【B站的病毒】性感tuza，在线弱智病毒

3245076553

https://pan.baidu.com/s/1uofotoCXeQBbnFfKYRgGeg 提取码: 44ci

LSPD

建议楼主善用搜索这里边不少病毒以前在坛子里发过

3245076553

LSPD 发表于 2019-8-15 10:31
建议楼主善用搜索这里边不少病毒以前在坛子里发过

这些是我毒库里收藏的，如果重复请见谅

3245076553

LSPD 发表于 2019-8-15 10:31
建议楼主善用搜索这里边不少病毒以前在坛子里发过

样本是我从QQ群里收集的

静影沉璧

https://c-t.work/s/5b05e3cbff7a4c

做了个集合，统一密码infected

忍不住啰嗦两句：
1.请楼主把样本汇总到一起
2.尽量避免使用百度网盘……





ESET

1. Log
   
2. Scan Log
   
3. Version of detection engine: 19856 (20190814)
   
4. Date: 2019/8/15  Time: 11:10:07
   
5. Scanned disks, folders and files: C:\Users\Administrator\Desktop\Malware
   
6. C:\Users\Administrator\Desktop\Malware\FaceD（密码：tuza)\FaceD.tz - a variant of Win32/FlyStudio.Injector.D potentially unwanted application - action selection postponed until scan completion
   
7. C:\Users\Administrator\Desktop\Malware\[密码：tuza]病毒Give It Up\Give It Up病毒\Give It Up.exe - a variant of Win32/FlyStudio.Injector.D potentially unwanted application - action selection postponed until scan completion
   
8. C:\Users\Administrator\Desktop\Malware\[密码：tuza]贼带感的病毒（结尾自带高能弹窗！！)\迅雷不限速\病毒.exe - a variant of Win32/Kryptik.GJDY trojan - cleaned by deleting [1]
   
9. C:\Users\Administrator\Desktop\Malware\一个腼腆的病毒（密码：tuza）\病毒.exe - a variant of Win32/Disabler.NCO trojan - cleaned by deleting [1]
   
10. C:\Users\Administrator\Desktop\Malware\哲学♂病毒（密码：tuza）\Q币刷取器.exe - a variant of Win32/Packed.FlyStudio.AA potentially unwanted application - action selection postponed until scan completion
    
11. C:\Users\Administrator\Desktop\Malware\如何吸旺仔牛奶（密码：tuza）\krnln.fnr - a variant of Win32/Packed.FlyStudio.AA potentially unwanted application - action selection postponed until scan completion
    
12. C:\Users\Administrator\Desktop\Malware\如何吸旺仔牛奶（密码：tuza）\解除程序.exe - a variant of Win32/Disabler.NCP trojan - cleaned by deleting [1]
    
13. C:\Users\Administrator\Desktop\Malware\性感tuza，在线弱智病毒 密码还是国际惯例 密码：tuza\性感tuza，在线弱智安装包.exe - Win32/BadJoke.GQ trojan - cleaned by deleting [1]
    
14. C:\Users\Administrator\Desktop\Malware\永恒之绿密码  tuza\永恒之绿.exe - a variant of Win32/Packed.FlyStudio.AA potentially unwanted application - action selection postponed until scan completion
    
15. C:\Users\Administrator\Desktop\Malware\绯色月下（密码：tuza）\WindowsKiller.exe - a variant of Win32/Kryptik.GJDY trojan - cleaned by deleting [1]
    
16. C:\Users\Administrator\Desktop\Malware\芦苇病毒（密码：tuza）\芦苇病毒.exe - a variant of Win32/Disabler.NCO trojan - cleaned by deleting [1]
    
17. C:\Users\Administrator\Desktop\Malware\FaceD（密码：tuza)\FaceD.tz - a variant of Win32/FlyStudio.Injector.D potentially unwanted application - deleted
    
18. C:\Users\Administrator\Desktop\Malware\[密码：tuza]病毒Give It Up\Give It Up病毒\Give It Up.exe - a variant of Win32/FlyStudio.Injector.D potentially unwanted application - deleted
    
19. C:\Users\Administrator\Desktop\Malware\哲学♂病毒（密码：tuza）\Q币刷取器.exe - a variant of Win32/Packed.FlyStudio.AA potentially unwanted application - deleted
    
20. C:\Users\Administrator\Desktop\Malware\如何吸旺仔牛奶（密码：tuza）\krnln.fnr - a variant of Win32/Packed.FlyStudio.AA potentially unwanted application - deleted
    
21. C:\Users\Administrator\Desktop\Malware\永恒之绿密码  tuza\永恒之绿.exe - a variant of Win32/Packed.FlyStudio.AA potentially unwanted application - deleted
    
22. Number of scanned objects: 20
    
23. Number of detections: 11
    
24. Number of cleaned objects: 11
    
25. Time of completion: 11:10:42  Total scanning time: 35 sec (00:00:35)
    
26. 
    
27. Notes:
    
28. [1] Object has been deleted as it only contained the virus body.
    

复制代码

Willy19928

静影沉璧 发表于 2019-8-15 11:16
https://c-t.work/s/5b05e3cbff7a4c

做了个集合，统一密码infected

SEP剩10个

静影沉璧

Willy19928 发表于 2019-8-15 12:03
SEP剩10个

十个文件夹？还是全没杀？

Willy19928

静影沉璧 发表于 2019-8-15 12:09
十个文件夹？还是全没杀？

我去查一下纪录，他杀10个，可能看到文件夹

www-tekeze

总共20个文件，绒智都是杀10X，智量全是Heur杀！

www-tekeze

安天智甲，killed 11X 。。。管家无BD，killed 8X 。