Ransom #2 (19.01.25)

petr0vic

https://transfer.sh/NPkVY/sasaddd.7z

infected

极宝杀毒 V1.2.6

dreams521

卡巴 Double Kill

1. 25.01.2019 18.59.27;检测到的对象 ( 文件 ) 已删除;C:\Users\Administrator\Desktop\sasaddd\sasaddd\s.exe;C:\Users\Administrator\Desktop\sasaddd\sasaddd\s.exe;UDS:Trojan-Ransom.Win32.Shade;木马程序;01/25/2019 18:59:27
   
2. 25.01.2019 18.59.27;检测到的对象 ( 文件 ) 将在计算机重启后处理;C:\Users\Administrator\Desktop\sasaddd\sasaddd\s1.exe;C:\Users\Administrator\Desktop\sasaddd\sasaddd\s1.exe;UDS:Trojan-Ransom.Win32.Shade;木马程序;01/25/2019 18:59:27
   

复制代码

c/mm

Avast

你好，再见

怎么换域名了？？？

静影沉璧

SEP：2/2

con16

CIS kill

BE_HC

Malwarebytes Free Kill All

BE_HC

con16 发表于 2019-1-25 19:06
CIS kill

CCAV MISS All

www-tekeze

火绒、智量都是清空。。

YU2711

Avira KILL 2X

1. 01/25/2019,19-27-23        [INFO]        FP reports status 'NO False Positive' for file 'c:\idm\idm\downloads\compressed\sasaddd\sasaddd\s.exe'
   
2. 01/25/2019,19-27-23        [INFO]        Successful Cloud SDK initialization and license check.
   
3. 01/25/2019,19-27-23        [INFO]        The file 'c:\idm\idm\downloads\compressed\sasaddd\sasaddd\s.exe' was scanned with the Protection Cloud. SHA256 = 3FE4D9FA4F05D8D12333821A43F91E25BD32F07DC00983183289ACFFE6B2D229
   
4. 01/25/2019,19-27-23        [INFO]        c:\idm\idm\downloads\compressed\sasaddd\sasaddd\s.exe
   
5. 01/25/2019,19-27-23        [INFO]        [DETECTION] file contains 'TR/AD.Troldesh.B'
   
6. 01/25/2019,19-27-24        [INFO]        FP reports status 'NO False Positive' for file 'c:\idm\idm\downloads\compressed\sasaddd\sasaddd\s1.exe'
   
7. 01/25/2019,19-27-24        [INFO]        The file 'c:\idm\idm\downloads\compressed\sasaddd\sasaddd\s1.exe' was scanned with the Protection Cloud. SHA256 = 8DD8593366530BD2C626DE06DA3B3833E6256A5B67558AE9DA44312D2F48CEC6
   
8. 01/25/2019,19-27-24        [INFO]        c:\idm\idm\downloads\compressed\sasaddd\sasaddd\s1.exe
   
9. 01/25/2019,19-27-24        [INFO]        [DETECTION] file contains 'TR/Crypt.EPACK.8dd859'

复制代码