【8.18-8.20】微步提取钓鱼样本101X

熊小度

【扫描信息】

开始时间:2023-8-20 22:13:48
扫描用时:00:00:26
扫描类型:指定位置杀毒
扫描引擎:管家云查杀引擎 管家系统反病毒引擎 管家系统修复引擎 Bitdefender本地查杀引擎
扫描状态:扫描完成


【扫描结果】

扫描文件数:1470
发现风险数:48
已处理风险数:48


---------------------
2023-8-20 22:14:29 MD5:15d5502a64b22fe9558db89728df914d C:\Users\DELL\Desktop\infected0818-0820\3342501b4cb3fb07ad06bcdb0f0faa7ef58a0526e3a925fde872557622b9fea1 --> “护航亚运”网络安全专项整治行动方案\护航亚运-网络设备加固.cmd [Win64.Trojan.Agent.Iajl]  [删除成功]
2023-8-20 22:14:29 MD5:b6352e8c7a4d5e6389825205048665d1 C:\Users\DELL\Desktop\infected0818-0820\0ee7b3cddaa59a662a49444042f06acc1cd275655ee0c57fbe7ceeaf1d9a88ed [Win32.Trojan.Generic.Ddhl]  [删除成功]
2023-8-20 22:14:29 MD5:812cfbc5a95e6dfd029dc822eca84174 C:\Users\DELL\Desktop\infected0818-0820\bb4f851f3740f04b7408ddb71167875785c473d66ac807dc23f9d51a1fd329f2 [Win64.Trojan.Shlem.Osmw]  [删除成功]
2023-8-20 22:14:30 MD5:23595ee5fd6edfaacda8282858561b93 C:\Users\DELL\Desktop\infected0818-0820\59c7fb306710dabb57f6866e689af5769b5a5088c9675d24670fd8367488b22f [Win32.Trojan.Cobaltstrike.Zwhl]  [删除成功]
2023-8-20 22:14:30 MD5:f1a61a266f253b705cf7646b1b5736fd C:\Users\DELL\Desktop\infected0818-0820\20c25608b71dd228bf797fe6c7d7b35025f8fbb1b2b7ee8b3d82859fe823fbf7 --> 国家税务总局第一稽查局行政处罚决定书\2.exe [Win32.Backdoor.Lotok.Najl]  [删除成功]
2023-8-20 22:14:30 MD5:ff9400cf45a00617d0be6578992bacb9 C:\Users\DELL\Desktop\infected0818-0820\720fbfac6051e9591f5f5baecf5699e25232df2cd74d074ae793767a3cd70fde [Win64.Trojan-Downloader.Oader.Kqil]  [删除成功]
2023-8-20 22:14:30 MD5:4593c5798296de49381eb8e60452a80f C:\Users\DELL\Desktop\infected0818-0820\b7b7d9abbbe47a305e9c5604dd2971681f3cba20a1ab9c5ca6f368c0fc6e5db5 --> cb\王子凌薪资证明1.scr [Win32.Trojan.Agent.Kajl]  [删除成功]
2023-8-20 22:14:37 MD5:917e5f57a93b56bac0c32b554bb0cf12 C:\Users\DELL\Desktop\infected0818-0820\a8b7d79522f1b93168cf8671019edaefbe085ad12f065d8f11b4d1764f4c3616 [Win32.Virus.Thus.Kflw]  [删除成功]
2023-8-20 22:14:38 MD5:a6b209fec58266c6cffbbf505d0adc87 C:\Users\DELL\Desktop\infected0818-0820\f8a4b25b7e7b1cf02639de6801b04a693b7c88b36962ed45b73fcd11bb8cc33a [Win32.Trojan.Cobaltstrike.Qcnw]  [删除成功]
2023-8-20 22:14:38 MD5:92ebeb4945a31fda51ad85d990455d5f C:\Users\DELL\Desktop\infected0818-0820\c2d140eed0df4e21bef66809ccd21821f7fda3d1f6410661ab58d39810f1d814 [Win32.Backdoor.Lotok.Wylw]  [删除成功]
2023-8-20 22:14:38 MD5:f1a61a266f253b705cf7646b1b5736fd C:\Users\DELL\Desktop\infected0818-0820\5037e3de6f503fbe589121986c1051b573277a9f76a0a52dfc473307c7c65a4d --> 询问通知单\2.exe [Win32.Backdoor.Lotok.Najl]  [删除成功]
2023-8-20 22:14:38 MD5:07f9c57bf2d2e5f13b4e588fdef11f66 C:\Users\DELL\Desktop\infected0818-0820\83cc2bae04928e1fcb604d9dcb96140ae3d617afd44bd80fe53014e100df6ce1 [Win32.Trojan.Agent.Hajl]  [删除成功]
2023-8-20 22:14:38 MD5:6fbcc7d78af98d867c462293aa805e4e C:\Users\DELL\Desktop\infected0818-0820\4e97121246ba250fe4f13a4bac5aebaa26c33c21f8d2e7c91311002e3f49aac4 [Win32.Trojan.Alisa.Nqil]  [删除成功]
2023-8-20 22:14:38 MD5:f1a61a266f253b705cf7646b1b5736fd C:\Users\DELL\Desktop\infected0818-0820\9450937e40c12762cc2101a0439333329d7ee98eb6df6f5cceced9c1b1e95fb6 --> 税务处罚单\2.exe [Win32.Backdoor.Lotok.Najl]  [删除成功]
2023-8-20 22:14:38 MD5:0ac8c5de3bf1b21dd8c681793ff84bc9 C:\Users\DELL\Desktop\infected0818-0820\9fc4055b224e0b061f1fc5053fb15cf7a14164e38391379811665c8e43bb5ca6 [Nsis.Trojan-Dropper.Sufrar.Unkl]  [删除成功]
2023-8-20 22:14:38 MD5:de8852e9f964ddfac7ec5d562c015608 C:\Users\DELL\Desktop\infected0818-0820\cee4add4b062e774e9a8dc50cfce80ed40d7db28b26ae76238928ad641778129 [Win32.Trojan.Agent.Ncnw]  [删除成功]
2023-8-20 22:14:39 MD5:f1a61a266f253b705cf7646b1b5736fd C:\Users\DELL\Desktop\infected0818-0820\145add8204caa022dee7c8261fb9a1d74a292635cb32e2a9b1453f09fff6641c --> 8月最新安全隐患项目通告\2.exe [Win32.Backdoor.Lotok.Najl]  [删除成功]
2023-8-20 22:14:39 MD5:f1a61a266f253b705cf7646b1b5736fd C:\Users\DELL\Desktop\infected0818-0820\8cdc10eae1e4f648af69cf491422f1dea519964c09074a25268faaa7ab293e36 --> 税务事项通知书\2.exe [Win32.Backdoor.Lotok.Najl]  [删除成功]
2023-8-20 22:14:39 MD5:bfb518de3304e688cb069e7dd666be7a C:\Users\DELL\Desktop\infected0818-0820\6af34ba36d4c0661e0a026339b01b123b5ec1504c38b4d4640edf22694b9e42d --> Windows邮件客户端升级说明.exe [Win32.Trojan.Shlem.Rgil]  [删除成功]
2023-8-20 22:14:39 MD5:c3693bf5d2ba9c7be1951b58d2b760f5 C:\Users\DELL\Desktop\infected0818-0820\af6d2919318e69548f4c522b8468e976e5ed0e49e6c6479af22a1063f63f0c55 [Win32.Trojan.Agen.Wimw]  [删除成功]
2023-8-20 22:14:39 MD5:0909f0901c64750d2813562267388862 C:\Users\DELL\Desktop\infected0818-0820\bc91a8bdcb54ea4348f9ccc61782c8573aefad2cf9a22fb930c7b2dcfb28c33f --> 北京交通大学-王亚宾-博士-人工智能 --> 北京交通大学-王亚宾-博士-人工智能.pdf.lnk --> (CommandArguments) [Heur.BZC.YAX.Linx.51.06E370C9]  [删除成功]
2023-8-20 22:14:39 MD5:5bd5ffa0be78e8314271c503bcb0bdcf C:\Users\DELL\Desktop\infected0818-0820\b1b9bce69c8010cb3d77a48377e57c6531221cdf469b52dddff82d410d2be6d8 [Win32.Backdoor.Lotok.Zolw]  [删除成功]
2023-8-20 22:14:39 MD5:d5faaf05fc4ff958583d45bbe4caaaee C:\Users\DELL\Desktop\infected0818-0820\52de4486b96909f2fe7810dbd1d486cee09fb3a5b446162eb074793a46c8142a [Win64.Trojan.Donut.Swhl]  [删除成功]
2023-8-20 22:14:39 MD5:0fd5a7882f67439bd3991ee16bae8109 C:\Users\DELL\Desktop\infected0818-0820\71e0e175356c85cd242c31123f4df02a90984ef5c9b4565adeb46584874eb0d2 [Win64.Trojan-Downloader.Oader.Jqil]  [删除成功]
2023-8-20 22:14:39 MD5:f1a61a266f253b705cf7646b1b5736fd C:\Users\DELL\Desktop\infected0818-0820\9af1609a4e82272629b0cdec02f18d02ee983fb778f5a1b433cb43616c042d50 --> 税务行政处罚事项告知书\2.exe [Win32.Backdoor.Lotok.Najl]  [删除成功]
2023-8-20 22:14:40 MD5:b9b53639f21506e12b11733cdbd37a9e C:\Users\DELL\Desktop\infected0818-0820\a68d123b757a8c9318c1e922d6e05b2bdf6cbdc85a4188cc238b287738f14233 [Win64.Trojan.Donut.Iflw]  [删除成功]
2023-8-20 22:14:40 MD5:a602d4e1060311b56cf1e9609d36eefc C:\Users\DELL\Desktop\infected0818-0820\f020bf40fb7abb910d6eb5281d31aedd4dc967fba4660789c70e1014ea5a8271 [Win32.Trojan.Rozena.Icnw]  [删除成功]
2023-8-20 22:14:40 MD5:869d276d1db4a6fa2757df0694a4c38e C:\Users\DELL\Desktop\infected0818-0820\bc02a7c4834d40f4401a5255ab18c46369174f8ccacdf7517cab00fbff0a9810 [Win32.Backdoor.Lotok.Psmw]  [删除成功]
2023-8-20 22:14:40 MD5:b3a53a48bd10c3c64a2105b7acd1b4e4 C:\Users\DELL\Desktop\infected0818-0820\2d8d654c0d93d3c0a9e70f96df32df9f54c9c173b23f3ad6d45c23259324f0ff [Win32.Trojan.Pdfer.Uwhl]  [删除成功]
2023-8-20 22:14:40 MD5:036b27648e138dc290a6810ed658b675 C:\Users\DELL\Desktop\infected0818-0820\7d21148808a04a61a56299a746a1237bfbbeaf5cf42a3f6ba54e2bfa6b7cc9b6 [Win32.Trojan.Malware.Szfl]  [删除成功]
2023-8-20 22:14:40 MD5:35a39d6d8bda5ac78e05857bc3255135 C:\Users\DELL\Desktop\infected0818-0820\3c5667d3bf01e974a8295710587a1ef0707ce7c164e4a136b6d3cf926c255b69 [Win32.Trojan-Downloader.Oader.Pgil]  [删除成功]
2023-8-20 22:14:40 MD5:31913c52a8ea27c1255a85d50a8380fd C:\Users\DELL\Desktop\infected0818-0820\740eef6f572b6136f2f113bf6d680bbde549a94911ca175597c1fc5c778cb859 --> 7\7.exe [Win32.Trojan.Malware.Szfl]  [删除成功]
2023-8-20 22:14:40 MD5:e9fc930a5378a4d2342333c211bcaf9f C:\Users\DELL\Desktop\infected0818-0820\101a19c9e3bf27e33e9771e344c762485cc8e817ef0ab2294154c652d4e1a9fb [Win32.Trojan-Spy.Bobik.Gjgl]  [删除成功]
2023-8-20 22:14:41 MD5:5bd10ef9649b42221248c5a7c0ac1be6 C:\Users\DELL\Desktop\infected0818-0820\c9b24ce9af9e5a41021c915eca42f09324cdcaf8d459225a7128f589de7c3c6d [Win64.Trojan.Shlem.Dzlw]  [删除成功]
2023-8-20 22:14:41 MD5:c260ed928ab16d6d9dfb576f2d09301b C:\Users\DELL\Desktop\infected0818-0820\650452860ae26b75eb625e6c3f46094fdeccad880c847cfbb1132bcc9a131557 [Win32.Backdoor.Cobalt.Rgil]  [删除成功]
2023-8-20 22:14:41 MD5:617a1f1d288aeffe47e35da900cb16c5 C:\Users\DELL\Desktop\infected0818-0820\16759fbe023b236cc34bda653a02c6186e59ea3f5ed9dd088d249a3f6eda471c --> 企业、事业单位消防安全最新管理规定\1.exe [Win32.Backdoor.Lotok.Xmhl]  [删除成功]
2023-8-20 22:14:41 MD5:f49047406c3710dd274f7d58e527152b C:\Users\DELL\Desktop\infected0818-0820\75ad52dd562b6a15ee454825e5311a937921340de298dfeb2a6dc99f14f4a1d4 --> 投诉举报\__MACOSX\GetCurrentDeploy.dll [Win32.Trojan.FalseSign.Szfl]  [删除成功]
2023-8-20 22:14:41 MD5:fe1f87371bf34b28e8b602fa9531a661 C:\Users\DELL\Desktop\infected0818-0820\ab049b5b61aa94d923b30390b798d9ceb1b498436adbf797948642d84a3b18cf --> 项目经理-京东科技集团社会招聘第二份NewenergyJingdongTechnologyGroupsocialrecruitmentsecond\__MACOSX\MicrosoftOffice.exe [Win32.Trojan.Cobaltstrike.Iqil]  [删除成功]
2023-8-20 22:14:41 MD5:61fddc67a3b9e319c4dc51758341a103 C:\Users\DELL\Desktop\infected0818-0820\ad5c1ed1151bc56e1211a75790418a6e65a52b911120c7ea3d78b6c62a13fb4b [Win32.Trojan.Cobaltstrike.Uimw]  [删除成功]
2023-8-20 22:14:41 MD5:31913c52a8ea27c1255a85d50a8380fd C:\Users\DELL\Desktop\infected0818-0820\fb63db9d6426f9753493847ae9c740cf993aaab9f733423bdb60717860e0eb9d --> 税务处罚单\7.exe [Win32.Trojan.Malware.Szfl]  [删除成功]
2023-8-20 22:14:41 MD5:ba6a0b37abd4713248aed55e5e187f05 C:\Users\DELL\Desktop\infected0818-0820\c540fdda845d7b166e6f7c7cf455f83e1a7a68af2cb3a987c172b7e488e26b93 [Win64.Trojan.Donut.Zylw]  [删除成功]
2023-8-20 22:14:41 MD5:f9d8b8fa818b75bb1a97db03eeaa9673 C:\Users\DELL\Desktop\infected0818-0820\50e2088aa231b2d721f854e8ffa7c79ad302eeab99beae90ae00057f5973aedc [Win32.Backdoor.Lotok.Qwhl]  [删除成功]
2023-8-20 22:14:42 MD5:c9391f7fc9bc3553158ca39d5b7a9cc5 C:\Users\DELL\Desktop\infected0818-0820\6cf614f1521895899139c8c3f477489f4a148158751f420ed491208630419731 [Win64.Hacktool.Reversessh.Dkjl]  [删除成功]
2023-8-20 22:14:42 MD5:dbc07c63773ccbf63adc9a1edc566872 C:\Users\DELL\Desktop\infected0818-0820\8e48490dffcfe9d4d06c7a17e4bc2a18d07e162b2fbe2abab9d8d6d0e8f93015 --> 健步走比赛报名材料.exe [Gen:Variant.Jaik.67564]  [删除成功]
2023-8-20 22:14:42 MD5:f2656f4f24a3f79a055b2f890b11d3c0 C:\Users\DELL\Desktop\infected0818-0820\a1b13c99cc8596f7d8b9d8188da0692716befeea1e07a31b06e198ffbb946755 [Win64.Trojan.Shlem.Dflw]  [删除成功]
2023-8-20 22:14:42 MD5:1d64a6a83b2485c731bdf9b44e7b216b C:\Users\DELL\Desktop\infected0818-0820\df0f5617c23028af7a88aff2e1ca47adb2ed9f18fcf154123a8a6dd8d7dce4cd [Win32.Trojan-Spy.Bobik.Kmnw]  [删除成功]
2023-8-20 22:14:42 MD5:0a93504288ae5dcf65baa538d61a0881 C:\Users\DELL\Desktop\infected0818-0820\f57a155d06da4ec78c4ff5e1c7494687aba8e8c6b2e287ef5b4da2124c75a799 --> 资金已发放注意查收.exe [Nsis.Trojan-Dropper.Sufrar.Rqil]  [删除成功]
2023-8-20 22:14:42 MD5:40bf95afeaaaba84375bb48c0d93983b C:\Users\DELL\Desktop\infected0818-0820\b0f11e60e5a9cf4a2c3b260c77aab0a864d6701eee9d95a50f478c06bcd296f9 --> 诉讼风险告知书\通告.exe [Win32.Trojan.Malware.Szfl]  [删除成功]
---------------------

ytysh

Quick Heal Kill 10x

aikafans

swizzer 发表于 2023-8-20 20:52
数量下降可能是因为，本次护网行动快结束了...

本周三晚上9点正式结束

xjwtzq

BDTS 扫描kill65  双击 kill12，余24 。腾管扫描kill88，余双击miss

DisaPDB

真小读者 发表于 2023-8-20 21:31
瑞星82X

瑞星这么强？？？

123456aaaafsdeg

熊小度 发表于 2023-8-20 22:15

额？bd不是没了吗？

心醉咖啡

毒霸

DisaPDB

2023 8.21 22:58
360kill 88x

真小读者

DisaPDB 发表于 2023-8-21 19:10
瑞星这么强？？？

我没仔细看，可能有一个文件报好几个的

hansyu

真小读者 发表于 2023-8-20 21:31
瑞星82X

咖啡这个扫描真的怪，今天扫出52个，然后我一个个改扩展名双击多杀28个，余21个。