11x

Jirehlov1234

https://www.lanzous.com/i5242jc

静影沉璧

BD

2019-07-19 003040.exe  Trojan.GenericKD.32164540
2019-07-18 220410.exe  Trojan.GenericKD.32164972
2019-07-18 225629.exe  Trojan.GenericKD.32165113
2019-07-19 3A98A85F.exe  Gen:Variant.MSILPerseus.64509
2019-07-19 3D6453F4.exe  Gen:Variant.Razy.396392、
2019-07-19 70F995FB.exe  Backdoor.MSIL.Agent.GD
2019-07-19 025123.exe  Gen:Suspicious.Cloud.2.Km0@aGhaFTji

2019-07-16 5E4CA897.js

zhoutaoyu

BD for Mac扫描
6/11

An infected file attempted to run on your device.

Threat name: Backdoor.MSIL.Agent.GD

Path: /Users/Travis/Downloads/7.19_2/2019-07-19 70F995FB.exe

We deleted the file to prevent malicious commands from being executed on your device.

An infected file attempted to run on your device.

Threat name: Gen:Variant.Razy.396392

Path: /Users/Travis/Downloads/7.19_2/2019-07-19 3D6453F4.exe

We deleted the file to prevent malicious commands from being executed on your device.

An infected file attempted to run on your device.

Threat name: Gen:Variant.MSILPerseus.64509

Path: /Users/Travis/Downloads/7.19_2/2019-07-19 3A98A85F.exe

We deleted the file to prevent malicious commands from being executed on your device.

An infected file attempted to run on your device.

Threat name: Trojan.GenericKD.32165113

Path: /Users/Travis/Downloads/7.19_2/2019-07-18 225629.exe

We deleted the file to prevent malicious commands from being executed on your device.

An infected file attempted to run on your device.

Threat name: Trojan.GenericKD.32164972

Path: /Users/Travis/Downloads/7.19_2/2019-07-18 220410.exe

We deleted the file to prevent malicious commands from being executed on your device.

An infected file attempted to run on your device.

Threat name: Trojan.GenericKD.32164540

Path: /Users/Travis/Downloads/7.19_2/2019-07-19 003040.exe

We deleted the file to prevent malicious commands from being executed on your device.

bbs2811125

Avira  kill7x

1. 07/19/2019,14-32-12        [INFO]        FP 报告文件 'd:\搜狗高速下载\7.19_2\2019-07-18 220410.exe' 的“无误报”状态 [I:10, S:111]
   
2. 07/19/2019,14-32-12        [INFO]        文件已通过 Protection Cloud扫描。 SHA256 = d:\搜狗高速下载\7.19_2\2019-07-18 220410.exe [I:2, S:0]
   
3. 07/19/2019,14-32-12        [INFO]        d:\搜狗高速下载\7.19_2\2019-07-18 220410.exe
   
4. 07/19/2019,14-32-12        [INFO]        [DETECTION] file contains 'HEUR/APC'
   
5. 07/19/2019,14-32-14        [INFO]        FP 报告文件 'd:\搜狗高速下载\7.19_2\2019-07-18 225629.exe' 的“无误报”状态 [I:10, S:111]
   
6. 07/19/2019,14-32-14        [INFO]        文件已通过 Protection Cloud扫描。 SHA256 = d:\搜狗高速下载\7.19_2\2019-07-18 225629.exe [I:2, S:0]
   
7. 07/19/2019,14-32-14        [INFO]        d:\搜狗高速下载\7.19_2\2019-07-18 225629.exe
   
8. 07/19/2019,14-32-14        [INFO]        [DETECTION] file contains 'TR/Dropper.VB.Gen'
   
9. 07/19/2019,14-32-14        [INFO]        文件已通过 Protection Cloud扫描。 SHA256 = d:\搜狗高速下载\7.19_2\2019-07-19 003040.exe [I:2, S:100]
   
10. 07/19/2019,14-32-15        [INFO]        FP 报告文件 'd:\搜狗高速下载\7.19_2\2019-07-19 025123.exe' 的“无误报”状态 [I:10, S:111]
    
11. 07/19/2019,14-32-15        [INFO]        文件已通过 Protection Cloud扫描。 SHA256 = d:\搜狗高速下载\7.19_2\2019-07-19 025123.exe [I:2, S:0]
    
12. 07/19/2019,14-32-15        [INFO]        d:\搜狗高速下载\7.19_2\2019-07-19 025123.exe
    
13. 07/19/2019,14-32-15        [INFO]        [DETECTION] file contains 'TR/AD.MoksSteal.20f219'
    
14. 07/19/2019,14-32-39        [INFO]        FP 报告文件 'd:\搜狗高速下载\7.19_2\2019-07-19 025E7DE5.exe' 的“无误报”状态 [I:10, S:111]
    
15. 07/19/2019,14-32-39        [INFO]        文件 'd:\搜狗高速下载\7.19_2\2019-07-19 025E7DE5.exe' 已上传至 Protection Cloud 并已进行分析。 SHA256 = 115DA7A5078BBA1FB1B6B0AF0DC0113969D70F4FEB8F5AD2D887F0ADF2771064 [I:2, S:0]
    
16. 07/19/2019,14-32-39        [INFO]        d:\搜狗高速下载\7.19_2\2019-07-19 025E7DE5.exe
    
17. 07/19/2019,14-32-39        [INFO]        [DETECTION] file contains 'TR/Kryptik.115da7'
    
18. 07/19/2019,14-32-40        [INFO]        FP 报告文件 'd:\搜狗高速下载\7.19_2\2019-07-19 3A98A85F.exe' 的“无误报”状态 [I:10, S:111]
    
19. 07/19/2019,14-32-40        [INFO]        d:\搜狗高速下载\7.19_2\2019-07-19 3A98A85F.exe
    
20. 07/19/2019,14-32-40        [INFO]        [DETECTION] file contains 'TR/Dropper.Gen'
    
21. 07/19/2019,14-32-40        [INFO]        FP 报告文件 'd:\搜狗高速下载\7.19_2\2019-07-19 3D6453F4.exe' 的“无误报”状态 [I:10, S:111]
    
22. 07/19/2019,14-32-40        [INFO]        d:\搜狗高速下载\7.19_2\2019-07-19 3D6453F4.exe
    
23. 07/19/2019,14-32-40        [INFO]        [DETECTION] file contains 'TR/Spy.Gen8'
    
24. 07/19/2019,14-32-41        [INFO]        FP 报告文件 'd:\搜狗高速下载\7.19_2\2019-07-19 70F995FB.exe' 的“无误报”状态 [I:10, S:111]
    
25. 07/19/2019,14-32-41        [INFO]        d:\搜狗高速下载\7.19_2\2019-07-19 70F995FB.exe
    
26. 07/19/2019,14-32-41        [INFO]        [DETECTION] file contains 'TR/Dropper.MSIL.Gen7'

复制代码

你好，再见

Jerry.Lin

Panda Dome
1/11

1. 检测到后门 Bck/Agent.KNM           位置：C:\Users\zhong.000\Downloads\Compressed\卡饭\7.19_2\2019-07-19 70F995FB.exe               

复制代码

吃土豆的小山腰

卡巴 扫描 剩下三个   其中最后一个信任      剩下的三个中 双击 杀一个  

XywCloud

瑞星安全云终端断网：4/11

www-tekeze

火绒 killed 4X，智量清空！

a233

Avast Kill 9X