#Gozi #Downloader

显示全部楼层 · 发表于 2022-2-10 21:37:13

正在缓冲发表于 2022-2-10 20:48
Avast miss all，上报

双击

显示全部楼层 · 发表于 2022-2-11 06:06:50

aboringman 发表于 2022-2-10 21:35
日志里面相关的报法发一下，在此之前应该是先触发了自动防护，然后SONAR才出来收拾的。

我是在影子系统下测的，重启后就没了

显示全部楼层 · 发表于 2022-2-11 09:02:04

MS Defender：解压清空

显示全部楼层 · 发表于 2022-2-11 09:19:33

费尔动态防御

显示全部楼层 · 发表于 2022-2-11 09:21:13

fs blocked all

显示全部楼层 · 发表于 2022-2-11 09:21:35

ESET清空
Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
2022/2/11 9:20:55;Real-time file system protection;file;C:\Users\Administrator\Downloads\#Samples\Agenzia_30.vbe;VBS/TrojanDownloader.Agent.WPW trojan;cleaned by deleting;RayFAE2BF70C900\Administrator;Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe (DD8FDBED80E89DB0AF76A44F8FC349BB43E55F6E).;3F3F94BAB653B519832C45286AA74995C72C2DD8;2022/2/11 9:20:54
2022/2/11 9:20:55;Real-time file system protection;file;C:\Users\Administrator\Downloads\#Samples\Documento.vbe;VBS/TrojanDownloader.Agent.WQI trojan;cleaned by deleting;RayFAE2BF70C900\Administrator;Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe (DD8FDBED80E89DB0AF76A44F8FC349BB43E55F6E).;DE55E1F615F919E5E4F8DB07A40A0909CD61D18B;2022/2/11 9:20:54

[病毒样本] #Gozi #Downloader

本帖子中包含更多资源

评分

评分

本帖子中包含更多资源

浏览过的版块