#Ransom

红豆有绿豆

huangzihang 发表于 2022-6-7 10:51

哈？咋了
卡巴不让下载啊

ytysh

Ahnlab V3 Lite Kill 2x

xiaobao233

kill

rogersg

ESET Internet Security
wwlib.dll - a variant of Win32/Injector.BBYK trojan

1. Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
   
2. 2022/6/7 12:10:51;Real-time file system protection;file;D:\Users\Admin\Desktop\Microsoft Office 2007\Microsoft Office 2007\wwlib.dll;a variant of Win32/Injector.BBYK trojan;cleaned by deleting;DESKTOP-E3GDBMA\Admin;Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe (190DBFF0B9944ADB8EF46F940DA572274E2C9812).;3E836093AF3AE2EAB7E896DEEAEDE8A6DFE3EFF6;2022/6/7 12:10:48

复制代码

喀反

WD下载拦截：Trojan:Win32/Mamson.A!ac

心醉咖啡

毒霸

Nocria

IKARUS - 2/3

1. Date and Time: 6/7/2022 9:41:22 PM
   
2. File Size: 136.29 kB
   
3. Detection Name: Backdoor.Xtreme
   
4. Detection-ID: 3475520
   
5. Suggestion: Backup
   
6. File Name: WINWORD.EXE
   
7. Original Path: C:\Users\promi\Desktop\Microsoft Office 2007
   

复制代码

1. Date and Time: 6/7/2022 9:41:22 PM
   
2. File Size: 560 kB
   
3. Detection Name: Trojan-PWS.Win32.QQPass
   
4. Detection-ID: 1526691
   
5. Suggestion: Backup
   
6. File Name: wwlib.dll
   
7. Original Path: C:\Users\promi\Desktop\Microsoft Office 2007
   

复制代码

huorong

HMPA可以拦截，阻止后未见加密动作
Xvirus触发勒索拦截，但为时已晚
费尔居然入库了
费尔动态防御被过，但是文件陷阱中保护的文件不会被加密

ANY.LNK

微软启发杀DLL VirTool:Win32/Injector.gen!BB云杀EXE Trojan:Win32/Mamson.A!ac