恶意代码

z68436425

恶意代码

hsks

360

qwerwer

火绒杀

温馨小屋

MES


DESKTOP-FUTNHKL\mcafeeLTSC 运行的 C:\Program Files\VMware\VMware Tools\vmtoolsd.exe 试图访问 C:\Users\mcafeeLTSC\AppData\Local\Temp\vmware-mcafeeLTSC\VMwareDnD\f05206ec\审查报告.doc\WordDocument。 已检测到并清理了名为 W97M/Thus.gen.a 的 特洛伊木马程序。

温馨小屋

Filename: 审查报告.doc
Threat name: W97M.Sillycopy   Full Path: C:\Users\NortonLTSC\Desktop\审查报告.doc

____________________________

____________________________


On computers as of
2021/1/16 at 10:01:15

Last Used
2021/1/16 at 10:03:15

Startup Item
No

Launched
No

Threat type: Virus. Programs that infect other programs, files, or areas of a computer by inserting themselves or attaching themselves to that medium.


____________________________


审查报告.doc Threat name: W97M.Sillycopy
Locate


Very Few Users
Fewer than 5 users in the Norton Community have used this file.

Very New
This file was released less than 1 week  ago.

High
This file risk is high.


____________________________


Source: External Media

Source File:
审查报告.doc

____________________________

File Actions

File: C:\Users\NortonLTSC\Desktop\ 审查报告.doc No fix attempted
File: C:\Users\NortonLTSC\Desktop\ 审查报告.doc Threat Removed
____________________________


File Thumbprint - SHA:
146536eecc70cdc96665ebfb60d6163cdf0004f6ab62449780573083a740cd22
File Thumbprint - MD5:
017f43c926c4aac168ac342dcbbdc160

TimelessTT

卡巴网页拦截
Trojan.MSWord.Agent.bd

温馨小屋

卡巴

事件 :        检测到恶意对象
用户 :        DESKTOP-45Q9TM2\KBLTSC
用户类型 :        活动用户
组件 :        病毒扫描
结果 :        检测到
结果说明 :        检测到
类型 :        木马
名称 :        Trojan.MSWord.Agent.bd
精确度 :        确切
威胁级别 :        高
对象类型 :        文件
对象名称 :        审查报告.doc
对象路径 :        C:\Users\KBLTSC\Desktop
MD5 :        017F43C926C4AAC168AC342DCBBDC160
原因 :        专家分析
数据库发布日期 :        今天，2021/1/16 5:58:00

henry217

还是很猛

a233

Nocria

IKARUS

1. Date and Time: 1/16/2021 12:41:29 PM
   
2. File Size: 37 kB
   
3. Detection Name: Virus.W97M.Thus
   
4. Detection-ID: 3038684
   
5. Suggestion: Backup
   
6. File Name: 审查报告.doc
   
7. Original Path: C:\Users\promi\Desktop\审查报告
   

复制代码