#AsyncRAT（3.28）

显示全部楼层 · 发表于 2021-3-28 23:21:30

显示全部楼层 · 发表于 2021-3-28 23:27:28

本帖最后由 Nocria 于 2021-3-28 23:30 编辑

显示全部楼层 · 发表于 2021-3-28 23:48:30

显示全部楼层 · 发表于 2021-3-28 23:48:40

显示全部楼层 · 发表于 2021-3-28 23:55:03

G DATA ANTIVIRUS has prevented malicious software from running on your system.
The malicious program was identified by BEAST (Behavior Monitoring) as: Generic.926D1CBF
The following processes were therefore terminated by G DATA for security reasons:
----------------------------------------------------------------
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (PID 9148)
C:\Windows\System32\conhost.exe (PID 1856)
C:\Program Files\WinRAR\WinRAR.exe (PID 4752)
----------------------------------------------------------------
The following programs responsible were moved to Quarantine by G DATA:
----------------------------------------------------------------
C:\Users\test\AppData\Local\Temp\Rar$DIa4752.13423\Statement-ID506487079488436.vbs
----------------------------------------------------------------
Further information:
Ref: 33a547b2-4196-4694-9ca3-bab5dc48174a

复制代码

显示全部楼层 · 发表于 2021-3-29 01:50:41

显示全部楼层 · 发表于 2021-3-29 15:07:06

毒霸

[病毒样本] #AsyncRAT（3.28）