[可疑文件] 5X

显示全部楼层 · 发表于 2023-1-19 21:15:36

本帖最后由 hsks 于 2023-1-19 21:25 编辑

来自一个dropper
https://cowtransfer.com/s/b4494972be7040

显示全部楼层 · 发表于 2023-1-19 21:18:44

360扫描kill3个

显示全部楼层 · 发表于 2023-1-19 21:26:59

ESET 4X

显示全部楼层 · 发表于 2023-1-19 21:29:08

846472713 发表于 2023-1-19 21:26
ESET 4X

补充：

0x0007000000022e3d-149.dat;Win32/Packed.QSetup.P 可疑应用程序的变量

显示全部楼层 · 发表于 2023-1-19 21:29:59

卡巴杀3x
剩下上报

显示全部楼层 · 发表于 2023-1-19 21:32:18

编辑

显示全部楼层 · 发表于 2023-1-19 21:50:39

金山毒霸kill all

显示全部楼层 · 发表于 2023-1-19 21:54:17

pal家族发表于 2023-1-19 21:29
卡巴杀3x
剩下上报

剩余的2个pdm杀

显示全部楼层 · 发表于 2023-1-19 22:02:33

火绒
扫描：2x

智量
扫描：机学 4x

显示全部楼层 · 发表于 2023-1-19 22:17:51

Avast：4

2023/1/19 22:12:22 C:\Users\123\Desktop\Desktop(2)\0x0007000000022e3e-153.dat [L] Win32:CrypterX-gen [Trj] (0)
File was successfully moved to chest...
2023/1/19 22:12:40 C:\Users\123\Desktop\Desktop(2)\0x0007000000022e3c-143.dat [L] Win32:PWSX-gen [Trj] (0)
File was successfully moved to chest...
2023/1/19 22:12:42 C:\Users\123\Desktop\Desktop(2)\0x0007000000022e3b-140.dat [L] Win32:DropperX-gen [Drp] (0)
File was successfully moved to chest...
2023/1/19 22:12:46 C:\Users\123\Desktop\Desktop(2)\0x0007000000022e3a-137.dat [L] Win32:Trojan-gen (0)
File was successfully moved to chest...

复制代码

剩下一个双击触发WS，阻止下载脚本。

2023/1/19 22:15:52 C:\Users\123\AppData\Local\Temp\0vmpmk1h.4f4\16205\i.a3x [L] Other:Malware-gen [Trj] (0)

复制代码