adware_x24

舞尽繁华

大蜘蛛鸡蛋

ericdj

温馨小屋 发表于 2021-1-16 15:47
卡巴扫描8个，剩下的双击全miss，系统已经被霍霍成一坨屎了

老司机居然手软了？！？？！？！？

sichuanwenxuan

温馨小屋

ericdj 发表于 2021-1-16 20:44
老司机居然手软了？！？？！？！？

不知道啥情况，之前卡巴PDM杀广告很猛的，现在萎了。。。

Nocria

IKARUS 翻车

1. [16.01.2021 21:30:47] On-demand scan started: "user_defined"
   
2. [16.01.2021 21:30:47] Found, 0.531s, SigName: "Trojan.Win32.Valcaryx", SigId: 3498125, Type: "VIRUS", File: "C:\Users\promi\Desktop\adware_x24\heert[1].exe"
   
3. [16.01.2021 21:30:48] Found, 0.31s, SigName: "PUA.RiskWare.Youxun", SigId: 3373214, Type: "VIRUS", File: "C:\Users\promi\Desktop\adware_x24\NewestGame.exe"
   
4. [16.01.2021 21:30:48] Found, 0.468s, SigName: "Trojan.Win32.Valcaryx", SigId: 3498125, Type: "VIRUS", File: "C:\Users\promi\Desktop\adware_x24\teblueye.exe"
   
5. [16.01.2021 21:30:50] Found, 0.625s, SigName: "Trojan.Win32.Valcaryx", SigId: 3498125, Type: "VIRUS", File: "C:\Users\promi\Desktop\adware_x24\WebPlus[1].exe"
   
6. [16.01.2021 21:30:50] On-demand scan FINISHED: "user_defined"
   
7. [16.01.2021 21:30:50] ----------------------------------------------------
   
8. [16.01.2021 21:30:50] Directories scanned: 1
   
9. [16.01.2021 21:30:50] Files scanned: 24
   
10. [16.01.2021 21:30:50] Virus found: 4
    
11. [16.01.2021 21:30:50] ----------------------------------------------------
    

复制代码

G DATA - 17/24

1. Virus check with G DATA INTERNET SECURITY
   
2. Version 25.5.9.25 (10/6/2020)
   
3. Virus signature dated 1/16/2021
   
4. Start time: 1/16/2021 21:34:58
   
5. Engine(s): Engine A (AVA 25.28357), Engine B (GD 27.21610)
   
6. Heuristics: On
   
7. Archives: On
   
8. System areas: Off
   
9. Check rootkits: Off
   
10. 
    
11. Check the following directories and files:
    
12.   C:\Users\promi\Desktop\adware_x24\
    
13. 
    
14. Analysis performed in full: 1/16/2021 21:35:07
    
15.     24 files checked
    
16.     17 infected files detected
    
17.     0 suspicious files found
    
18. 
    
19. 
    
20. Object: Actinotity.exe
    
21.         Path: C:\Users\promi\Desktop\adware_x24
    
22.         Status: Virus removed
    
23.         Virus: Trojan.GenericKD.45077817 (Engine A)
    
24. 
    
25. Object: commtools[1].exe
    
26.         Path: C:\Users\promi\Desktop\adware_x24
    
27.         Status: Virus removed
    
28.         Virus: Gen:Variant.Bulz.264541 (Engine A)
    
29. 
    
30. Object: CurNews.exe
    
31.         Path: C:\Users\promi\Desktop\adware_x24
    
32.         Status: Virus removed
    
33.         Virus: Gen:Variant.Zusy.307044 (Engine A)
    
34. 
    
35. Object: FastNet.exe
    
36.         Path: C:\Users\promi\Desktop\adware_x24
    
37.         Status: Virus removed
    
38.         Virus: Gen:Variant.Johnnie.258967 (Engine A)
    
39. 
    
40. Archive: afx1BDB.exe
    
41.         Path: C:\Users\promi\Desktop\adware_x24
    
42.         Status: Junkware (PUP), file removed
    
43.         Junkware (PUP): Gen:Variant.Application.Bundler.YouXun.3 (Engine A)
    
44.         ----------------------------------------------------------------
    
45.         Object: ( UnpackX )
    
46.                 In archive: C:\Users\promi\Desktop\adware_x24\afx1BDB.exe
    
47.                 Status: Junkware (PUP) found
    
48.                 Junkware (PUP): Gen:Variant.Application.Bundler.YouXun.3
    
49.         ----------------------------------------------------------------
    
50. 
    
51. Archive: fz_8B5D.exe
    
52.         Path: C:\Users\promi\Desktop\adware_x24
    
53.         Status: Junkware (PUP), file removed
    
54.         Junkware (PUP): Gen:Variant.Application.Bundler.YouXun.3 (Engine A)
    
55.         ----------------------------------------------------------------
    
56.         Object: ( UnpackX )
    
57.                 In archive: C:\Users\promi\Desktop\adware_x24\fz_8B5D.exe
    
58.                 Status: Junkware (PUP) found
    
59.                 Junkware (PUP): Gen:Variant.Application.Bundler.YouXun.3
    
60.         ----------------------------------------------------------------
    
61. 
    
62. Archive: heert[1].exe
    
63.         Path: C:\Users\promi\Desktop\adware_x24
    
64.         Status: Junkware (PUP), file removed
    
65.         Junkware (PUP): Gen:Variant.Application.Bundler.YouXun.3 (Engine A)
    
66.         ----------------------------------------------------------------
    
67.         Object: ( UnpackX )
    
68.                 In archive: C:\Users\promi\Desktop\adware_x24\heert[1].exe
    
69.                 Status: Junkware (PUP) found
    
70.                 Junkware (PUP): Gen:Variant.Application.Bundler.YouXun.3
    
71.         ----------------------------------------------------------------
    
72. 
    
73. Object: meege.exe
    
74.         Path: C:\Users\promi\Desktop\adware_x24
    
75.         Status: Virus removed
    
76.         Virus: Gen:Variant.Razy.551595 (Engine A)
    
77. 
    
78. Object: MiniPlus.exe
    
79.         Path: C:\Users\promi\Desktop\adware_x24
    
80.         Status: Virus removed
    
81.         Virus: Gen:Variant.Johnnie.267129 (Engine A)
    
82. 
    
83. Object: NewestGame.exe
    
84.         Path: C:\Users\promi\Desktop\adware_x24
    
85.         Status: Virus removed
    
86.         Virus: Gen:Variant.Johnnie.222160 (Engine A)
    
87. 
    
88. Object: NewestNews.exe
    
89.         Path: C:\Users\promi\Desktop\adware_x24
    
90.         Status: Virus removed
    
91.         Virus: Gen:Variant.Zusy.306489 (Engine A)
    
92. 
    
93. Object: teblueye.exe
    
94.         Path: C:\Users\promi\Desktop\adware_x24
    
95.         Status: Virus removed
    
96.         Virus: Gen:Variant.Johnnie.276755 (Engine A)
    
97. 
    
98. Object: TsvmService.exe
    
99.         Path: C:\Users\promi\Desktop\adware_x24
    
100.         Status: Virus removed
     
101.         Virus: Gen:Variant.Johnnie.299081 (Engine A)
     
102. 
     
103. Object: UpdateControl.exe
     
104.         Path: C:\Users\promi\Desktop\adware_x24
     
105.         Status: Junkware (PUP) removed
     
106.         Junkware (PUP): Gen:Variant.Application.Bundler.YouXun.Mikey.18 (Engine A)
     
107. 
     
108. Object: UXYACD.dll
     
109.         Path: C:\Users\promi\Desktop\adware_x24
     
110.         Status: Virus removed
     
111.         Virus: Gen:Backdoor.Heur.Hupigon.CQ8@dyu!TShi (Engine A)
     
112. 
     
113. Archive: WebPlus[1].exe
     
114.         Path: C:\Users\promi\Desktop\adware_x24
     
115.         Status: Junkware (PUP), file removed
     
116.         Junkware (PUP): Gen:Variant.Application.Bundler.YouXun.3 (Engine A)
     
117.         ----------------------------------------------------------------
     
118.         Object: ( UnpackX )
     
119.                 In archive: C:\Users\promi\Desktop\adware_x24\WebPlus[1].exe
     
120.                 Status: Junkware (PUP) found
     
121.                 Junkware (PUP): Gen:Variant.Application.Bundler.YouXun.3
     
122.         ----------------------------------------------------------------
     
123. 
     
124. Object: xab_fey[1].exe
     
125.         Path: C:\Users\promi\Desktop\adware_x24
     
126.         Status: Virus removed
     
127.         Virus: Gen:Variant.Zusy.360094 (Engine A)
     

复制代码

浮生如梦

54ss

BitterLotus 发表于 2021-1-16 16:07
BD 6个

你是压缩包里扫的吗

ericdj

温馨小屋 发表于 2021-1-16 21:21
不知道啥情况，之前卡巴PDM杀广告很猛的，现在萎了。。。

不明觉厉了……

ttdown

54ss 发表于 2021-1-16 21:44
你是压缩包里扫的吗

BDF今天15点更新的病毒库（7.87256）全杀！：）

Shake2333

eset杀16个