客户邮件里面的.exe文件,火绒检测不到

椿花湫月

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 2019/9/18
Scan Time: 12:54
Log File: 627f82ba-d9d0-11e9-8202-00163e4b2b37.json

-Software Information-
Version: 3.8.3.2965
Components Version: 1.0.625
Update Package Version: 1.0.12533
License: Trial

-System Information-
OS: Windows 7 Service Pack 1
CPU: x86
File System: NTFS
User: foreign-PC\Administrator

-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 1
Threats Detected: 1
Threats Quarantined: 0
Time Elapsed: 0 min, 19 sec

-Scan Options-
Memory: Disabled
Startup: Disabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 1
Generic.Malware/Suspicious, C:\USERS\ADMINISTRATOR\DOWNLOADS\NEW PO 20190705170828699_0001.EXE, No Action By User, [0], [392686],1.0.12533

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

jdsh

fsp

wrb116

www-tekeze

www-tekeze 发表于 2019-9-18 12:38
智量Heur杀，火绒Miss，有空双击。。

恢复昨日虚拟机快照双击，很快被智量主防杀！

退出智量双击，火绒没任何弹窗 (也不会联网)，CPU占用由高到低，稍等几秒又是由高到到低，然后进程自动退出！启动绒智快速扫描无发现，不明觉厉。。   但火绒更新后已拉黑，是毒无疑！

ppt1845

卡巴，直接把下载拦截了。

对象名称： Trojan-Spy.Win32.Noon.amdd
对象类型： 木马程序

古月哥欠

管家的病毒库的确很大。。

LOL

www-tekeze 发表于 2019-9-18 20:52
恢复昨日虚拟机快照双击，很快被智量主防杀！

退出智量双击，火绒没任何弹窗 (也不会联网)，CPU ...

以后双击的时候可以拿着火绒剑愁一愁有啥动作啊.

fever腾腾

瑞星 kill

qingge0709

诺顿解压杀