ransom

显示全部楼层 · 发表于 2019-5-9 17:17:35

火绒KILL

显示全部楼层 · 发表于 2019-5-9 17:19:33

没有密码？

显示全部楼层 · 发表于 2019-5-9 17:20:22

Avast Kill all
* Avast Real-time Shield Scan Report
* This file is generated automatically
*
* Started on: Thursday, May 9, 2019 4:46:07 PM
*

2019/5/9 17:19:34 C:\Users\Administrator\Desktop\payload.exe [L] Win32:Malware-gen (0)
File was successfully moved to chest...
2019/5/9 17:19:37 C:\Users\Administrator\Desktop\NS v.222.exe [L] Win32:Malware-gen (0)
File was successfully moved to chest...

显示全部楼层 · 发表于 2019-5-9 17:21:19

附上火绒报的毒名

显示全部楼层 · 发表于 2019-5-9 17:21:57

估计都是老病毒

显示全部楼层 · 发表于 2019-5-9 17:25:30

Malwarebytes
www.malwarebytes.com
-Log Details-
Scan Date: 5/9/19
Scan Time: 5:23 PM
Log File: 29a904da-723c-11e9-885c-985fd3d3c7d2.json
-Software Information-
Version: 3.7.1.2839
Components Version: 1.0.586
Update Package Version: 1.0.10526
License: Premium
-System Information-
OS: Windows 10 (Build 17763.475)
CPU: x64
File System: NTFS
User: DESKTOP-VPBE70N\zhong
-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 2
Threats Detected: 2
Threats Quarantined: 0
Time Elapsed: 1 min, 4 sec
-Scan Options-
Memory: Disabled
Startup: Disabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 2
RiskWare.NetTool, C:\USERS\ZHONG\DOWNLOADS\COMPRESSED\卡饭\RANSOM\NS V.222.EXE, No Action By User, [5981], [600170],1.0.10526
Ransom.Crysis.Generic, C:\USERS\ZHONG\DOWNLOADS\COMPRESSED\卡饭\RANSOM\PAYLOAD.EXE, No Action By User, [9842], [363350],1.0.10526
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)

复制代码

显示全部楼层 · 发表于 2019-5-9 18:00:39

第一回看到BD的引擎出黄色的名字呢。。

显示全部楼层 · 发表于 2019-5-9 18:46:36

访问被阻止
无法访问该网页

对象网址:

https://att.kafan.cn/forum.php?mo ... DN8MjE0OTExOQ%3D%3D
包含可被入侵者用来损害您的计算机或个人数据的合法软件。

not-a-virus:UDS:NetTool.Win32.Scan.qj

消息生成时间: 2019/5/9 18:46:21

显示全部楼层 · 发表于 2019-5-9 18:47:44

wusiyuanjh 发表于 2019-5-9 18:46
访问被阻止
无法访问该网页

压缩包有两个文件，要关掉网页反病毒下载

显示全部楼层 · 发表于 2019-5-9 18:48:09

BD

Dangerous page blocked for your protection
https://att.kafan.cn/forum.php?mo ... Dk1NTkzN3wyMTQ5MTE5

Dangerous pages attempt to install software that can harm the device, gather personal information or operate without your consent.

[病毒样本] ransom

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源