Ransom.GandCrab (18.9.26)

显示全部楼层 · 发表于 2018-9-26 18:36:33

infected

显示全部楼层 · 发表于 2018-9-26 18:39:29

BDF扫描KILL

显示全部楼层 · 发表于 2018-9-26 18:42:44

本帖最后由 191196846 于 2018-9-26 18:44 编辑

Time;Scanner;Object type;Object;Threat;Action;User;Information;Hash;First seen here
2018/9/26 18:42:24;Real-time file system protection;file;D:\迅雷下载\病毒测试区\1\1.exe;a variant of Win32/Filecoder.GandCrab.D trojan;cleaned by deleting;;Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe (6878FB97113E60307F61B28688D717EDC3E753F0).;6B7A64E2D00DB1E874864E24EA13AC768E4E2BA3;2018/9/26 18:42:22

复制代码

VirusTotal Smart Scanner
Scan Time: 2018-09-26-18-44-29
Scan Duration: 2 seconds
Scan Target: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\1
Number of Scan Files: 1
Number of Infected Files: 1
Sensitivity: 80
Scan PE only: True
Auto Upload: True
Grayware Detection: True
Threats:
Ransom.Generic sha256: ac9479e775519cae84c96decfca205574fee54529d91de3a39c31b56a257399d Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\1\1.exe

复制代码

显示全部楼层 · 发表于 2018-9-26 18:46:17

TR/Crypt.ULPM.Gen

2015年的老病毒

显示全部楼层 · 发表于 2018-9-26 18:46:37

CCAV扫描miss，双击，提示不是有效的win32应用程序。已上报Valkyrie

显示全部楼层 · 发表于 2018-9-26 18:46:47

SEP kill

显示全部楼层 · 发表于 2018-9-26 19:03:38

本帖最后由 761773275 于 2018-9-26 19:05 编辑

K7 TotalSecurity扫描miss
双击无法运行

显示全部楼层 · 发表于 2018-9-26 19:30:11

显示全部楼层 · 发表于 2018-9-27 09:16:15

卡巴kill

显示全部楼层 · 发表于 2018-9-27 11:02:34

火绒kill 1X，智量清空。

[病毒样本] Ransom.GandCrab (18.9.26)