病毒救援区的样本

ATP_synthase

https://bbs.kafan.cn/thread-2148657-1-1.html
原帖有权限，我下面贴出来好了

事发于今日凌晨。我正在打游戏。前一盘还好好的。第二盘开始出现丢帧。切出任务管理器发现CPU异常飚高！退出游戏。用xuetr检测。 果不其然。发现有可疑的进程。可疑的启动项。可疑的服务 可疑的计划任务  可疑进程结束了又复活。立马拔了网线。重启电脑。
事发前曾经蓝屏过一次。srv.sys引起的。百度搜了一下。好像是什么勒索病毒变种 但是我的电脑并没有被勒索。
昨天一天我都在打游戏。只是期间下部了电影看（是正规的电影。名字叫极盗车神 请不要想歪 认真脸）难道是那个uTorrent的问题？不会啊。我都放沙盘里面运行的。漏沙吗？

我是具有良好的上网意识。 没有装过杀毒软件。 用的是sandboxie+vmware  windows update也没有开。我记得刚装系统的时候打补丁。就因为补丁的问题搞得我系统崩溃过一次。气得我把全部补丁卸载了并关闭了update 但一直以来都是好好的

目前病毒已经被压住了。所以斗胆上来发帖。不太想重装。很麻烦。懒人不想搞。也没时间搞。 我很想很想知道攻击的源头是什么。

链接: https://pan.baidu.com/s/1N4wDnhrkk8f2qAlckVX8tA 提取码: 3m8y

761773275

Malwarebytes 全部扫描共53x

蓝天二号

卡巴用户免测？原帖里有，，，

ATP_synthase

蓝天二号 发表于 2019-5-4 19:47
卡巴用户免测？原帖里有，，，

卡巴的报毒名很清晰

杀软病综合医院

avast清除了20来个dll，裸奔被强上，找作孽的不容易

静影沉璧

BD

Scan：57X

1. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/adfw-2.dll Trojan.ShadowBrokers.A Moved to Quarantine
   
2. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/Cstr.xml Win32.Backdoor.ZBZ Moved to Quarantine
   
3. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/etch-0.dll Trojan.GenericKD.4860825 Moved to Quarantine
   
4. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/chrome..xml Backdoor.XJD Moved to Quarantine
   
5. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/coli-0.dll Trojan.GenericKD.4882691 Moved to Quarantine
   
6. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/cnli-1.dll Trojan.GenericKD.4882758 Moved to Quarantine
   
7. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/Cstr.fb Worm.HAK Moved to Quarantine
   
8. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/trch-0.dll Trojan.GenericKD.30961976 Moved to Quarantine
   
9. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/riar.dll Trojan.GenericKD.31741382 Moved to Quarantine
   
10. C:\Users\Joseph\Desktop\BD.7z=>BD/boy.exe Trojan.GenericKD.41255649 Moved to Quarantine
    
11. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/chrome..exe Backdoor.DoublePulsar.B Moved to Quarantine
    
12. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/Cstr.exe Trojan.GenericKD.4860918 Moved to Quarantine
    
13. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/adfw.dll Trojan.GenericKD.31580441 Moved to Quarantine
    
14. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/cnli-0.dll Trojan.GenericKD.4882761 Moved to Quarantine
    
15. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/crli-0.dll Trojan.GenericKD.4882762 Moved to Quarantine
    
16. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/trfo-2.dll Trojan.GenericKD.4882520 Moved to Quarantine
    
17. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/dmgd-1.dll Trojan.ShadowBrokers.A Moved to Quarantine
    
18. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/dmgd-4.dll Trojan.ShadowBrokers.A Moved to Quarantine
    
19. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/pcre-0.dll Trojan.GenericKD.4882506 Moved to Quarantine
    
20. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/esco-0.dll Trojan.GenericKD.31741378 Moved to Quarantine
    
21. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/posh.dll Trojan.GenericKD.31136390 Moved to Quarantine
    
22. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/pcreposix-0.dll Trojan.GenericKD.40279511 Moved to Quarantine
    
23. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/libxml2.dll Trojan.Agent.CXCD Moved to Quarantine
    
24. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/etchCore-0.x64.dll Trojan.Agent.CGCQ Moved to Quarantine
    
25. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/etchCore-0.x86.dll Trojan.GenericKD.4902139 Moved to Quarantine
    
26. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/eteb-2.dll Trojan.AgentWDCR.KDC Moved to Quarantine
    
27. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/tucl.dll Trojan.GenericKD.40293175 Moved to Quarantine
    
28. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/etebCore-2.x64.dll Trojan.GenericKD.4904294 Moved to Quarantine
    
29. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/etebCore-2.x86.dll Trojan.AgentWDCR.KQL Moved to Quarantine
    
30. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/exma-1.dll Trojan.GenericKD.31451589 Moved to Quarantine
    
31. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/exma.dll Trojan.GenericKD.31136052 Moved to Quarantine
    
32. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/iconv.dll Trojan.AgentWDCR.MAB Moved to Quarantine
    
33. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/libcurl.dll Exploit.Agent.MB Moved to Quarantine
    
34. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/libeay32.dll Trojan.Agent.CXCE Moved to Quarantine
    
35. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/libiconv-2.dll Trojan.Agent.CXCC Moved to Quarantine
    
36. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/pC.exe Generic.Application.CoinMiner.1.AFFF17C9 Moved to Quarantine
    
37. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/pcla-0.dll Trojan.GenericKD.4914022 Moved to Quarantine
    
38. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/zibe.dll Trojan.GenericKD.4882530 Moved to Quarantine
    
39. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/pcrecpp-0.dll Trojan.AgentWDCR.NNR Moved to Quarantine
    
40. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/posh-0.dll Trojan.GenericKD.4882518 Moved to Quarantine
    
41. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/riar-2.dll Trojan.GenericKD.40356983 Moved to Quarantine
    
42. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/tucl-1.dll Trojan.GenericKD.4882526 Moved to Quarantine
    
43. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/ssleay32.dll Trojan.ShadowBrokers.B Moved to Quarantine
    
44. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/svchost.exe Application.TcpScan.E Moved to Quarantine
    
45. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/zlib1.dll Trojan.Agent.CRCW Moved to Quarantine
    
46. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/tibe-1.dll Trojan.GenericKD.4882508 Moved to Quarantine
    
47. C:\Users\Joseph\Desktop\BD.7z=>BD/sys.exe Gen:Variant.Midie.61208 Moved to Quarantine
    
48. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/tibe-2.dll Trojan.GenericKD.4882541 Moved to Quarantine
    
49. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/ucl.dll Trojan.GenericKD.30868329 Moved to Quarantine
    
50. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/tibe.dll Trojan.GenericKD.4882542 Moved to Quarantine
    
51. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/trch-1.dll Trojan.GenericKD.4882527 Moved to Quarantine
    
52. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/trch.dll Trojan.GenericKD.31587453 Moved to Quarantine
    
53. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/trfo-0.dll Trojan.GenericKD.41186727 Moved to Quarantine
    
54. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/xdvl-0.dll Trojan.GenericKD.4880233 Moved to Quarantine
    
55. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/trfo.dll Trojan.GenericKD.31181037 Moved to Quarantine
    
56. C:\Users\Joseph\Desktop\BD.7z=>BD/NhkHj/YOEUKA.exe Trojan.GenericKD.41255649 Moved to Quarantine
    
57. C:\Users\Joseph\Desktop\BD.7z=>BD/seser.exe DeepScan:Generic.Mulinex.C26EE70D Moved to Quarantine
    

复制代码

a233

火绒Kill 51X

a233

Avast Scan Kill 55X
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\trfo.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\chrome..exe [L] Sf:WNCryLdr-A [Trj] (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\Cstr.exe [L] Sf:WNCryLdr-A [Trj] (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\pcrecpp-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\seser.exe [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\libcurl.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\riar-2.dll [L] Win32:Stuxnet-C [Wrm] (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\crli-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\tibe-1.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\cnli-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\trch.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\adfw-2.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\trch-1.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\pcla-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\trfo-2.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\sys.exe|>[Embedded_I#6bf15] [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\sys.exe [L] FileRepMalware (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\trch-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\ucl.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\libiconv-2.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\posh.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\zlib1.dll [L] Win32:Rootkit-gen [Rtk] (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\dmgd-1.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\xdvl-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\libeay32.dll [L] Win32:Rootkit-gen [Rtk] (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\etchCore-0.x64.dll [L] Win64:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\trfo-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\etebCore-2.x86.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\pcre-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\cnli-1.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\etchCore-0.x86.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\etebCore-2.x64.dll [L] Win64:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\eteb-2.dll [L] Sf:WNCryLdr-A [Trj] (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\tibe-2.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\etch-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\coli-0.dll [L] Win32:Rootkit-gen [Rtk] (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\esco-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\riar.dll [L] Win32:Stuxnet-C [Wrm] (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\svchost.exe [L] FileRepMalware (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\iconv.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\zibe.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\ssleay32.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\adfw.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\exma-1.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\exma.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\pcreposix-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\posh-0.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\dmgd-4.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\libxml2.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\tucl-1.dll [L] Win32:Rootkit-gen [Rtk] (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\tibe.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\tucl.dll [L] Win32:Malware-gen (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\pC.exe [L] Win32:CryptoMiner-L [Trj] (0)
C:\Users\Administrator\Desktop\新建文件夹\NhkHj\YOEUKA.exe [L] Win32:Dropper-gen [Drp] (0)
C:\Users\Administrator\Desktop\新建文件夹\boy.exe [L] Win32:Dropper-gen [Drp] (0)
Infected files: 55
Total files: 71
Total folders: 2
Total size: 29.2 MB

温馨小屋

Norton kill61x
看样子应该是个杀软都能解决，中毒纯属因为不打补丁不装杀软，总有人以为上网习惯好就不会中毒

已解决的威胁:
Hacktool
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 病毒
状态: 完全解决
-----------
17 个受感染文件
C:\Users\zry\Desktop\BD\BD\NhkHj\etchCore-0.x64.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\chrome..exe - 不需要操作
C:\Users\zry\Desktop\BD\BD\NhkHj\chrome..xml - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\Cstr.exe - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\etebCore-2.x64.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\etch-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\etebCore-2.x86.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\etchCore-0.x86.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\eteb-2.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\tibe-1.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\svchost.exe - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\tibe-2.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\tibe.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\trch.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\pcla-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\trfo-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\zibe.dll - 已删除
1 个浏览器缓存



Backdoor.Doublepulsar
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
C:\Users\zry\Desktop\BD\BD\NhkHj\chrome..exe - 已删除
1 个浏览器缓存



Hacktool.Equation
类型: 异常
风险: 中 (中 隐藏, 中 删除, 中 性能, 中 隐私)
类别: 黑客工具
状态: 完全解决
-----------
6 个受感染文件
C:\Users\zry\Desktop\BD\BD\NhkHj\cnli-1.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\crli-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\cnli-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\exma-1.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\trch-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\trfo-2.dll - 已删除
1 个浏览器缓存



Trojan Horse
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 病毒
状态: 完全解决
-----------
24 个受感染文件
C:\Users\zry\Desktop\BD\BD\NhkHj\pcre-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\coli-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\adfw-2.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\adfw.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\dmgd-1.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\dmgd-4.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\esco-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\iconv.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\libcurl.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\libeay32.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\exma.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\libxml2.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\pcreposix-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\posh-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\libiconv-2.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\posh.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\riar.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\ssleay32.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\trch-1.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\trfo.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\tucl.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\tucl-1.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\pcrecpp-0.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\zlib1.dll - 已删除
1 个浏览器缓存



Trojan.Gen.2
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
C:\Users\zry\Desktop\BD\BD\NhkHj\riar-2.dll - 已删除
1 个浏览器缓存



SecurityRisk.Downldr
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 安全风险
状态: 完全解决
-----------
1 个受感染文件
C:\Users\zry\Desktop\BD\BD\NhkHj\svchost.exe - 不需要操作
1 个浏览器缓存



Heur.AdvML.B
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
C:\Users\zry\Desktop\BD\BD\boy.exe - 已删除
1 个浏览器缓存



Trojan.Gen.MBT
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 病毒
状态: 完全解决
-----------
4 个受感染文件
C:\Users\zry\Desktop\BD\BD\boy.exe - 不需要操作
C:\Users\zry\Desktop\BD\BD\NhkHj\YOEUKA.exe - 不需要操作
C:\Users\zry\Desktop\BD\BD\seser.exe - 不需要操作
C:\Users\zry\Desktop\BD\BD\sys.exe - 不需要操作
1 个浏览器缓存



Heur.AdvML.B
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
C:\Users\zry\Desktop\BD\BD\NhkHj\YOEUKA.exe - 已删除
1 个浏览器缓存



Linux.Coinminer
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 病毒
状态: 完全解决
-----------
1 个受感染文件
C:\Users\zry\Desktop\BD\BD\NhkHj\pC.exe - 已删除
1 个浏览器缓存



Backdoor.Equation
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 病毒
状态: 完全解决
-----------
2 个受感染文件
C:\Users\zry\Desktop\BD\BD\NhkHj\ucl.dll - 已删除
C:\Users\zry\Desktop\BD\BD\NhkHj\xdvl-0.dll - 已删除
1 个浏览器缓存



Heur.AdvML.M
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
C:\Users\zry\Desktop\BD\BD\seser.exe - 已删除
1 个浏览器缓存



Heur.AdvML.B
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)
类别: 启发式病毒
状态: 完全解决
-----------
1 个受感染文件
C:\Users\zry\Desktop\BD\BD\sys.exe - 已删除
1 个浏览器缓存

www-tekeze

7楼有火绒了。。。智量报55X，剩余格式不检测。。