5x

Jirehlov1234

https://www.lanzous.com/i58zief

(*文件若在发包前传过VT，文件名为VT的First Submission；若没有传过VT，文件名为发包日期（GMT +8）及其CRC32*)

咖啡战士XD

G DATA：4/5

解压，监控1X：
2019-07-31 033424.exe - Virus: AIT:Trojan.Nymeria.2268 (2x) (Engine A)

双击，云杀1X：
（The cloud server recognized this file and identified it as malicious.）
2019-07-31 9332EEB9.exe

BB+DeepRay 1X：
（The malicious software was identified by DeepRay as follows: RemcosRAT）
2019-07-31 033433.exe

纯BB 1X：
2019-07-31 012106.exe
*** Actions ***
The program is trying to create a startup item to launch a program automatically at system startup.
The program has read data from its own program file.
A suspicious location is referenced in startup.

剩下2019-07-31 040927.exe

静影沉璧

Windows Defender全杀

kaba666

卡巴杀4个,剩下一个双击!PDM杀

Kaspersky用户

BDF扫描均MISS，运行全歼。

a233

Avast杀一个，剩余上报

ELOHIM

静影沉璧 发表于 2019-7-31 12:38
Windows Defender全杀

感谢双击，现在扫描还剩下2019-07-31 9332EEB9.exe。

暗_黑

安天智甲

a233

智量全杀

www-tekeze

楼上有智量了，火绒已全部拉黑。