x56(exe) x1(dll) 我從虛擬機看到的

a7878330

有興趣嗎?
56個exe檔案
和1個dll
全部都是用誘導環境抓的

New_Start.

巴斯基安全软件

拒绝访问
无法访问该网页

对象网址:

https://att.kafan.cn/forum.php?mo ... Dg0MTI5NnwyMTQ3NzIw
原因: 对象被感染 Virus.Win32.Nimnul.f

dongwenqi

菜鸟一个0 发表于 2019-4-20 19:08
巴斯基安全软件

拒绝访问

关闭网页反病毒，卡巴斯基监控杀了55个

a233

Avast扫描剩下2个
* Avast 扫描报告
* 该文件是自动生成的
* 扫描名称: 从 Windows 资源管理器进行扫描
* 开始于: 2019年4月20日 19:05:20
* VPS: 190419-4, 2019/04/19
C:\Users\Administrastor\Desktop\新建文件夹\YKSPCDPRTN.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\YLKXWNBNSE.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\YMHHRCJOQN.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\YNYRGFRUJV.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\YOUPGAUPLE.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\YPQCUHABDE.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\YPVCCTAVGE.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\27755C0.8166999.exe|>[Embedded:dtLEjMA.exe] [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\27755C0.8166999.exe|>[Embedded_I#9271] [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\27755C0.8166999.exe [L] Win32:Dh-A [Heur] (0)
C:\Users\Administrastor\Desktop\新建文件夹\IACTNVFTYO.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\IFPTYJJIEF.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\PMNBDTPIXN.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\PQNHOTJMXD.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\PQPBHPTHPE.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\PQSGBNNWIM.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\PRDJVOFIKU.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\PRIHIHJRUD.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\PRKPQPVDBU.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\VPVYSYWQQQ.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\VXUCBUVIVL.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\WCHPQOUQGC.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\WDGTEANLUK.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\WFPYSTCIRK.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\WIWXJJLPSJ.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\WIXVPROFXS.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\WJUERNAVBJ.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\WKSMSJMMEB.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\XBJWNRAFCC.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\XCGFPOMUFT.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\XERSLPMCIK.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\XGYGTIJJTF.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\XHBLUDGEBJ.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\XPTIJWPBPE.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\XRMDAAGDJU.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\XTWEAIBERL.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\XTYMHQNPYD.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\XWCWDJUMGL.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\YEGLDFSHAO.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\YEHJJMVWFW.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\WGKNCSDEDB.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\YFCXRMXSRO.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\ACDQAEBQXW.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\ACEOGMFGDG.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\GPUUSHABXE.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\HHRSPUSUUF.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\HKRISRPWLN.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\HKTEFGWCWF.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\HNCBCEJADM.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\HNFFVBCPVV.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\HOAGJHYFMM.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\HOUIWOUVCE.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\HPSMKYNQQM.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\HPWOLEKVOE.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\HTNGUUCTRD.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\HVJSJCHFJD.exe [L] Win32:Malware-gen (0)
C:\Users\Administrastor\Desktop\新建文件夹\WGMHTPNXTB.exe [L] Win32:Malware-gen (0)
感染文件: 57
文件总计: 59

iha40999

EIS  监控  KILL  55x

剩下一个exe 和一个dll   扫描miss

双击exe  无法运行

c/mm

Dr.web

llcy

jdsh

WD

还剩一个exe和一个dll

a7878330

jdsh 发表于 2019-4-20 19:35
WD

还剩一个exe和一个dll

謝謝

静影沉璧

BD

OTP拦截：
Win32.VJadtre.3


下载后扫描：解决56个。剩一个运行不了。