EXE样本10X_67

QVM360

E家清空报4个Themida壳
#67 (1).vir - Win64/Packed.Themida.IL 特洛伊木马 的变种
#67 (10).vir - Win32/Injector.EKPI 特洛伊木马 的变种
#67 (2).vir - MSIL/Kryptik.URX 特洛伊木马 的变种
#67 (3).vir - Win32/Injector.EKOT 特洛伊木马 的变种
#67 (4).vir - Win32/Formbook.AA 特洛伊木马 的变种
#67 (5).vir > AUTOIT > script.bin - Win32/Injector.Autoit.FBO 特洛伊木马 的变种
#67 (6).vir - MSIL/TrojanDropper.Agent.EPB 特洛伊木马 的变种
#67 (7).vir - Win32/Packed.Themida.AZN 特洛伊木马 的变种
#67 (8).vir - Win32/Packed.Themida.Gen.QW 特洛伊木马 的变种
#67 (9).vir - Win32/Packed.Themida.HIG 特洛伊木马 的变种

我我我55

kaspersky kill all

QVM360

火绒杀5个

Nocria

F-Secure SAFE - empited

www-tekeze

QVM360 发表于 2020-2-18 22:11
火绒杀5个

你的又比我多杀一个。。

renyifei

avira，红伞双击miss，电脑差点爆炸，这玩意貌似创建了几百个进程
扫描9/10

saga3721

红伞全杀

a233

Avast Kill 8X

#67 (2).exe和#67 (3).exe双击都是DeepScreen拦截

QVM360

www-tekeze 发表于 2020-2-18 22:15
你的又比我多杀一个。。

恭喜您成为抽风大户！

54ss

BD 扫描 9/10
C:\Users\JOJO\Downloads\EXE样本10X_67.rar=>#67 (9).vir Gen:Suspicious.Cloud.1.OzWaaG60K0p Moved to Quarantine
C:\Users\JOJO\Downloads\EXE样本10X_67.rar=>#67 (1).vir Gen:Variant.Razy.561655 Moved to Quarantine
C:\Users\JOJO\Downloads\EXE样本10X_67.rar=>#67 (2).vir Gen:Variant.MSILPerseus.210220 Moved to Quarantine
C:\Users\JOJO\Downloads\EXE样本10X_67.rar=>#67 (3).vir Trojan.Agent.ELZE Moved to Quarantine
C:\Users\JOJO\Downloads\EXE样本10X_67.rar=>#67 (4).vir Gen:Variant.Razy.557850 Moved to Quarantine
C:\Users\JOJO\Downloads\EXE样本10X_67.rar=>#67 (6).vir Gen:Variant.MSILPerseus.210244 Moved to Quarantine
C:\Users\JOJO\Downloads\EXE样本10X_67.rar=>#67 (7).vir Gen:Suspicious.Cloud.1.@zWaaSp4BHci Moved to Quarantine
C:\Users\JOJO\Downloads\EXE样本10X_67.rar=>#67 (8).vir Gen:Suspicious.Cloud.1.nAWaa8B9SJgi Moved to Quarantine
C:\Users\JOJO\Downloads\EXE样本10X_67.rar=>#67 (10).vir Gen:Variant.Babar.18456 Moved to Quarantine
双击晚了 现在五号也入库了