Ransom #3 (19.04.11)

petr0vic

infected

小Q机器人

请看图

huang1111

卡巴斯基 kill all

Jerry.Lin

火绒

1. Signature: 2019-04-10 17:21
   
2. Started at: 2019-04-11 16:40
   
3. Duration: 00:00:13
   
4. Object(s): 5
   
5. File(s): 3
   
6. Threat(s): 2
   
7. Cleaned: 2
   
8. 
   
9. Virus Details
   
10. 
    
11. 
    
12. Path: C:\Users\zhong\Downloads\Compressed\卡饭\c\1.exe, Detection: HVM:Ransom/GandCrab.a, Detection ID: 70c345d4e942786c, Result: Cleaned
    
13. Path: C:\Users\zhong\Downloads\Compressed\卡饭\c\2.exe, Detection: Ransom/Crysis.a, Detection ID: f5af5b4617afff44, Result: Cleaned
    

复制代码

vm001

测试了C用360的拦截，拦截后部分图片被加密

Nocria

G-DATA emptied (by Engine B).

1. Object: 2.exe
   
2.         Path: C:\Users\promi\Desktop\c
   
3.         Status: File moved to quarantine
   
4.         Virus: Win32.Trojan-Ransom.VirusEncoder.5PMB10 (Engine B)
   
5. 
   
6. Object: c.exe
   
7.         Path: C:\Users\promi\Desktop\c
   
8.         Status: File moved to quarantine
   
9.         Virus: Win32.Trojan-Ransom.GandCrab.14WFTI (Engine B)
   
10. 
    
11. Object: 1.exe
    
12.         Path: C:\Users\promi\Desktop\c
    
13.         Status: File moved to quarantine
    
14.         Virus: Win32.Trojan-Ransom.GandCrab.8VWD9B (Engine B)
    

复制代码

F-Secure emptied.

1.     TR/Crypt.XPACK.Gen8
   
2.         C:\Users\promi\Desktop\c\c.exe
   
3.     Trojan.TR/AD.GandCrab.vjznr
   
4.         C:\Users\promi\Desktop\c\1.exe
   
5.     Trojan.TR/Ransom.Crysis.bfsbw
   
6.         C:\Users\promi\Desktop\c\2.exe
   

复制代码

小Q机器人

瑞星  杀1   漏  2

，就一个.

WD

第一个Trojan:Win32/Fuerboos.C!cl

第二个 第三个 报一样Trojan:Win32/Fuery.C!cl

a233

Avast监控Kill 1X

a233

a233 发表于 2019-4-11 19:08
Avast监控Kill 1X

双击
2.exe防御成功，不过拦截点比较靠后，有很多文件已经被加密了
c.exe防御成功，不过不知道为什么小a压住了却没有删除