服务器上找到的，过的不少

schumi小粉

有点大，有兴趣的可以下载下来双击玩玩
https://share.weiyun.com/5u5yrmt

KEVINZHANG

https://send.firefox.com/
楼主能传到这里吗？

schumi小粉

KEVINZHANG 发表于 2019-4-1 23:31
https://send.firefox.com/
楼主能传到这里吗？

https://send.firefox.com/downloa ... PPVPUMWACJfK9N7Rgqg

密码：virus

你好，再见

你的头像好像Lily作者的呀，莫非~

AK2019

Rising V17：Trojan.DTLMiner!1.B6B5
P.S. 楼主微云上分享的样本密码是indected，Firefox Send的密码是virus。

iha40999

直接双击运行，就是外网一直有入侵可以关闭运行，然后入侵没了
其他未发现异常

www-tekeze

火绒、智量均不报！

www-tekeze

安天智甲、管家无BD，不报。。。加BD后的管家killed，PS：看报法是BD的

iha40999

补充一下
诺顿安全记录类别： 入侵防护
日期和时间,风险,活动,状态,推荐的操作,IPS 警报名称,默认操作,采取的操作,攻击电脑,目标地址,源地址,通信说明,类别,攻击者网址
2019/4/1 23:46:53,高,阻止了 141.98.213.220 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"141.98.213.220, 443","DESKTOP-E9VPICM (192.168.0.102, 52465)",141.98.213.220,"TCP, https",,
2019/4/1 23:46:51,高,阻止了 lplp.abbny.com 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"lplp.abbny.com (27.102.118.147, 443)","DESKTOP-E9VPICM (192.168.0.102, 52464)",lplp.abbny.com (27.102.118.147),"TCP, https",,
2019/4/1 23:46:24,高,阻止了 141.98.213.220 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"141.98.213.220, 443","DESKTOP-E9VPICM (192.168.0.102, 52448)",141.98.213.220,"TCP, https",,
2019/4/1 23:46:22,高,阻止了 lplp.abbny.com 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"lplp.abbny.com (27.102.118.147, 443)","DESKTOP-E9VPICM (192.168.0.102, 52447)",lplp.abbny.com (27.102.118.147),"TCP, https",,
2019/4/1 23:45:53,高,阻止了 lplp.abbny.com 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"lplp.abbny.com (27.102.118.147, 443)","DESKTOP-E9VPICM (192.168.0.102, 52436)",lplp.abbny.com (27.102.118.147),"TCP, https",,
2019/4/1 23:45:22,高,阻止了 141.98.213.220 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"141.98.213.220, 443","DESKTOP-E9VPICM (192.168.0.102, 52416)",141.98.213.220,"TCP, https",,
2019/4/1 23:44:51,高,阻止了 141.98.213.220 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"141.98.213.220, 443","DESKTOP-E9VPICM (192.168.0.102, 52407)",141.98.213.220,"TCP, https",,
2019/4/1 23:44:20,高,阻止了 lplp.abbny.com 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"lplp.abbny.com (27.102.118.147, 443)","DESKTOP-E9VPICM (192.168.0.102, 52391)",lplp.abbny.com (27.102.118.147),"TCP, https",,
2019/4/1 23:43:49,高,阻止了 lplp.abbny.com 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"lplp.abbny.com (27.102.118.147, 443)","DESKTOP-E9VPICM (192.168.0.102, 52380)",lplp.abbny.com (27.102.118.147),"TCP, https",,
2019/4/1 23:43:18,高,阻止了 141.98.213.220 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"141.98.213.220, 443","DESKTOP-E9VPICM (192.168.0.102, 52362)",141.98.213.220,"TCP, https",,
2019/4/1 23:42:47,高,阻止了 lplp.abbny.com 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"lplp.abbny.com (27.102.118.147, 443)","DESKTOP-E9VPICM (192.168.0.102, 52353)",lplp.abbny.com (27.102.118.147),"TCP, https",,
2019/4/1 23:42:17,高,阻止了 lplp.abbny.com 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"lplp.abbny.com (27.102.118.147, 443)","DESKTOP-E9VPICM (192.168.0.102, 52336)",lplp.abbny.com (27.102.118.147),"TCP, https",,
2019/4/1 23:41:46,高,阻止了 lplp.abbny.com 的入侵企图,已阻止,不需要操作,System Infected: Miner.Bitcoinminer Activity 7,不需要操作,不需要操作,"lplp.abbny.com (27.102.118.147, 443)","DESKTOP-E9VPICM (192.168.0.102, 52314)",lplp.abbny.com (27.102.118.147),"TCP, https",,

www-tekeze

iha40999 发表于 2019-4-2 00:03
补充一下
诺顿安全记录类别： 入侵防护
日期和时间,风险,活动,状态,推荐的操作,IPS 警报名称,默认操作,采 ...

Miner.Bitcoinminer，不知道是不是正规的挖矿软件。。