EXE样本5X_16

Avantor

FortiClient Kill All
Samp1  MSIL/FileCoder.PE!tr
Samp2 W32/Kryptik.GPES!tr
Samp3  W32/Kryptik.GPES!tr
Samp4  W32/Cypher.F308!tr.ransom
Samp5  Malicious_Behavior.SB

Jerry.Lin

1. [Scan information]
   
2. 
   
3. Start time:2019-2-2 15:27:48
   
4. Elapsed time:00:00:02
   
5. Scan type:Custom scan
   
6. Antivirus engines:Tencent cloud protection engine    Tencent antivirus engine II    Tencent system repair engine    Bitdefender local antivirus engine   
   
7. Scan status:Scan complete
   
8. 
   
9. 
   
10. [Scan Report]
    
11. 
    
12. Files scanned:5
    
13. Threats detected:5
    
14. Threats processed:5
    
15. 
    
16. 
    
17. ---------------------
    
18. 2019-2-2 15:28:03 MD5:39b4b47667a2541f59ca987daac978fc C:\Users\zhong\Downloads\Compressed\卡饭\EXE样本_16\Samp(4).vir [Gen:Heur.Ransom.REntS.Gen.1]  [Delete success]
    
19. 2019-2-2 15:28:03 MD5:d281d52bf8e1f8e2b4747ec0339cb7f1 C:\Users\zhong\Downloads\Compressed\卡饭\EXE样本_16\Samp(5).vir [Trojan.GenericKD.31573547]  [Delete success]
    
20. 2019-2-2 15:28:03 MD5:97df21cfb5d664e1666f45e555feb372 C:\Users\zhong\Downloads\Compressed\卡饭\EXE样本_16\Samp(1).vir [Trojan.GenericKD.31312204]  [Delete success]
    
21. 2019-2-2 15:28:03 MD5:a635d6a35c2fc054042b6868ef52a0c3 C:\Users\zhong\Downloads\Compressed\卡饭\EXE样本_16\Samp(2).vir [Trojan.GenericKD.3004295]  [Delete success]
    
22. 2019-2-2 15:28:03 MD5:1c6f9c4e474df4fec9165aa865ab03e6 C:\Users\zhong\Downloads\Compressed\卡饭\EXE样本_16\Samp(3).vir [Gen:Variant.Jaik.35670]  [Delete success]
    
23. ---------------------
    

复制代码

浅暮、浅离

小蜘蛛4X

c/mm

Avast kill 4x miss 3

con16

CIS

pre

BD 清空
日志
Feature:
Antivirus

The file F:\AppData\EXE样本_16\Samp(1).vir is infected with Trojan.GenericKD.31312204 and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.

Feature:
Antivirus

The file F:\AppData\EXE样本_16\Samp(2).vir is infected with Trojan.GenericKD.3004295 and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.

Feature:
Antivirus

The file F:\AppData\EXE样本_16\Samp(3).vir is infected with Gen:Variant.Jaik.35670 and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.

Feature:
Antivirus

The file F:\AppData\EXE样本_16\Samp(4).vir is infected with Gen:Heur.Ransom.REntS.Gen.1 and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.

Feature:
Antivirus

The file F:\AppData\EXE样本_16\Samp(5).vir is infected with Trojan.GenericKD.31573547 and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.

asdfgpasdfgp

mcafee清空

心醉咖啡

360

1. 360杀毒扫描日志
   
2. 
   
3. 病毒库版本：
   
4. 扫描时间：2019-02-02 18:54:49
   
5. 扫描用时：00:00:04
   
6. 扫描类型：右键扫描
   
7. 扫描文件总数：5
   
8. 项目总数：5
   
9. 清除项目数：5
   
10. 
    
11. 扫描选项
    
12. ----------------------
    
13. 扫描所有文件：是
    
14. 扫描压缩包：是
    
15. 发现病毒处理方式：由用户选择处理
    
16. 扫描磁盘引导区：是
    
17. 扫描 Rootkit：是
    
18. 使用云查杀引擎：是
    
19. 使用QVM人工智能引擎：是
    
20. 扫描建议修复项：是
    
21. 常规引擎设置：未使用
    
22. 
    
23. 扫描内容
    
24. ----------------------
    
25. F:\浏览器下载\EXE样本_16
    
26. 
    
27. 
    
28. 白名单设置
    
29. ----------------------
    
30. 
    
31. 
    
32. 扫描结果
    
33. ======================
    
34. 高危风险项
    
35. ----------------------
    
36. F:\浏览器下载\EXE样本_16\Samp(1).vir        感染型病毒(Win32/Trojan.Ransom.f5a)        已删除
    
37. F:\浏览器下载\EXE样本_16\Samp(2).vir        感染型病毒(Win32/Trojan.7c2)        已删除
    
38. F:\浏览器下载\EXE样本_16\Samp(3).vir        木马程序(Trojan.Generic)        已删除
    
39. F:\浏览器下载\EXE样本_16\Samp(4).vir        木马程序(Trojan.Generic)        已删除
    
40. F:\浏览器下载\EXE样本_16\Samp(5).vir        HEUR/QVM20.1.BF6F.Malware.Gen        已删除
    
41. 
    

复制代码

具具

Emsisoft Anti-Malware免费版

wenshui1013

G DATA Kill All