1X

hsks

A few Moments later.....
https://www.virustotal.com/gui/f ... f97d5e5ad/detection
https://ws28.cn/f/4zpo9hqjy18

释放的文件https://ws28.cn/f/4zpoqidnfzc

秋日之殇

卡巴双击杀，衍生物卡巴全杀

Virus4

ESET 本体不杀
杀了两个衍生物，剩下一个dgjswlw.exe

xcvbaby

金山毒霸

c/mm

Virus: Gen:Variant.Bulz.402768

Virus found while downloading content from the web.

Address: http://piluui06  top/downfiles/4.exe
Status:         Access denied.


Virus: Gen:Variant.Ulise.188955

Virus found while downloading content from the web.

Address: http://piluui06  top/downfiles/     6.exe
Status:         Access denied.

Nocria

1. Start time        Type        Header        Status
   
2. 2021-03-21 22:03:26        BEAST (FileCloud)        Verdict.Malware        Done
   
3. 
   
4. G DATA INTERNET SECURITY has prevented malicious software from running on your system.
   
5. The malicious program was identified by BEAST (Behavior Monitoring) as: Verdict.Malware
   
6. 
   
7. The following processes were therefore terminated by G DATA for security reasons:
   
8. C:\Users\promi\Desktop\1.exe (PID 5488)
   
9. C:\Windows\SysWOW64\cmd.exe (PID 5528)
   
10. C:\Windows\System32\conhost.exe (PID 5544)
    
11. C:\Windows\SysWOW64\cmd.exe (PID 5560)
    
12. C:\Windows\SysWOW64\PING.EXE (PID 5584)
    
13. C:\Users\promi\AppData\Roaming\CDCSCfmjxPek\Giu.exe.com (PID 5600)
    
14. 
    
15. The following programs responsible were moved to Quarantine by G DATA:
    
16. C:\Users\promi\Desktop\1.exe
    
17. C:\Users\promi\AppData\Roaming\CDCSCfmjxPek\Levato.swf
    
18. C:\Users\promi\AppData\Roaming\CDCSCfmjxPek\Toppa.swf
    
19. 
    
20. Further information:
    
21. Module: FileCloud
    
22. File: C:\Users\promi\Desktop\1.exe
    
23. Sha256: E784BA83C1139D2D9880A2CD5546D1D7716694452EA84367FA9C238F97D5E5AD
    
24. Md5: 7D2EC1E5CE58C8EE60458F04F7AECC4C
    
25. Size: 1982105
    
26. Ref: fc504441-a4dc-479d-a039-ce93ce692414
    

复制代码

post88

avast 扫描双击miss

k2132

智量 4个   火绒 1个