#Ransomware (2020-04-17)

显示全部楼层 · 发表于 2020-4-17 08:12:36

https://www.lanzous.com/ibib8zi

https://www.virustotal.com/gui/file/3ea89608ef8916ca26d919d84d54ae5711701aa79f7d3986261e5d0237c218fd/detection

infected

复制代码

显示全部楼层 · 发表于 2020-4-17 09:50:55

Avast
Win32:Dh-A [Heur]

显示全部楼层 · 发表于 2020-4-17 10:04:56

Norton
Heur.AdvML.B

显示全部楼层 · 发表于 2020-4-17 11:30:02

ESET Win32/Filecoder.NVR

显示全部楼层 · 发表于 2020-4-17 11:39:47

WD
Ransom:Win64/Gocoder.A!MSR

显示全部楼层 · 发表于 2020-4-17 11:51:29

智量
Heur.ML.PE.B

显示全部楼层 · 发表于 2020-4-17 15:25:36

卡巴
hi，真不巧，网页走丢了

显示全部楼层 · 发表于 2020-4-17 16:22:11

本帖最后由 54ss 于 2020-4-18 00:38 编辑

Bitdefender
The file C:\Users\ljsjo\Desktop\#Ransomware (2020-04-17)\1.exe is infected with Generic.Ransom.Snatch.3DB05698 and was moved to quarantine. It is recommended that you run a System Scan to make sure your system is clean.
双击
BDTS 触发反勒索模块自动回复了被加密的文件（完整不完整就不知道了，也不是从常用的文件夹开始加密的）
The process C:\Users\ljsjo\Desktop\1.exe manifests ransomware behavior and was blocked. Several files were encrypted but we successfully restored all of them. You can find the restored files list below.
但是还是想吐槽触发反勒索的程序居然没有被Blocked……

显示全部楼层 · 发表于 2020-4-17 21:46:28

Malwarebytes

显示全部楼层 · 发表于 2020-4-17 21:47:18

dreams521 发表于 2020-4-17 15:25
卡巴
hi，真不巧，网页走丢了

去掉www再访问试试？

[病毒样本] #Ransomware (2020-04-17)

本帖子中包含更多资源