b5cc570c578aed2629a122269162c72741a68e0f0a2e52efcff1790572b9ed5c

显示全部楼层 · 发表于 2018-9-30 22:29:34

https://www.welivesecurity.com/2 ... rtesy-sednit-group/

https://my.mixtape.moe/vxgqeu.7z

显示全部楼层 · 发表于 2018-9-30 22:31:53

智量kill all

显示全部楼层 · 发表于 2018-9-30 22:32:08

30.09.2018 22.31.40;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\11x\37f15647c26d475db805048d6592aa153533ac5f4373145c75e24012a51ad9f8;C:\Users\Administrator\Desktop\11x\37f15647c26d475db805048d6592aa153533ac5f4373145c75e24012a51ad9f8;Backdoor.Win32.DoubleAgent.e;木马程序;09/30/2018 22:31:40
30.09.2018 22.31.40;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\11x\500f426f98d4c00d29825f976b9457a274aed781a560a60e89cba4805cd47186;C:\Users\Administrator\Desktop\11x\500f426f98d4c00d29825f976b9457a274aed781a560a60e89cba4805cd47186;Backdoor.Win32.DoubleAgent.h;木马程序;09/30/2018 22:31:40
30.09.2018 22.31.38;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\11x\539cdc37c34eebb28a74f0dceeee0331e6ac6f4682e55fddd69d6f9de7ab9b77;C:\Users\Administrator\Desktop\11x\539cdc37c34eebb28a74f0dceeee0331e6ac6f4682e55fddd69d6f9de7ab9b77;Backdoor.Win32.DoubleAgent.b;木马程序;09/30/2018 22:31:38
30.09.2018 22.31.38;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\11x\634795a3acbae8964bb31e3ebed7f29208844978a512fc26a8b9a51901f9cab9;C:\Users\Administrator\Desktop\11x\634795a3acbae8964bb31e3ebed7f29208844978a512fc26a8b9a51901f9cab9;Backdoor.Win32.DoubleAgent.j;木马程序;09/30/2018 22:31:38
30.09.2018 22.31.38;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\11x\27dd9de09e22efa2ef12e9e2f462fa9da83684bdb4ec900dd86439c5758107d9;C:\Users\Administrator\Desktop\11x\27dd9de09e22efa2ef12e9e2f462fa9da83684bdb4ec900dd86439c5758107d9;Backdoor.Win32.DoubleAgent.a;木马程序;09/30/2018 22:31:38
30.09.2018 22.31.36;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\11x\81e96c07e6c9cb02f72c0943a42ff9f8f09a09c508f8bbaa1142a9ee4f1326cf;C:\Users\Administrator\Desktop\11x\81e96c07e6c9cb02f72c0943a42ff9f8f09a09c508f8bbaa1142a9ee4f1326cf;Backdoor.Win32.DoubleAgent.k;木马程序;09/30/2018 22:31:36
30.09.2018 22.31.36;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\11x\0860f29226069a732f988cb70ea6d51057d204d421bb709b8e759376b0c4d201;C:\Users\Administrator\Desktop\11x\0860f29226069a732f988cb70ea6d51057d204d421bb709b8e759376b0c4d201;Backdoor.Win32.DoubleAgent.c;木马程序;09/30/2018 22:31:36
30.09.2018 22.31.36;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\11x\060448ffd71fe2edbb5fe7c6298ad2b077e57fa6ed6d4250fbd799dd85488843;C:\Users\Administrator\Desktop\11x\060448ffd71fe2edbb5fe7c6298ad2b077e57fa6ed6d4250fbd799dd85488843;Backdoor.Win32.DoubleAgent.d;木马程序;09/30/2018 22:31:36
30.09.2018 22.31.36;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\11x\a97b1a792f7b53929a1c01bad9fc2bd606a15e8e32755daa15570e356baa0112;C:\Users\Administrator\Desktop\11x\a97b1a792f7b53929a1c01bad9fc2bd606a15e8e32755daa15570e356baa0112;Backdoor.Win32.DoubleAgent.i;木马程序;09/30/2018 22:31:36
30.09.2018 22.31.36;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\11x\dcbfd12321fa7c4fa9a72486ced578fdc00dcee79e6d95aa481791f044a55af3;C:\Users\Administrator\Desktop\11x\dcbfd12321fa7c4fa9a72486ced578fdc00dcee79e6d95aa481791f044a55af3;UDS:DangerousObject.Multi.Generic;09/30/2018 22:31:36
30.09.2018 22.31.35;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\11x\eb4e174db15646f71cb1d2c471e5794a8429ca29369c8eff6042122cc6dc6845;C:\Users\Administrator\Desktop\11x\eb4e174db15646f71cb1d2c471e5794a8429ca29369c8eff6042122cc6dc6845;Backdoor.Win32.DoubleAgent.g;木马程序;09/30/2018 22:31:35

复制代码

显示全部楼层 · 发表于 2018-9-30 22:48:28

WD 清空

显示全部楼层 · 发表于 2018-9-30 22:51:08

本帖最后由 191196846 于 2018-9-30 22:53 编辑

VirusTotal Smart Scanner 1.06
======================================================================================
Scan Time: 2018-09-30-22-50-55
Scan Duration: 114 seconds
Scan Target: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x
Number of Scan Files: 11
Number of Infected Files: 11
engine_threshold_slider : 80
upload_check : True
log_check : True
menu_check : True
scan_pe_check : True
grayware_check : True
rescan_check : False
black_check : True
white_check : True
crawler_check : True
======================================================================================
Threat(s):
Backdoor.Generic sha256: 27dd9de09e22efa2ef12e9e2f462fa9da83684bdb4ec900dd86439c5758107d9 Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x\27dd9de09e22efa2ef12e9e2f462fa9da83684bdb4ec900dd86439c5758107d9
Backdoor.Generic sha256: dcbfd12321fa7c4fa9a72486ced578fdc00dcee79e6d95aa481791f044a55af3 Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x\dcbfd12321fa7c4fa9a72486ced578fdc00dcee79e6d95aa481791f044a55af3
Backdoor.Generic sha256: 37f15647c26d475db805048d6592aa153533ac5f4373145c75e24012a51ad9f8 Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x\37f15647c26d475db805048d6592aa153533ac5f4373145c75e24012a51ad9f8
Backdoor.Generic sha256: 500f426f98d4c00d29825f976b9457a274aed781a560a60e89cba4805cd47186 Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x\500f426f98d4c00d29825f976b9457a274aed781a560a60e89cba4805cd47186
Backdoor.Generic sha256: 539cdc37c34eebb28a74f0dceeee0331e6ac6f4682e55fddd69d6f9de7ab9b77 Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x\539cdc37c34eebb28a74f0dceeee0331e6ac6f4682e55fddd69d6f9de7ab9b77
Backdoor.Generic sha256: 634795a3acbae8964bb31e3ebed7f29208844978a512fc26a8b9a51901f9cab9 Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x\634795a3acbae8964bb31e3ebed7f29208844978a512fc26a8b9a51901f9cab9
Backdoor.Generic sha256: 81e96c07e6c9cb02f72c0943a42ff9f8f09a09c508f8bbaa1142a9ee4f1326cf Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x\81e96c07e6c9cb02f72c0943a42ff9f8f09a09c508f8bbaa1142a9ee4f1326cf
Trojan.Generic sha256: a97b1a792f7b53929a1c01bad9fc2bd606a15e8e32755daa15570e356baa0112 Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x\a97b1a792f7b53929a1c01bad9fc2bd606a15e8e32755daa15570e356baa0112
Backdoor.Generic sha256: 060448ffd71fe2edbb5fe7c6298ad2b077e57fa6ed6d4250fbd799dd85488843 Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x\060448ffd71fe2edbb5fe7c6298ad2b077e57fa6ed6d4250fbd799dd85488843
Backdoor.Generic sha256: eb4e174db15646f71cb1d2c471e5794a8429ca29369c8eff6042122cc6dc6845 Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x\eb4e174db15646f71cb1d2c471e5794a8429ca29369c8eff6042122cc6dc6845
Backdoor.Generic sha256: 0860f29226069a732f988cb70ea6d51057d204d421bb709b8e759376b0c4d201 Path: C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\vxgqeu\11x\0860f29226069a732f988cb70ea6d51057d204d421bb709b8e759376b0c4d201

复制代码

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
【2】2018-09-30 22:52:20,病毒防御,文件实时监控,发现病毒Trojan/Generic!BFE248025336AD72, 已清除
操作者：C:\Program Files\WinRAR\WinRAR.exe
病毒路径：C:\Users\zhong\Downloads\Compressed\VIRUS TEST\vxgqeu\11x\060448ffd71fe2edbb5fe7c6298ad2b077e57fa6ed6d4250fbd799dd85488843
病毒名称：Trojan/Generic!BFE248025336AD72
病毒ID：BFE248025336AD72
用户操作：已清除
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
【3】2018-09-30 22:52:20,病毒防御,文件实时监控,发现病毒Trojan/Generic!B0788098829C1FF1, 已清除
操作者：C:\Program Files\WinRAR\WinRAR.exe
病毒路径：C:\Users\zhong\Downloads\Compressed\VIRUS TEST\vxgqeu\11x\0860f29226069a732f988cb70ea6d51057d204d421bb709b8e759376b0c4d201
病毒名称：Trojan/Generic!B0788098829C1FF1
病毒ID：B0788098829C1FF1
用户操作：已清除
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
【4】2018-09-30 22:52:20,病毒防御,文件实时监控,发现病毒Trojan/Generic!B20C70800A1CAF07, 已清除
操作者：C:\Program Files\WinRAR\WinRAR.exe
病毒路径：C:\Users\zhong\Downloads\Compressed\VIRUS TEST\vxgqeu\11x\27dd9de09e22efa2ef12e9e2f462fa9da83684bdb4ec900dd86439c5758107d9
病毒名称：Trojan/Generic!B20C70800A1CAF07
病毒ID：B20C70800A1CAF07
用户操作：已清除
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

复制代码

显示全部楼层 · 发表于 2018-9-30 23:33:46

Trend Micro

安全威脅: Backdoor.Win32.FALOJAK.AA
來源類型: 安全威脅
受影響的檔案: C:\Users\diakov\Downloads\Compressed\vxgqeu\11x\060448ffd71fe2edbb5fe7c6298ad2b077e57fa6ed6d4250fbd799dd85488843
處理行動: 已移除
偵測方式: 即時掃瞄
安全威脅: TROJ_FRS.VSN1BI18
來源類型: 安全威脅
受影響的檔案: C:\Users\diakov\Downloads\Compressed\vxgqeu\11x\500f426f98d4c00d29825f976b9457a274aed781a560a60e89cba4805cd47186
處理行動: 已移除
偵測方式: 手動掃瞄
安全威脅: TROJ_FRS.VSN1BI18
來源類型: 安全威脅
受影響的檔案: C:\Users\diakov\Downloads\Compressed\vxgqeu\11x\eb4e174db15646f71cb1d2c471e5794a8429ca29369c8eff6042122cc6dc6845
處理行動: 已移除
偵測方式: 手動掃瞄
安全威脅: TROJ_FRS.VSN1BI18
來源類型: 安全威脅
受影響的檔案: C:\Users\diakov\Downloads\Compressed\vxgqeu\11x\634795a3acbae8964bb31e3ebed7f29208844978a512fc26a8b9a51901f9cab9
處理行動: 已移除
偵測方式: 手動掃瞄
安全威脅: TROJ_FRS.VSN1BI18
來源類型: 安全威脅
受影響的檔案: C:\Users\diakov\Downloads\Compressed\vxgqeu\11x\a97b1a792f7b53929a1c01bad9fc2bd606a15e8e32755daa15570e356baa0112
處理行動: 已移除
偵測方式: 手動掃瞄
安全威脅: Backdoor.Win32.FALOJAK.AA
來源類型: 安全威脅
受影響的檔案: C:\Users\diakov\Downloads\Compressed\vxgqeu\11x\81e96c07e6c9cb02f72c0943a42ff9f8f09a09c508f8bbaa1142a9ee4f1326cf
處理行動: 已移除
偵測方式: 手動掃瞄
安全威脅: TROJ_FRS.VSN1BI18
來源類型: 安全威脅
受影響的檔案: C:\Users\diakov\Downloads\Compressed\vxgqeu\11x\539cdc37c34eebb28a74f0dceeee0331e6ac6f4682e55fddd69d6f9de7ab9b77
處理行動: 已移除
偵測方式: 手動掃瞄
安全威脅: TROJ_FRS.VSN1BI18
來源類型: 安全威脅
受影響的檔案: C:\Users\diakov\Downloads\Compressed\vxgqeu\11x\dcbfd12321fa7c4fa9a72486ced578fdc00dcee79e6d95aa481791f044a55af3
處理行動: 已移除
偵測方式: 手動掃瞄
安全威脅: TROJ_FRS.VSN1BI18
來源類型: 安全威脅
受影響的檔案: C:\Users\diakov\Downloads\Compressed\vxgqeu\11x\37f15647c26d475db805048d6592aa153533ac5f4373145c75e24012a51ad9f8
處理行動: 已移除
偵測方式: 手動掃瞄
安全威脅: BKDR_FALOJAK.USOMON
來源類型: 安全威脅
受影響的檔案: C:\Users\diakov\Downloads\Compressed\vxgqeu\11x\27dd9de09e22efa2ef12e9e2f462fa9da83684bdb4ec900dd86439c5758107d9
處理行動: 已移除
偵測方式: 手動掃瞄
安全威脅: TROJ_FRS.VSN1BI18
來源類型: 安全威脅
受影響的檔案: C:\Users\diakov\Downloads\Compressed\vxgqeu\11x\0860f29226069a732f988cb70ea6d51057d204d421bb709b8e759376b0c4d201
處理行動: 已移除
偵測方式: 手動掃瞄

复制代码

显示全部楼层 · 发表于 2018-9-30 23:47:39

BD清空

显示全部楼层 · 发表于 2018-10-1 00:08:10

火绒kill 3X，智量清空。

显示全部楼层 · 发表于 2018-10-1 07:39:36

ahnlab kill all

[其他相关] b5cc570c578aed2629a122269162c72741a68e0f0a2e52efcff1790572b9ed5c

本帖子中包含更多资源