a23516e80493ba23b7d1b922d09f94fc

显示全部楼层 · 发表于 2020-7-21 07:41:32

显示全部楼层 · 发表于 2020-7-21 07:52:43

智量扫描Miss 已上报

显示全部楼层 · 发表于 2020-7-21 07:59:58

瑞星 Miss

显示全部楼层 · 发表于 2020-7-21 08:39:35

卡巴beta 清空

显示全部楼层 · 发表于 2020-7-21 08:51:23

Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
2020/7/21 8:50:16;Real-time file system protection;file;C:\Users\Administrator\AppData\Roaming\Microsoft\Office\Recent\5b06d010ebe90a44.dotm.url;LNK/Agent.CH trojan;cleaned by deleting;DESKTOP-1MTL10A\Administrator;Event occurred on a new file created by the application: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE (A3E5666A7524C6D068703FD10DFD153D4BFA518C).;9D99B3C4AC0F49F771986F8698C620B6CA11B4D5;2020/7/21 8:50:14
2020/7/21 8:50:16;Real-time file system protection;file;C:\Users\Administrator\AppData\Roaming\Microsoft\Office\Recent\shop.redlist.cyou.url;LNK/Agent.CH trojan;cleaned by deleting;DESKTOP-1MTL10A\Administrator;Event occurred on a new file created by the application: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE (A3E5666A7524C6D068703FD10DFD153D4BFA518C).;65D19279C4C1E58D60DD6C40DFB56CC15E6F9491;2020/7/21 8:50:14
2020/7/21 8:50:16;Real-time file system protection;file;C:\Users\Administrator\AppData\Local\Microsoft\Windows\INetCache\IE\OFFE031D\5b06d010ebe90a44[1].dotm;a variant of Generik.JNWHHWV trojan;cleaned by deleting;DESKTOP-1MTL10A\Administrator;Event occurred on a new file created by the application: C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE (A3E5666A7524C6D068703FD10DFD153D4BFA518C).;C6DA737B88B43B4F3D67DDBB5DB2CFB9FB79C49E;2020/7/21 8:50:13

复制代码

显示全部楼层 · 发表于 2020-7-21 09:02:15

本帖最后由 QVM360 于 2020-7-21 09:26 编辑

eset miss
火绒 miss
火绒双击miss

显示全部楼层 · 发表于 2020-7-21 09:07:26

BEST
双击杀衍生物
VB:Trojan.Valyria.479

显示全部楼层 · 发表于 2020-7-21 10:46:30

本帖最后由 LSPD 于 2020-7-21 10:48 编辑

Norton blocked

类别：脚本控制
日期和时间,风险,活动,状态,推荐的操作,类别,签名,策略名称,对象,目标路径
2020/7/21 10:47:48,信息,已阻止 cmd.exe 在 Microsoft Word 中执行,已阻止,不需要操作,脚本控制,ACM.Word!g2,Microsoft Word,cmd.exe,c:\windows\syswow64\cmd.exe

复制代码

[病毒样本] a23516e80493ba23b7d1b922d09f94fc