da2692385bb3c11dae7507ba1c22fcaec2f8077611edce15fac060a0df247a4e

显示全部楼层 · 发表于 2019-10-18 09:36:11

显示全部楼层 · 发表于 2019-10-18 09:46:12

显示全部楼层 · 发表于 2019-10-18 10:04:07

ESET

Win32/GenKryptik.DVRM

显示全部楼层 · 发表于 2019-10-18 10:09:45

微点主防杀

显示全部楼层 · 发表于 2019-10-18 10:21:46

智量Heur杀，火绒Miss，有空双击。。

显示全部楼层 · 发表于 2019-10-18 10:25:05

安天和无BD管家，Both Scan Miss，双击，会自删除，几秒后进程自动退出，两家都没反应。

显示全部楼层 · 发表于 2019-10-18 10:36:13

G DATA

AVA 25.23715
GD 26.16332
*** Process ***
Process: 2396
File name: 2019-10-18 011755.exe
Path: C:\Users\promi\AppData\Local\Temp\BNZ.5da924f38b3f7\2019-10-18 011755.exe
Publisher: Unknown publisher
Started by: 2019-10-18 011755.exe
Publisher: Unknown publisher
*** Actions ***
An unknown process was accessed.
The program has created or manipulated an executable file.
The program attempted to remove its own program file.
The program attempted to rename its own program file.
The program attempted to move its own program file.
*** Quarantine ***
The following files were moved into quarantine:
C:\Users\promi\AppData\Local\Temp\BNZ.5da924f38b3f7\2019-10-18 011755.exe
C:\Users\promi\AppData\Local\orgchapp\orgchapp.exe
The following registry entries were deleted:
YGLhnIIHLScnJycmBi4nKCcnJwe5YuGcsrAtJycnJyYGrHKCcnJycsAvJycnJyYGj3KicpJycnBmcnJycmJicHZycnJyYmJwuHJycnJiYnB5cnJycmJicLqS0VpjKykZrTW2cpLRWmMrCOcoJ8dwb3JycnJiYnB/cnJycmJigPtygnJycnKAvnJyJycpJw4A
Rules version: 5.0.152
OS: Windows 6.3 Service Pack 0.0 Build: 9600 - Workstation 64bit OS
dll version: 76935
--81ef6b0b
MD5: B0A737FE61E17091EBCBEC651035CDEB
"C:\Users\promi\AppData\Local\Temp\BNZ.5da924f38b3f7\2019-10-18 011755.exe"
MD5: B0A737FE61E17091EBCBEC651035CDEB

复制代码

显示全部楼层 · 发表于 2019-10-18 10:38:19

WD
扫描没反应。

显示全部楼层 · 发表于 2019-10-18 10:43:53

ELOHIM 发表于 2019-10-18 10:38
WD
扫描没反应。

不服

显示全部楼层 · 发表于 2019-10-18 11:14:19

莒县小哥发表于 2019-10-18 10:43
不服

我画了六个。。。

[病毒样本] da2692385bb3c11dae7507ba1c22fcaec2f8077611edce15fac060a0df247a4e