#Ransomware (.mallox) (2022-01-05)

显示全部楼层 · 发表于 2022-1-5 20:40:45

显示全部楼层 · 发表于 2022-1-5 20:44:47

智量
Heur.ML.PE.C

显示全部楼层 · 发表于 2022-1-5 20:44:47

avast kill

显示全部楼层 · 发表于 2022-1-5 20:45:54

Norton

复制代码

显示全部楼层 · 发表于 2022-1-5 20:47:31

显示全部楼层 · 发表于 2022-1-5 20:58:08

BEST-HyperDetect机器学习杀

HyperDetect 机器学习检测到威胁. 文件已删除。C:\Users\GeShanDaKongQi233\Downloads\1.exe 是恶意软件 Gen:Illusion.Cobra.2B.2010100

显示全部楼层 · 发表于 2022-1-5 21:10:29

大蜘蛛Kill

Engine 12.06.8.12260/7.00.52.08270 (2.2), 10754645 records, 2022/01/05 19:33
Last updated 2022/01/05 19:33
This is Windows XP Professional x86 (Build 2600), Service Pack 3
The user is INTEL\Administrator:INTEL\None [url=home.php?mod=space&uid=340]@[/url] INTEL
Using "..\st.drweb.com\static\beta_files\win\12.5\keys\drweb32.key" as Dr.Web Key file
This Dr.Web Key is for 1 computer (Beta Dr.Web)
WARNING! System has not been scanned for rootkits.
Scan files using 2 engines and "" mask
The mask was translated to "" filter
"c:\Downloads\20220105\1.exe" infected with Trojan.Siggen16.26133 - deleted
WARNING! Restore points directories have not been scanned
Total 75.5 Kbytes in 1 file scanned
There are no clean objects detected
Total 1 file are infected
Total 1 file is neutralized
Scan time is 00:00:34, 2KB/sec

复制代码

显示全部楼层 · 发表于 2022-1-5 21:16:18

FSS

显示全部楼层 · 发表于 2022-1-5 21:29:02

Emisoft扫描miss，双击BB上传云端kill

显示全部楼层 · 发表于 2022-1-5 21:33:02

[病毒样本] #Ransomware (.mallox) (2022-01-05)