#1 (18.11.17)

显示全部楼层 · 发表于 2018-11-18 01:02:16

https://my.mixtape.moe/xcolop.7z

infected

https://www.virustotal.com/en/fi ... e7d29f607/analysis/

clipdll.dll - hidden

FSP - miss

显示全部楼层 · 发表于 2018-11-18 01:10:28

本帖最后由小Q机器人于 2018-11-18 01:18 编辑

1.双击运行，智量拦截

2.解压出来后卡巴斯基直接拦截

3.管家国际版双击拦截。

显示全部楼层 · 发表于 2018-11-18 01:28:00

Norton Kill

Filename: clipexe.exe
Threat name: Trojan HorseFull Path: c:\users\drclef\desktop\clipexe.exe
____________________________
____________________________
On computers as of
2018/11/18 at 1:27:33
Last Used
2018/11/18 at 1:27:33
Startup Item
No
Launched
No
Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.
____________________________
clipexe.exe Threat name: Trojan Horse
Locate
Very Few Users
Fewer than 5 users in the Norton Community have used this file.
Very New
This file was released less than 1 week ago.
High
This file risk is high.
____________________________
Source: External Media
____________________________
File Actions
File: c:\users\drclef\desktop\ clipexe.exe Blocked
____________________________
File Thumbprint - SHA:
Not available
File Thumbprint - MD5:
Not available

复制代码

显示全部楼层 · 发表于 2018-11-18 01:29:10

本帖最后由 761773275 于 2018-11-18 01:30 编辑

显示全部楼层 · 发表于 2018-11-18 01:29:57

管家扫描miss

显示全部楼层 · 发表于 2018-11-18 01:31:40

本帖最后由 petr0vic 于 2018-11-18 01:37 编辑

显示全部楼层 · 发表于 2018-11-18 01:33:05

Trend Micro
运行

显示全部楼层 · 发表于 2018-11-18 04:39:57

avira miss

11/17/2018,15-39-11 [INFO] The file 'e:\samples\clipexe\clipexe.exe' was scanned with the Protection Cloud. SHA256 = 38453C231C9068D2255D4880E3FB8574523F5780540664ADB0F0027E7D29F607

显示全部楼层 · 发表于 2018-11-18 07:58:26

BD

malicious behavior

显示全部楼层 · 发表于 2018-11-18 10:01:39

18.11.2018 10.00.38;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\xcolop\clipexe\clipexe.exe;C:\Users\Administrator\Desktop\xcolop\clipexe\clipexe.exe;Trojan-Dropper.Win32.Injector.uiph;木马程序;11/18/2018 10:00:38

复制代码

[病毒样本] #1 (18.11.17)

本帖子中包含更多资源

评分

检测都有病毒

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源