From MB 63X

hsks

https://cowtransfer.com/s/9631413c498041
https://ws28.cn/f/5vjr3exmyeo
https://pan.huang1111.cn/s/d4WIV

Nocria

IKARUS - 51/63

1. [11.07.2021 10:12:43] On-demand scan started: "user_defined"
   
2. [11.07.2021 10:12:43] Found, 0.15s, SigName: "Trojan.MSIL.Krypt", SigId: 328065800, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\03223d5ffbd0c4bb32f49a8efea08f0fee7202a265e8a5e86030899ef1c7e67b.exe"
   
3. [11.07.2021 10:12:43] Found, 0.125s, SigName: "Trojan-Downloader.Win32.Delf", SigId: 328065799, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\16f26624a8c348f7497a5bb568b329f64d531ff41cb6a3fd3b5fb4ce9ae0133b.exe"
   
4. [11.07.2021 10:12:43] Found, 0.140s, SigName: "Trojan-Spy.Azorult", SigId: 3292375, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\06f082982def0ab9e45d164d39ec8a291253ec3985bb1004aeab2389a00dceb7.exe"
   
5. [11.07.2021 10:12:43] Found, 0.93s, SigName: "Trojan.Win32.Crypt", SigId: 328121471, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\1a7f51c4e1cd935526684521fb7890dde315dfd49b4b681044f8b14c6a7c88a0.exe"
   
6. [11.07.2021 10:12:43] Found, 0.94s, SigName: "Trojan.MSIL.Agent", SigId: 328064236, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\2392e03457debf3da3b7c9fdf7632d23b350149fee3bdab1b3b7fb2dd6c79afc.exe"
   
7. [11.07.2021 10:12:43] Found, 0.47s, SigName: "Trojan-Spy.Win32.PSWSteal", SigId: 328059873, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\26b2619f3a1eae7a181a64e22180e37ba481de6547d31ad92fd6f1ddbbe521bf.exe"
   
8. [11.07.2021 10:12:45] Found, 1.563s, SigName: "Trojan.Win32.Crypt", SigId: 4114440, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\26d31be8dd31c668f900e9a88cfa3143e09cd149e6ced88c8f3db1992bbcd679.exe"
   
9. [11.07.2021 10:12:45] Found, 1.578s, SigName: "Trojan.MSIL.Agent", SigId: 328061531, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\28074f5b4b929387fda56bd6c03982a754f9da648447f65f56005938a571d1a9.exe"
   
10. [11.07.2021 10:12:45] Found, 0.171s, SigName: "Trojan-Spy.MSIL.Agent", SigId: 4116886, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\2959cc74425b45398b7195a26a779dedba3a7cfb28387e50f5b270dda38dd665.exe"
    
11. [11.07.2021 10:12:45] Found, 0.187s, SigName: "Trojan-Spy.AveMaria", SigId: 4061628, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\3227adef3bb92d94337e08fba6b7a73dbc93b06239d6af04625c571f6755fd6e.exe"
    
12. [11.07.2021 10:12:45] Found, 0.16s, SigName: "Win32.SuspectCrc", SigId: 328034137, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\33c9ae2a724e071b04dffc0489be94315a748d706da64aadbaf32ab316ccf21e.exe"
    
13. [11.07.2021 10:12:45] Found, 0.31s, SigName: "Trojan-Downloader.Win64.Agent", SigId: 4144320, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\3a4c101660e2927692b3941c4e3455450c85045c135c96bac825b92394df99da.exe"
    
14. [11.07.2021 10:12:45] Found, 0.188s, SigName: "Trojan.Crypt", SigId: 4064860, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\3a78a3a475ff61cc48c9cf5b07b67cd05d0cb7c0fc719b2f7e7a579648caeda2.exe"
    
15. [11.07.2021 10:12:45] Found, 0.250s, SigName: "Trojan.Win32.Generic", SigId: 328064308, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\3ce688f6b00b57a37f3ffa4c5410cc02ed5fa05eab37304d44e2d8399aa8b8e2.exe"
    
16. [11.07.2021 10:12:45] Found, 0.62s, SigName: "Trojan-Downloader.Win32.Agent", SigId: 327998815, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\4678c0e3a563119790dc1f77dee974af8151c833bfbaf1ae86ebc74569fa1f47.dll"
    
17. [11.07.2021 10:12:45] Found, 0.00s, SigName: "Trojan.Win32.Injector", SigId: 328055256, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\4718e1656f1f705c062702c9d6f26a0fc4de0a7fec3ced0e0b521432f5037be3.exe"
    
18. [11.07.2021 10:12:46] Found, 0.203s, SigName: "Trojan.Crypt", SigId: 4064860, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\485c0400127ce66d5b763acb43181c399eb15608240b08e1253120429792628a.exe"
    
19. [11.07.2021 10:12:46] Found, 0.266s, SigName: "Trojan.MSIL.Spy", SigId: 327880454, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\4cba3cb0188c4a064f6dd99ead74f76156d73019e15eec1a3653b28c8ac7a112.exe"
    
20. [11.07.2021 10:12:46] Found, 0.110s, SigName: "Trojan.Win32.Generic", SigId: 327703377, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\54fca1375e62c5978b78593ea50a5ac198da69c3e033c94371cbb81dc5a9d5be.exe"
    
21. [11.07.2021 10:12:46] Found, 0.62s, SigName: "Trojan.MSIL.Crypt", SigId: 328121042, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\5c4c5907b9b69af422c9d8f2a81f9292fce90fbde6fa446ab225caaf4e3ff314.exe"
    
22. [11.07.2021 10:12:46] Found, 0.78s, SigName: "Trojan.Win32.Generic", SigId: 4037526, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\5eada5dc19ab310ed6edd61b1747b2fd9342b44be7241afa21bb0865d7fc132d.exe"
    
23. [11.07.2021 10:12:46] Found, 0.15s, SigName: "Trojan.Win32.Krypt", SigId: 328122098, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\7304be70f4e18d91047e2ee07944ac60dd018f35cc4321634b160e0ca39c28d4.exe"
    
24. [11.07.2021 10:12:46] Found, 0.79s, SigName: "Trojan.MSIL.Agent", SigId: 328121032, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\7505ca7983b142a8f8a48e54b8a24778cfefbb320109b9c45316336cabe7dcd8.exe"
    
25. [11.07.2021 10:12:46] Found, 0.125s, SigName: "Trojan-Spy.FormBook", SigId: 4009459, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\79043f2f23a008c67568fd1720f10911cfba7ba8008bd214599c6db49aa39791.exe"
    
26. [11.07.2021 10:12:46] Found, 0.125s, SigName: "Trojan.MSIL.Spy", SigId: 4146983, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\7c60b5f7e4d95d3da4f309fb6c759669dbc852cd53ba4fe553432d90e4804d81.exe"
    
27. [11.07.2021 10:12:46] Found, 0.47s, SigName: "Trojan.Win32.Crypt", SigId: 328116669, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\7f26cbf3b8402f8971b26019089ec612ea4a50fe74b0afdfcde4b08062c99a03.exe"
    
28. [11.07.2021 10:12:46] Found, 0.15s, SigName: "Trojan.Win32.Krypt", SigId: 328122396, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\808047c44b88e64eaeaa2c63b136dce30013db875ebdcfe24a22e0e292a757cc.exe"
    
29. [11.07.2021 10:12:46] Found, 0.62s, SigName: "Trojan.MSIL.Agent", SigId: 328058693, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\82750ac601e2872ebdbbb7ff20bd3337925fcdb09f4131b2273f2fd59a61ce66.exe"
    
30. [11.07.2021 10:12:46] Found, 0.16s, SigName: "Trojan.MSIL.Krypt", SigId: 328064239, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\8c6822228a8ebbd80a773251d30a0b42183981a65d5a7a508c072ba24f77c166.exe"
    
31. [11.07.2021 10:12:46] Found, 0.16s, SigName: "Trojan-Spy.MSIL.Agent", SigId: 3975693, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\8d3daf432792ec140127ac6b23f1eb48f53bf3d8a2308cec6993621296d17d7c.exe"
    
32. [11.07.2021 10:12:46] Found, 0.109s, SigName: "Trojan-Spy.FormBook", SigId: 4157202, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\9438c974f3cdefd5a097e55bde4734a2db9438be7c8012fa455d4d8bceb537ca.exe"
    
33. [11.07.2021 10:12:46] Found, 0.125s, SigName: "Trojan.Dropper", SigId: 3930528, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\97f72a48c5b00bb5a51e266c322d9a4c6ff9cc4f1bd16e79cd9b16346b11d20b.exe"
    
34. [11.07.2021 10:12:48] Found, 2.94s, SigName: "Trojan.Win32.Crypt", SigId: 4118425, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\9e7156a3ee3d864ea24daa5db9c90bc9505e034ed45dab8115490fda05c113d9.exe"
    
35. [11.07.2021 10:12:48] Found, 2.78s, SigName: "Trojan.Win32.Crypt", SigId: 328107865, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\a468865ce935b1915a41482fa657990cd7b3772fc6fc3aebe5d684c14b9b06b2.exe"
    
36. [11.07.2021 10:12:48] Found, 0.15s, SigName: "Trojan.MSIL.Spy", SigId: 327880454, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\a978035fe08b35af7d23952fffe94580f87364202d4d9094db467abe7d56bf2a.exe"
    
37. [11.07.2021 10:12:48] Found, 0.15s, SigName: "Trojan.MSIL.Crypt", SigId: 328065801, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\aa6cc1124c11a7b632c1609bf2023901676b6f061eebb7775317d76c3dc6cbf6.exe"
    
38. [11.07.2021 10:12:48] Found, 0.16s, SigName: "Trojan.Win32.Crypt", SigId: 4142015, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\b07503e3d145442dee29b2cbda7586d5805ac2a952e81bc95c18ada66b253da7.exe"
    
39. [11.07.2021 10:12:48] Found, 0.79s, SigName: "Trojan.Win32.Generic", SigId: 327814407, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\b0bc5a3dae0127da8f7743df8dc4014e9ba08c5a29928448aed8764242050da2.exe"
    
40. [11.07.2021 10:12:48] Found, 0.63s, SigName: "Trojan.Win32.Crypt", SigId: 328059145, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\b5836dfd74e9e193cb8b3ee99d34f6b93ff5b88fecdc8f0b55928407bd0af376.exe"
    
41. [11.07.2021 10:12:48] Found, 0.15s, SigName: "Exploit.RTF.Doc", SigId: 4152783, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\b734458704e0b15a59dd0911ca693b0b0b73bcff265c165a4ec8e707739fd2aa.doc"
    
42. [11.07.2021 10:12:48] Found, 0.172s, SigName: "Trojan-Spy.Agent", SigId: 305279319, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\bceed9a182b9324426c40327f10948d0ebdef8c9d4559e476e4f14b9d11a7ea3.exe"
    
43. [11.07.2021 10:12:49] Found, 0.47s, SigName: "Trojan.Win32.Crypt", SigId: 328116701, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\bfbf6bb9393e511a06e90d432e7538059ae75f9f1525f0f503d1d0bec0d32124.exe"
    
44. [11.07.2021 10:12:49] Found, 0.47s, SigName: "Trojan.Win32.Redcontrole", SigId: 3560721, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\c30dcbba3ad05453eba2cc769ca4e65cd2706627b1fe631deb546cb46f9aa262.exe"
    
45. [11.07.2021 10:12:49] Found, 0.94s, SigName: "Trojan.Win32.Themida", SigId: 324300248, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\c3653e1f4f29ac4cabbaaf85c5c4a1954a28f4977c241fd621c3c2d3519a8782.exe"
    
46. [11.07.2021 10:12:49] Found, 0.62s, SigName: "Trojan.MSIL.Crypt", SigId: 328055209, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\c877097a2a3852b34c2ee4b0c7b2f5c7a3dc5313570e0680e04adea7e44201ef.exe"
    
47. [11.07.2021 10:12:49] Found, 0.328s, SigName: "Trojan.Win32.Krypt", SigId: 328121980, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\dfb4fb4b9a7dc426394dc235ab703a35d7c9f45e4f40dadcda22d67d80d9f1de.exe"
    
48. [11.07.2021 10:12:49] Found, 0.15s, SigName: "Trojan.Win32.Crypt", SigId: 4142015, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\e1cd92cb67699c2cea95c4af1013cf34b6fda602a3596d48d4b21bb7f4248b2a.exe"
    
49. [11.07.2021 10:12:49] Found, 0.16s, SigName: "Trojan.Win32.Injector", SigId: 327983132, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\e5fcad2ee0a3f7bd63a8154eed6ae60a382e1eafeca26395cdd3a491c815383e.exe"
    
50. [11.07.2021 10:12:49] Found, 0.47s, SigName: "Trojan.MSIL.Spy", SigId: 327875102, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\edd5a3dc519a5feacea84473ade885844e72b8165a93a91871928330bde659e7.exe"
    
51. [11.07.2021 10:12:50] Found, 1.453s, SigName: "Trojan.Win32.Crypt", SigId: 4114440, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\ef330091b20e1d6390649210019b15c7551663f79edfff65266fc6d71a49e473.exe"
    
52. [11.07.2021 10:12:51] Found, 0.47s, SigName: "Trojan.Win32.Crypt", SigId: 328121475, Type: "VIRUS", File: "C:\Users\promi\Desktop\4yAvAhoA_63X\63X\ff9e059a789e94573fb32a918657d5c5c59b5395fab873cbcec7b1543435fe93.exe"
    
53. [11.07.2021 10:12:51] On-demand scan FINISHED: "user_defined"
    
54. [11.07.2021 10:12:51] ----------------------------------------------------
    
55. [11.07.2021 10:12:51] Directories scanned: 2
    
56. [11.07.2021 10:12:51] Files scanned: 63
    
57. [11.07.2021 10:12:51] Virus found: 51
    
58. [11.07.2021 10:12:51] ----------------------------------------------------

复制代码

Malwarebytes - 56/63

1. Malwarebytes
   
2. www.malwarebytes.com
   
3. 
   
4. File: 56
   
5. Spyware.TelegramBot, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\03223D5FFBD0C4BB32F49A8EFEA08F0FEE7202A265E8A5E86030899EF1C7E67B.EXE, Quarantined, 630, 957833, 1.0.42929, 6336A425423877A3F504B7EE, dds, 01327709, DCA2C8CAA938097F549CF8C744BD6F94, 03223D5FFBD0C4BB32F49A8EFEA08F0FEE7202A265E8A5E86030899EF1C7E67B
   
6. Spyware.Vidar, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\26B2619F3A1EAE7A181A64E22180E37BA481DE6547D31AD92FD6F1DDBBE521BF.EXE, Quarantined, 7461, 957998, 1.0.42929, , ame, , E92AEC37FE2ABBEA0C4604709FB24301, 26B2619F3A1EAE7A181A64E22180E37BA481DE6547D31AD92FD6F1DDBBE521BF
   
7. Generic.Malware/Suspicious, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\33C9AE2A724E071B04DFFC0489BE94315A748D706DA64AADBAF32AB316CCF21E.EXE, Quarantined, 0, 392686, 1.0.42929, , shuriken, , 4CC3BABB3093ECAC7E917C2CC8FC25BE, 33C9AE2A724E071B04DFFC0489BE94315A748D706DA64AADBAF32AB316CCF21E
   
8. MachineLearning/Anomalous.100%, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\ED62EFF9A728C54286E8A6ED5B4BAE53667496F354118A75A15A050E15A9DF30.EXE, Quarantined, 0, 392687, 1.0.42929, , shuriken, , 4C031B23F8493414D05D69785CF60AE5, ED62EFF9A728C54286E8A6ED5B4BAE53667496F354118A75A15A050E15A9DF30
   
9. Generic.Malware/Suspicious, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\3A78A3A475FF61CC48C9CF5B07B67CD05D0CB7C0FC719B2F7E7A579648CAEDA2.EXE, Quarantined, 0, 392686, 1.0.42929, , shuriken, , 1A98F299E5924F1CF885C425523649FC, 3A78A3A475FF61CC48C9CF5B07B67CD05D0CB7C0FC719B2F7E7A579648CAEDA2
   
10. Generic.Malware/Suspicious, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\28074F5B4B929387FDA56BD6C03982A754F9DA648447F65F56005938A571D1A9.EXE, Quarantined, 0, 392686, 1.0.42929, , shuriken, , D1CD45DAC36E52035B1270E61DC210F5, 28074F5B4B929387FDA56BD6C03982A754F9DA648447F65F56005938A571D1A9
    
11. Trojan.Downloader, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\4678C0E3A563119790DC1F77DEE974AF8151C833BFBAF1AE86EBC74569FA1F47.DLL, Quarantined, 540, 957305, 1.0.42929, , ame, , 57EB4E0C7C15E9E15C98BB8C9CC87262, 4678C0E3A563119790DC1F77DEE974AF8151C833BFBAF1AE86EBC74569FA1F47
    
12. Backdoor.Bladabindi, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\2392E03457DEBF3DA3B7C9FDF7632D23B350149FEE3BDAB1B3B7FB2DD6C79AFC.EXE, Quarantined, 3749, 957885, 1.0.42929, , ame, , 7214533E22BD363327BDA3A8C1081168, 2392E03457DEBF3DA3B7C9FDF7632D23B350149FEE3BDAB1B3B7FB2DD6C79AFC
    
13. Malware.AI.4268051759, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\5EADA5DC19AB310ED6EDD61B1747B2FD9342B44BE7241AFA21BB0865D7FC132D.EXE, Quarantined, 1000000, 0, 1.0.42929, FA9BDE56B991160AFE654D2F, dds, 01327709, 5EE0B97E90E31E11CE72B3A7C76C3E6F, 5EADA5DC19AB310ED6EDD61B1747B2FD9342B44BE7241AFA21BB0865D7FC132D
    
14. Trojan.MalPack.Themida, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\3CE688F6B00B57A37F3FFA4C5410CC02ED5FA05EAB37304D44E2D8399AA8B8E2.EXE, Quarantined, 7458, 956870, 1.0.42929, 0000000000000000000003EB, dds, 01327709, BBF3C7740A3507B482260EFA0B4C4A82, 3CE688F6B00B57A37F3FFA4C5410CC02ED5FA05EAB37304D44E2D8399AA8B8E2
    
15. Trojan.Crypt.MSIL.Generic, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\5C4C5907B9B69AF422C9D8F2A81F9292FCE90FBDE6FA446AB225CAAF4E3FF314.EXE, Quarantined, 7508, 956470, 1.0.42929, 59E6559F56115762F4B11BD7, dds, 01327709, E5D80CC7DEEE8DA3BF41BB91EF5C70D0, 5C4C5907B9B69AF422C9D8F2A81F9292FCE90FBDE6FA446AB225CAAF4E3FF314
    
16. Spyware.Agent, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\7C60B5F7E4D95D3DA4F309FB6C759669DBC852CD53BA4FE553432D90E4804D81.EXE, Quarantined, 5678, 950636, 1.0.42929, D688EAD18193D6CD9966EED9, dds, 01327709, EDEABCBE9B5B22BDDCFDAEA4C9EAA400, 7C60B5F7E4D95D3DA4F309FB6C759669DBC852CD53BA4FE553432D90E4804D81
    
17. Trojan.Crypt.MSIL, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\8D3DAF432792EC140127AC6B23F1EB48F53BF3D8A2308CEC6993621296D17D7C.EXE, Quarantined, 6013, 957331, 1.0.42929, 4A00007A43000000E711CD7B, dds, 01327709, 52AF135C07DCAA21DE1CCFBD22F22FEB, 8D3DAF432792EC140127AC6B23F1EB48F53BF3D8A2308CEC6993621296D17D7C
    
18. Spyware.FormBook, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\79043F2F23A008C67568FD1720F10911CFBA7BA8008BD214599C6DB49AA39791.EXE, Quarantined, 4583, 957996, 1.0.42929, , ame, , 9526EB2EAA158F15A23B8CB9056D2D7E, 79043F2F23A008C67568FD1720F10911CFBA7BA8008BD214599C6DB49AA39791
    
19. Trojan.Crypt, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\AA6CC1124C11A7B632C1609BF2023901676B6F061EEBB7775317D76C3DC6CBF6.EXE, Quarantined, 602, 957945, 1.0.42929, , ame, , F3163CB04CB59E14F11A6001A4D6788D, AA6CC1124C11A7B632C1609BF2023901676B6F061EEBB7775317D76C3DC6CBF6
    
20. Spyware.TelegramBot, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\8C6822228A8EBBD80A773251D30A0B42183981A65D5A7A508C072BA24F77C166.EXE, Quarantined, 630, 957833, 1.0.42929, 2A26FF78D23728DAB95A9166, dds, 01327709, 46E6BF6D198E4CDD5AA9472B8D5BAD39, 8C6822228A8EBBD80A773251D30A0B42183981A65D5A7A508C072BA24F77C166
    
21. Malware.AI.4289830371, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\BCEED9A182B9324426C40327F10948D0EBDEF8C9D4559E476E4F14B9D11A7EA3.EXE, Quarantined, 1000000, 0, 1.0.42929, B61724BD359EA4ECFFB19DE3, dds, 01327709, ADA1FFC753347613CEE9BCDDAC9763A1, BCEED9A182B9324426C40327F10948D0EBDEF8C9D4559E476E4F14B9D11A7EA3
    
22. Spyware.Agent, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\A978035FE08B35AF7D23952FFFE94580F87364202D4D9094DB467ABE7D56BF2A.EXE, Quarantined, 5678, 955718, 1.0.42929, 125478ED43A13A7AEEC93B58, dds, 01327709, 8DBE84C5FD6D6939E3F79A694EE6E81D, A978035FE08B35AF7D23952FFFE94580F87364202D4D9094DB467ABE7D56BF2A
    
23. Trojan.Tasker, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\CC00771CFB207EBBAFB318D46EBD9DD082D76B739A725A792EBA917DDC14AA03.EXE, Quarantined, 4442, 958037, 1.0.42929, , ame, , 7D20B144FBF477138BCAD9C1DB44F6C1, CC00771CFB207EBBAFB318D46EBD9DD082D76B739A725A792EBA917DDC14AA03
    
24. Malware.AI.3703131241, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\B8C851CFFDE86E6157B1CF7B8336B6070087069D2BC5C5C80D1A7D28A950E11A.EXE, Quarantined, 1000000, 0, 1.0.42929, 08BFD4FD1164A01EDCB94C69, dds, 01327709, 5DA73D677BAE7BC3B2E6272EBA3D7BCD, B8C851CFFDE86E6157B1CF7B8336B6070087069D2BC5C5C80D1A7D28A950E11A
    
25. Malware.AI.3676489491, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\C9D7CA6E47124B6B22A43986D6F21EC70C0173A2D72553595F87C6450D103E2A.EXE, Quarantined, 1000000, 0, 1.0.42929, 3F58E41C31B60998DB22C713, dds, 01327709, 12AC631DDCE30527B221CE2647026C55, C9D7CA6E47124B6B22A43986D6F21EC70C0173A2D72553595F87C6450D103E2A
    
26. Trojan.MalPack, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\1A7F51C4E1CD935526684521FB7890DDE315DFD49B4B681044F8B14C6A7C88A0.EXE, Quarantined, 541, 956806, 1.0.42929, , ame, , 98391936F6D84A4BFC1298D338CEDEC1, 1A7F51C4E1CD935526684521FB7890DDE315DFD49B4B681044F8B14C6A7C88A0
    
27. AveMaria.Backdoor.Stealer.DDS, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\3227ADEF3BB92D94337E08FBA6B7A73DBC93B06239D6AF04625C571F6755FD6E.EXE, Quarantined, 1000002, 0, 1.0.42929, 5894661EED3CF8717B866E4E, dds, 01327709, C62B1FDC546779BA469DB64D1CB60E22, 3227ADEF3BB92D94337E08FBA6B7A73DBC93B06239D6AF04625C571F6755FD6E
    
28. Trojan.MalPack.Themida, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\54FCA1375E62C5978B78593EA50A5AC198DA69C3E033C94371CBB81DC5A9D5BE.EXE, Quarantined, 7458, 956870, 1.0.42929, A1852743A7D16B9DF425E874, dds, 01327709, 40A828EB521C1465984EB4BD44AF3334, 54FCA1375E62C5978B78593EA50A5AC198DA69C3E033C94371CBB81DC5A9D5BE
    
29. Trojan.PasswordStealer, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\06F082982DEF0AB9E45D164D39EC8A291253EC3985BB1004AEAB2389A00DCEB7.EXE, Quarantined, 716, 579828, 1.0.42929, 7353C2D1074013D40A7BFADB, dds, 01327709, E07C776A5BF90EA80FAE6261D92871B3, 06F082982DEF0AB9E45D164D39EC8A291253EC3985BB1004AEAB2389A00DCEB7
    
30. MachineLearning/Anomalous.100%, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\394B84714C723FE917D65356700C36483A29610251EB06B93FB4A2B0922A68A4.EXE, Quarantined, 0, 392687, 1.0.42929, , shuriken, , 41C6594D3FB3D3D38676A2CBE5FD4CA5, 394B84714C723FE917D65356700C36483A29610251EB06B93FB4A2B0922A68A4
    
31. Generic.Malware/Suspicious, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\485C0400127CE66D5B763ACB43181C399EB15608240B08E1253120429792628A.EXE, Quarantined, 0, 392686, 1.0.42929, , shuriken, , 9612B0AEE41A76BD170647601AA15A6A, 485C0400127CE66D5B763ACB43181C399EB15608240B08E1253120429792628A
    
32. Generic.Malware/Suspicious, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\4718E1656F1F705C062702C9D6F26A0FC4DE0A7FEC3CED0E0B521432F5037BE3.EXE, Quarantined, 0, 392686, 1.0.42929, , shuriken, , 0ED53ABFCED617C589F9557A08D09BEC, 4718E1656F1F705C062702C9D6F26A0FC4DE0A7FEC3CED0E0B521432F5037BE3
    
33. Generic.Malware/Suspicious, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\E1CD92CB67699C2CEA95C4AF1013CF34B6FDA602A3596D48D4B21BB7F4248B2A.EXE, Quarantined, 0, 392686, 1.0.42929, , shuriken, , 74AB1DA30AC6C2BBE915106959F06FAB, E1CD92CB67699C2CEA95C4AF1013CF34B6FDA602A3596D48D4B21BB7F4248B2A
    
34. Backdoor.BitRAT, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\16F26624A8C348F7497A5BB568B329F64D531FF41CB6A3FD3B5FB4CE9AE0133B.EXE, Quarantined, 845, 958001, 1.0.42929, , ame, , 7EF561E078550F895E54E16308018DC5, 16F26624A8C348F7497A5BB568B329F64D531FF41CB6A3FD3B5FB4CE9AE0133B
    
35. Trojan.MalPack.Themida, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\2959CC74425B45398B7195A26A779DEDBA3A7CFB28387E50F5B270DDA38DD665.EXE, Quarantined, 7458, 956871, 1.0.42929, 0000000000000000000003EB, dds, 01327709, 0ED8664E0AE8BB176B6D0FC0251B608E, 2959CC74425B45398B7195A26A779DEDBA3A7CFB28387E50F5B270DDA38DD665
    
36. Trojan.Downloader, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\3A4C101660E2927692B3941C4E3455450C85045C135C96BAC825B92394DF99DA.EXE, Quarantined, 540, 948932, 1.0.42929, 0D55C496606C6F7BAAC589E4, dds, 01327709, A92F70ECF6BCCD4341A17195D6A5EACC, 3A4C101660E2927692B3941C4E3455450C85045C135C96BAC825B92394DF99DA
    
37. Trojan.MalPack, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\A468865CE935B1915A41482FA657990CD7B3772FC6FC3AEBE5D684C14B9B06B2.EXE, Quarantined, 541, 956806, 1.0.42929, , ame, , 514A8EBD895086B551A26DBCB8412F11, A468865CE935B1915A41482FA657990CD7B3772FC6FC3AEBE5D684C14B9B06B2
    
38. Trojan.Glupteba, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\26D31BE8DD31C668F900E9A88CFA3143E09CD149E6CED88C8F3DB1992BBCD679.EXE, Quarantined, 4424, 958005, 1.0.42929, , ame, , CCC4878DE8F416ECF4D5CE75092FD1DA, 26D31BE8DD31C668F900E9A88CFA3143E09CD149E6CED88C8F3DB1992BBCD679
    
39. Trojan.Crypt, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\C877097A2A3852B34C2EE4B0C7B2F5C7A3DC5313570E0680E04ADEA7E44201EF.EXE, Quarantined, 602, 957945, 1.0.42929, , ame, , FA1E0286FE931A971F5165990A8D6B00, C877097A2A3852B34C2EE4B0C7B2F5C7A3DC5313570E0680E04ADEA7E44201EF
    
40. Backdoor.AsyncRAT, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\E5FCAD2EE0A3F7BD63A8154EED6AE60A382E1EAFECA26395CDD3A491C815383E.EXE, Quarantined, 674, 957629, 1.0.42929, 770D77DBD77B9F59E28E1191, dds, 01327709, 6C8A217F046C8CCFF499B53546477E88, E5FCAD2EE0A3F7BD63A8154EED6AE60A382E1EAFECA26395CDD3A491C815383E
    
41. Malware.AI.3703131241, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\3805B6D6779B1300B00E45A3DCA087F264EED2EFE5E3594DBD2B8BB1A728E6BE.EXE, Quarantined, 1000000, 0, 1.0.42929, 08BFD4FD1164A01EDCB94C69, dds, 01327709, 8270A7888BC031FB33842BB9FB512941, 3805B6D6779B1300B00E45A3DCA087F264EED2EFE5E3594DBD2B8BB1A728E6BE
    
42. Malware.AI.4006165336, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\4CBA3CB0188C4A064F6DD99EAD74F76156D73019E15EEC1A3653B28C8AC7A112.EXE, Quarantined, 1000000, 0, 1.0.42929, 125478ED43A13A7AEEC93B58, dds, 01327709, C931E97FB8F7BB277E7A7ECE50E67E68, 4CBA3CB0188C4A064F6DD99EAD74F76156D73019E15EEC1A3653B28C8AC7A112
    
43. Trojan.MalPack.Themida, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\EDD5A3DC519A5FEACEA84473ADE885844E72B8165A93A91871928330BDE659E7.EXE, Quarantined, 7458, 955807, 1.0.42929, 7, dds, 01327709, 6E23D791B07E987B4329A0F076133CD1, EDD5A3DC519A5FEACEA84473ADE885844E72B8165A93A91871928330BDE659E7
    
44. Trojan.Dropper, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\7505CA7983B142A8F8A48E54B8A24778CFEFBB320109B9C45316336CABE7DCD8.EXE, Quarantined, 605, 957987, 1.0.42929, , ame, , 51007F5BF41DB584745F313AD9513BFC, 7505CA7983B142A8F8A48E54B8A24778CFEFBB320109B9C45316336CABE7DCD8
    
45. Trojan.Dropper, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\82750AC601E2872EBDBBB7FF20BD3337925FCDB09F4131B2273F2FD59A61CE66.EXE, Quarantined, 605, 957870, 1.0.42929, , ame, , 31536403B284772BE44C161BF3BC2783, 82750AC601E2872EBDBBB7FF20BD3337925FCDB09F4131B2273F2FD59A61CE66
    
46. Trojan.Crypt, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\9E7156A3EE3D864EA24DAA5DB9C90BC9505E034ED45DAB8115490FDA05C113D9.EXE, Quarantined, 602, 958036, 1.0.42929, 1, dds, 01327709, A04EDC0ABD030BD47D9D726E600562EA, 9E7156A3EE3D864EA24DAA5DB9C90BC9505E034ED45DAB8115490FDA05C113D9
    
47. Trojan.MalPack, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\7304BE70F4E18D91047E2EE07944AC60DD018F35CC4321634B160E0CA39C28D4.EXE, Quarantined, 541, 956806, 1.0.42929, , ame, , B52C06897340D7316CAAA5C25E0E52D3, 7304BE70F4E18D91047E2EE07944AC60DD018F35CC4321634B160E0CA39C28D4
    
48. Trojan.Crypt, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\B5836DFD74E9E193CB8B3EE99D34F6B93FF5B88FECDC8F0B55928407BD0AF376.EXE, Quarantined, 602, 957444, 1.0.42929, , ame, , 64976DBEE1D73FB7765CBEC2B3612ACC, B5836DFD74E9E193CB8B3EE99D34F6B93FF5B88FECDC8F0B55928407BD0AF376
    
49. Trojan.MalPack.Themida.Generic, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\C3653E1F4F29AC4CABBAAF85C5C4A1954A28F4977C241FD621C3C2D3519A8782.EXE, Quarantined, 11005, 946254, 1.0.42929, 0000000000000000000003EB, dds, 01327709, CE3FDBEA1580B977FB27F0DE3C603CFC, C3653E1F4F29AC4CABBAAF85C5C4A1954A28F4977C241FD621C3C2D3519A8782
    
50. Generic.Malware/Suspicious, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\B07503E3D145442DEE29B2CBDA7586D5805AC2A952E81BC95C18ADA66B253DA7.EXE, Quarantined, 0, 392686, 1.0.42929, , shuriken, , 45DA3EFE7441C4BC6A75D9C39BBADB65, B07503E3D145442DEE29B2CBDA7586D5805AC2A952E81BC95C18ADA66B253DA7
    
51. Trojan.MalPack, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\808047C44B88E64EAEAA2C63B136DCE30013DB875EBDCFE24A22E0E292A757CC.EXE, Quarantined, 541, 956806, 1.0.42929, , ame, , CED2E9939FA298B5596C8220AFF1A5C7, 808047C44B88E64EAEAA2C63B136DCE30013DB875EBDCFE24A22E0E292A757CC
    
52. Trojan.Crypt, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\97F72A48C5B00BB5A51E266C322D9A4C6FF9CC4F1BD16E79CD9B16346B11D20B.EXE, Quarantined, 602, 958016, 1.0.42929, , ame, , 277132EBBC0AB265858FB24D2BF37590, 97F72A48C5B00BB5A51E266C322D9A4C6FF9CC4F1BD16E79CD9B16346B11D20B
    
53. Trojan.Downloader, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\B0BC5A3DAE0127DA8F7743DF8DC4014E9BA08C5A29928448AED8764242050DA2.EXE, Quarantined, 540, 956761, 1.0.42929, 0000000000000000000003EB, dds, 01327709, 2E666D262882B4262701B63378D44CB2, B0BC5A3DAE0127DA8F7743DF8DC4014E9BA08C5A29928448AED8764242050DA2
    
54. Trojan.MalPack, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\7F26CBF3B8402F8971B26019089EC612EA4A50FE74B0AFDFCDE4B08062C99A03.EXE, Quarantined, 541, 956806, 1.0.42929, , ame, , 5E59A3DCF12FD63770A76587EB064CCB, 7F26CBF3B8402F8971B26019089EC612EA4A50FE74B0AFDFCDE4B08062C99A03
    
55. Spyware.TelegramBot, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\9438C974F3CDEFD5A097E55BDE4734A2DB9438BE7C8012FA455D4D8BCEB537CA.EXE, Quarantined, 630, 956681, 1.0.42929, D55F2D6F6A4A91B09D35A9BF, dds, 01327709, 61F4EF2333A35BF80F1847BC9ED81688, 9438C974F3CDEFD5A097E55BDE4734A2DB9438BE7C8012FA455D4D8BCEB537CA
    
56. Trojan.MalPack, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\FF9E059A789E94573FB32A918657D5C5C59B5395FAB873CBCEC7B1543435FE93.EXE, Quarantined, 541, 956806, 1.0.42929, , ame, , D336D82899A7CADA20B170C74E3FA0EB, FF9E059A789E94573FB32A918657D5C5C59B5395FAB873CBCEC7B1543435FE93
    
57. Malware.AI.532328632, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\C30DCBBA3AD05453EBA2CC769CA4E65CD2706627B1FE631DEB546CB46F9AA262.EXE, Quarantined, 1000000, 0, 1.0.42929, 673851E94DA54E011FBAB0B8, dds, 01327709, F379D611AB66507D1F44380D76161370, C30DCBBA3AD05453EBA2CC769CA4E65CD2706627B1FE631DEB546CB46F9AA262
    
58. Trojan.MalPack, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\BFBF6BB9393E511A06E90D432E7538059AE75F9F1525F0F503D1D0BEC0D32124.EXE, Quarantined, 541, 956806, 1.0.42929, , ame, , D6574D1DC02E124A977F13CCA79AC160, BFBF6BB9393E511A06E90D432E7538059AE75F9F1525F0F503D1D0BEC0D32124
    
59. Trojan.MalPack, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\DFB4FB4B9A7DC426394DC235AB703A35D7C9F45E4F40DADCDA22D67D80D9F1DE.EXE, Quarantined, 541, 956806, 1.0.42929, , ame, , 16655736E9B057B7B03F931E15E52A1E, DFB4FB4B9A7DC426394DC235AB703A35D7C9F45E4F40DADCDA22D67D80D9F1DE
    
60. Trojan.Glupteba, C:\USERS\PROMI\DESKTOP\4YAVAHOA_63X\63X\EF330091B20E1D6390649210019B15C7551663F79EDFFF65266FC6D71A49E473.EXE, Quarantined, 4424, 958005, 1.0.42929, , ame, , 37BA8AA600D48EF64D68C2230F0AB775, EF330091B20E1D6390649210019B15C7551663F79EDFFF65266FC6D71A49E473
    
61. 
    
62. Physical Sector: 0
    
63. (No malicious items detected)
    
64. 
    
65. WMI: 0
    
66. (No malicious items detected)
    
67. 
    
68. 
    
69. (end)

复制代码

windows11BigSur

2021.07.11-12:40
卡巴kill 63/63x  100%
扫描剩的这一个：c9d7ca6e47124b6b22a43986d6f21ec70c0173a2d72553595f87c6450d103e2a.exeKSN识别，应该是PUA，允许运行但会被分入高限制组，所以我个人认为也算杀了

正在缓冲

Avast 58x（有一个二扫扫出）            AhnLab 50x

11111111111445

36054x,有49个都是云报法(我记得win32/win64都是云吧),360断网22

hsks

windows11BigSur 发表于 2021-7-11 10:10
卡巴斯基 kill 56/63x
剩余7x已提交

醉了，怎么剔来剔去还有类似PUA之类的样本
以后我看到匿名上传的样本我得留心了

windows11BigSur

hsks 发表于 2021-7-11 10:21
醉了，怎么剔来剔去还有类似PUA之类的样本
以后我看到匿名上传的样本我得留心了

一看就知道是MB数据库的没跑了

救命稻草

McAfee 60X

yaoyunjia

火绒剩余31个，已经上报

wwwab

救命稻草 发表于 2021-7-11 10:31
McAfee 60X

你咋不测瑞星了？