#ransomware 8x

QVM360

https://www.lanzous.com/i9e9iyj

swizzer

智量扫描7/8

双击，咖啡kill

Jerry.Lin

ESET
7/8

1. 时间;扫描程序;对象类型;对象;检测;操作;用户;信息;哈希;此处首次所见
   
2. 2/15/2020 9:24:59 PM;文件系统实时防护;文件;C:\Users\zhong\Downloads\MalwareTest\Kafan\8x（20200216）\ransomware 8x\phobos_chk.exe;Win32/Filecoder.Phobos.C 特洛伊木马;通过删除清除;DESKTOP-KM3A835\zhong;在应用程序新建的文件上发生事件: C:\Users\zhong\Downloads\WinRAR\x64\WinRAR.exe (606C685D54E2680C05BAF2D901D159C30513DC03).;CCDC9AB1422FC894ED61C83C431626F26CD31378;2/15/2020 9:24:53 PM
   
3. 2/15/2020 9:24:59 PM;文件系统实时防护;文件;C:\Users\zhong\Downloads\MalwareTest\Kafan\8x（20200216）\ransomware 8x\ELINT.exe;Win32/Filecoder.Sodinokibi.B 特洛伊木马 的变种;通过删除清除;DESKTOP-KM3A835\zhong;在应用程序新建的文件上发生事件: C:\Users\zhong\Downloads\WinRAR\x64\WinRAR.exe (606C685D54E2680C05BAF2D901D159C30513DC03).;9244CBAA9B68315731B1BA1D1594F5E6CDDE12CE;2/15/2020 9:24:53 PM
   
4. 2/15/2020 9:24:59 PM;文件系统实时防护;文件;C:\Users\zhong\Downloads\MalwareTest\Kafan\8x（20200216）\ransomware 8x\1Tyki.exe;MSIL/Kryptik.SHS 特洛伊木马 的变种;通过删除清除;DESKTOP-KM3A835\zhong;在应用程序新建的文件上发生事件: C:\Users\zhong\Downloads\WinRAR\x64\WinRAR.exe (606C685D54E2680C05BAF2D901D159C30513DC03).;8A0D83EA827C013D1A5E46F399C493E68A499BC5;2/15/2020 9:24:52 PM
   
5. 2/15/2020 9:24:59 PM;文件系统实时防护;文件;C:\Users\zhong\Downloads\MalwareTest\Kafan\8x（20200216）\ransomware 8x\Endermanch@Cerber5.exe;Win32/Kryptik.FVAX 特洛伊木马 的变种;通过删除清除;DESKTOP-KM3A835\zhong;在应用程序新建的文件上发生事件: C:\Users\zhong\Downloads\WinRAR\x64\WinRAR.exe (606C685D54E2680C05BAF2D901D159C30513DC03).;C07DFDEA8DA2DA5BAD036E7C2F5D37582E1CF684;2/15/2020 9:24:53 PM
   
6. 2/15/2020 9:24:59 PM;文件系统实时防护;文件;C:\Users\zhong\Downloads\MalwareTest\Kafan\8x（20200216）\ransomware 8x\Deniz_K_z_.exe;Win32/Filecoder.NZK 特洛伊木马 的变种;通过删除清除;DESKTOP-KM3A835\zhong;在应用程序新建的文件上发生事件: C:\Users\zhong\Downloads\WinRAR\x64\WinRAR.exe (606C685D54E2680C05BAF2D901D159C30513DC03).;4DDA3AF9601922394F0C16713180BEB2EC88C050;2/15/2020 9:24:53 PM
   
7. 2/15/2020 9:25:05 PM;文件系统实时防护;文件;C:\Users\zhong\Downloads\MalwareTest\Kafan\8x（20200216）\ransomware 8x\1.exe;MSIL/Filecoder.Fantom.N 特洛伊木马 的变种;通过删除清除;DESKTOP-KM3A835\zhong;在应用程序新建的文件上发生事件: C:\Users\zhong\Downloads\WinRAR\x64\WinRAR.exe (606C685D54E2680C05BAF2D901D159C30513DC03).;20C4569CBB6F2650B02F6A5257FAA8A8DFB298BD;2/15/2020 9:24:52 PM
   
8. 2/15/2020 9:25:09 PM;文件系统实时防护;文件;C:\Users\zhong\Downloads\MalwareTest\Kafan\8x（20200216）\ransomware 8x\3.exe;Win32/Injector.Autoit.FBO 特洛伊木马 的变种;通过删除清除;DESKTOP-KM3A835\zhong;在应用程序新建的文件上发生事件: C:\Users\zhong\Downloads\WinRAR\x64\WinRAR.exe (606C685D54E2680C05BAF2D901D159C30513DC03).;AA2A359B6860216D9ABF6EB4FE1C3C473E2FB2B8;

复制代码

静影沉璧

KIS 清空

www-tekeze

火绒杀5X，智量杀7X，留一个2.exe，有空双击。。

hklwk

McAfee 扫瞄清空

www-tekeze

安天报8项实杀7X，留一个Deniz_K_z_.exe 。。。无BD管家杀4X 。

a233

Avast清空

梦辍

360卫士
默认引擎：7x
加qvm：7x
加红伞：8x

Nocria

IKARUS - 7/8

1. [16.02.2020 12:27:23] On-demand scan started: "user_defined"
   
2. [16.02.2020 12:27:23] Found, 0.00s, SigName: "Trojan-Ransom.Fantom", SigId: 292248928, Type: "VIRUS", File: "C:\Users\promi\Desktop\8x（20200216）\ransomware 8x\1.exe"
   
3. [16.02.2020 12:27:23] Found, 0.00s, SigName: "Trojan.Win32.Injector", SigId: 292079494, Type: "VIRUS", File: "C:\Users\promi\Desktop\8x（20200216）\ransomware 8x\3.exe"
   
4. [16.02.2020 12:27:23] Found, 0.16s, SigName: "Trojan.MSIL.SmartAssembly", SigId: 3712385, Type: "VIRUS", File: "C:\Users\promi\Desktop\8x（20200216）\ransomware 8x\1Tyki.exe"
   
5. [16.02.2020 12:27:23] Found, 0.47s, SigName: "Trojan-Ransom.FileCrypter", SigId: 3727625, Type: "VIRUS", File: "C:\Users\promi\Desktop\8x（20200216）\ransomware 8x\Deniz_K_z_.exe"
   
6. [16.02.2020 12:27:23] Found, 0.47s, SigName: "Trojan-Ransom.Aleta", SigId: 3209488, Type: "VIRUS", File: "C:\Users\promi\Desktop\8x（20200216）\ransomware 8x\Endermanch@Cerber5.exe"
   
7. [16.02.2020 12:27:23] Found, 0.141s, SigName: "Trojan-Ransom.Phobos", SigId: 3416617, Type: "VIRUS", File: "C:\Users\promi\Desktop\8x（20200216）\ransomware 8x\phobos_chk.exe"
   
8. [16.02.2020 12:27:24] Found, 1.141s, SigName: "Trojan-Ransom.Sodinokibi", SigId: 3403844, Type: "VIRUS", File: "C:\Users\promi\Desktop\8x（20200216）\ransomware 8x\ELINT.exe"
   
9. [16.02.2020 12:27:24] On-demand scan FINISHED: "user_defined"
   
10. [16.02.2020 12:27:24] ----------------------------------------------------
    
11. [16.02.2020 12:27:24] Directories scanned: 2
    
12. [16.02.2020 12:27:24] Files scanned: 8
    
13. [16.02.2020 12:27:24] Virus found: 7
    
14. [16.02.2020 12:27:24] ----------------------------------------------------

复制代码