[自制]勒索样本修改扇区和加密文件

显示全部楼层 · 发表于 2023-6-29 17:22:51

BEST

Gen:Heur.Ransom.RTH.1

显示全部楼层 · 发表于 2023-6-29 17:25:54

petr0vic 发表于 2023-6-29 17:20

I think Dr.Web Security Space may be possible to intercept mbr modifications (Low-level underlying disk access)?

显示全部楼层 · 发表于 2023-6-29 17:50:54

金山毒霸miss

显示全部楼层 · 发表于 2023-6-29 18:41:16

迈克菲

显示全部楼层 · 发表于 2023-6-29 22:10:04

诺顿C杀

显示全部楼层 · 发表于 2023-6-29 22:24:05

wwwab 发表于 2023-6-29 17:25
I think Dr.Web Security Space may be possible to intercept mbr modifications (Low-level underlying ...

mbr - block
encryption - not block

显示全部楼层 · 发表于 2023-6-29 22:38:08

petr0vic 发表于 2023-6-29 22:24
mbr - block
encryption - not block

Dr web looks good at blocking code injection
not a All-round player

显示全部楼层 · 发表于 2023-6-30 08:08:21

pal家族发表于 2023-6-29 22:38
Dr web looks good at blocking code injection
not a All-round player

drweb's mbr protect is also good (many Chinese anti-virus software's mbr protect is also good, but some of foreign anti-virus softwares are not the case)

显示全部楼层 · 发表于 2023-6-30 10:53:49

360kill

显示全部楼层 · 发表于 2023-6-30 12:59:35

wwwab 发表于 2023-6-30 08:08
drweb's mbr protect is also good (many Chinese anti-virus software's mbr protect is also good, but ...

and behavior based protection is crap

[病毒样本] [自制]勒索样本修改扇区和加密文件

本帖子中包含更多资源

本帖子中包含更多资源

评分

[病毒样本] [自制]勒索样本 修改扇区和加密文件

本帖子中包含更多资源

本帖子中包含更多资源

评分

[病毒样本] [自制]勒索样本修改扇区和加密文件