Ransom (.encrypted) (19.01.15)

petr0vic

https://my.mixtape.moe/nglhxq.7z

infected

Jerry.Lin

AVG

1. Win32:Malware-gen

复制代码

dreams521

卡巴

1. 15.01.2019 21.43.40;检测到的对象 ( 处理内存 ) 已删除;c:\users\administrator\desktop\nglhxq\r.exe;c:\users\administrator\desktop\nglhxq\r.exe;PDM:Trojan.Win32.Generic;木马程序;01/15/2019 21:43:40
   

复制代码

www-tekeze

智量报勒索，火绒miss，准备双击。。

七游

360TS miss……

你好，再见

极宝高敏

www-tekeze

ESET miss，双击全被加密！

ttdown

Avist Pro

HEUR/APC

Start of the scan: 2019-01-15 21:58:04
01/15/2019,21-58-09        [INFO]        FP reports status 'NO False Positive' for file 'g:\virus_infected\nglhxq\r.exe'
01/15/2019,21-58-09        [INFO]        Successful Cloud SDK initialization and license check.
01/15/2019,21-58-09        [INFO]        The file 'g:\virus_infected\nglhxq\r.exe' was scanned with the Protection Cloud. SHA256 = 2FA1C427367E670D8D8F8022FDB39737B7A6EDCD419A77C80583625FF503FC28
01/15/2019,21-58-09        [INFO]        g:\virus_infected\nglhxq\r.exe
01/15/2019,21-58-09        [INFO]        [DETECTION] file contains 'HEUR/APC'
01/15/2019,21-58-44        [INFO]        repair.rdf loaded (version: 1.0.47.26)
01/15/2019,21-58-44        [INFO]        Repair of Generic started.
01/15/2019,21-58-47        [INFO]        Repair of Generic finished successfully.
01/15/2019,21-58-47        [INFO]        Repair of HEUR/APC started.
01/15/2019,21-58-55        [INFO]        Repair of HEUR/APC finished successfully.
01/15/2019,21-58-55        [INFO]        g:\virus_infected\nglhxq\r.exe
01/15/2019,21-58-55        [INFO]        [ACTION] Clean

con16

CIS VirusScope kill

www-tekeze

www-tekeze 发表于 2019-1-15 21:49
智量报勒索，火绒miss，准备双击。。

额，主防全程没反应，只能靠自定义规则拦截。。