78a0005726d96bd85f9cef05382f311d9091b6ce70422f81abf7150d967db835

显示全部楼层 · 发表于 2019-6-28 19:18:02

显示全部楼层 · 发表于 2019-6-28 19:20:13

火绒扫描 miss

显示全部楼层 · 发表于 2019-6-28 19:23:48

Emsisoft Anti-Malware

显示全部楼层 · 发表于 2019-6-28 19:29:27

显示全部楼层 · 发表于 2019-6-28 19:49:56

卡巴KILL

显示全部楼层 · 发表于 2019-6-28 20:20:45

cylance MISS

显示全部楼层 · 发表于 2019-6-28 20:26:37

G DATA

AVA 25.22569
GD 25.15422
*** Process ***
Process: 4532
File name: a403d95456fa47b893fd0a47dd455579.exe
Path: C:\Users\promi\AppData\Local\Temp\Rar$EXb5544.25691\a403d95456fa47b893fd0a47dd455579.exe
Publisher: Unknown publisher
Creation date: 2019年6月28日 20:26:01
Modification date: 2019年6月28日 19:13:03
Started by: a403d95456fa47b893fd0a47dd455579.exe
Publisher: Unknown publisher
*** Actions ***
An unknown process was accessed.
*** Quarantine ***
The following files were moved into quarantine:
C:\Program Files\WinRAR\WinRAR.exe
C:\Users\promi\AppData\Local\Temp\Rar$EXb5544.25691\a403d95456fa47b893fd0a47dd455579.exe
C:\Users\promi\AppData\Roaming\Microsoft\Crypto\RSA\S-1-5-21-991177117-836654228-62314956-1001\0dd0dc306fa15bf456abac64eab2c7df_6e0ceef0-70ff-4f6a-8ea6-93c98ed880d7
The following registry entries were deleted:
YGLRh3IILicnJycmBrli0YfCkC4nJyYmJwfKcnJiYnJywConJycnJgaNcnJiYnJycPdycnJyYmJwupKRV2MqKFhjKycZeTWmcnDacoJiYnKCcPtycnJyYmJw/HJyYmJycnCOctJw3nJyYmJycoCWcnKA+3JycnJiYoC+crJyknKCAAA
Rules version: 5.0.152
OS: Windows 6.3 Service Pack 0.0 Build: 9600 - Workstation 64bit OS
dll version: 76935
"C:\Users\promi\AppData\Local\Temp\Rar$EXb5544.25691\a403d95456fa47b893fd0a47dd455579.exe" -q=3593297772
MD5: A403D95456FA47B893FD0A47DD455579
"C:\Users\promi\AppData\Local\Temp\Rar$EXb5544.25691\a403d95456fa47b893fd0a47dd455579.exe" -q=3593297772
MD5: A403D95456FA47B893FD0A47DD455579

复制代码

显示全部楼层 · 发表于 2019-6-28 23:43:16

智量Heur杀，火绒miss，有空双击。。

显示全部楼层 · 发表于 2019-6-29 01:47:53

sentinelOne 拉黑

显示全部楼层 · 发表于 2019-6-29 11:06:13

BD查杀。

An infected file attempted to run on your device.

Threat name: Trojan.GenericKD.32090881

Path: /Users/Travis/Downloads/a403d95456fa47b893fd0a47dd455579.exe

We deleted the file to prevent malicious commands from being executed on your device.

[其他相关] 78a0005726d96bd85f9cef05382f311d9091b6ce70422f81abf7150d967db835