Ransom (18.12.25)

显示全部楼层 · 发表于 2018-12-25 20:53:49

https://my.mixtape.moe/ajonwf.7z

infected

显示全部楼层 · 发表于 2018-12-25 20:56:31

GD右键杀1，主防杀1

AVA 25.19940
GD 25.13982
*** Process ***
Process: 12448
File name: 2.exe
Path: d:\virus\2.exe
Publisher: Unknown publisher
Creation date: Tuesday, December 25, 2018 7:55:25 AM
Modification date: Tuesday, December 25, 2018 7:42:07 AM
Started by: explorer.exe
Publisher: Microsoft Windows
*** Actions ***
The cloud server recognized this file and identified it as malicious.
*** Quarantine ***
The following files were moved into quarantine:
D:\Virus\2.exe
The following registry entries were deleted:
YHKycCp0ckInJyYGt3JycnJiYpArJwePcpJykmJi8C4nJycnJganKxfWNcZycmFdYywnJgbnKCcL9ygnCAA
Rules version: 5.0.151
OS: Windows 10.0 Service Pack 0.0 Build: 17134 - Workstation 64bit OS
dll version: 75513
"D:\Virus\2.exe"
MD5: F069966D16EFE55CFF265C2EEDB75867
C:\Windows\Explorer.EXE
MD5: E4A81EDDFF8B844D85C8B45354E4144E

复制代码

显示全部楼层 · 发表于 2018-12-25 20:59:09

cis kill

显示全部楼层 · 发表于 2018-12-25 21:00:04

火绒

病毒库：2018-12-25 16:28
开始时间：2018-12-25 20:59
总计用时：00:00:19
扫描对象：4个
扫描文件：2个
发现风险：1个
已处理风险：1个
发现系统修复项：0个
处理系统修复项：0个
病毒详情
风险路径：C:\Users\zhong\Downloads\Compressed\VIRUS TEST\卡饭\ajonwf\2.exe, 病毒名：HEUR:VirTool/Obfuscator.gen!B, 病毒ID：[2d18551aef762f90], 处理结果：已处理

复制代码

显示全部楼层 · 发表于 2018-12-25 21:03:48

卡巴杀2..exe .双击1.exe火绒杀

显示全部楼层 · 发表于 2018-12-25 21:05:56

Avast IS 11.2.2262

显示全部楼层 · 发表于 2018-12-25 21:11:29

本帖最后由 wusiyuanjh 于 2018-12-25 21:12 编辑

1.exe has been detected as infected. Bitdefender blocked this item. Your device is not threat-free. Threat name: Gen:Trojan.Heur.RP.8mHfaeUbMSm
2.exe has been detected as infected. Bitdefender blocked this item. Your device is not threat-free. Threat name: Gen:Suspicious.Cloud.8.bnX@aSbRI

显示全部楼层 · 发表于 2018-12-25 21:15:00

智量Heur清空。。

显示全部楼层 · 发表于 2018-12-25 21:20:44

火绒监控杀 2.exe，双击主防杀 1.exe 。。

显示全部楼层 · 发表于 2018-12-25 21:24:44

退出火绒双击1exe.卡巴pdm成功拦截

[病毒样本] Ransom (18.12.25)

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源