss All

更新：HoadleyPortfolioApps.exe可能為誤報。
二更：avast已確認為誤報：

欧阳宣

sentinelOne 杀第二个

静影沉璧

BD2019：扫描全部miss，双击：第一个miss
The file c:\users\administrator.sxcsxc-ajkjjubr\desktop\llaods8s.exe is infected with Atc4.Detection and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.

Kaspersky用户

KSCF监控KILL1

第二个扫描MISS，沙盘运行MISS。

www-tekeze

火绒和智量都只报 llaods8s.exe 。

Jerry.Lin

ESET
2/2

1. Time;Scanner;Object type;Object;Threat;Action;User;Information;Hash;First seen here
   
2. 2018/8/29 15:25:23;Real-time file system protection;file;C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\wetransfer-97ebb5\wetransfer-97ebb5\llaods8s.exe;a variant of Win32/Kryptik.GKGZ trojan;cleaned by deleting;DESKTOP-VPBE70N\zhong;Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe (33F1554BA5E9F414C8A7DFD65A5831C513BD2DB2).;D380EA8E4799B659667E02B11F4096ACB7EE74DB;2018/8/29 15:25:17
   
3. 2018/8/29 15:25:24;Real-time file system protection;file;C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\wetransfer-97ebb5\wetransfer-97ebb5\HoadleyPortfolioApps.exe;a variant of Generik.IVWAVNG trojan;deleted;DESKTOP-VPBE70N\zhong;Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe (33F1554BA5E9F414C8A7DFD65A5831C513BD2DB2).;1FE2E745840DE5F89CCF6023BC9219B71587F4FA;
   

复制代码

Miostartos

WD HoadleyPortfolioApps.exe  scan MISS send to microsoft
llaods8s.exe kill

nick20010117

GD miss all