x4 (2023-08-27)

显示全部楼层 · 发表于 2023-8-27 11:31:58

显示全部楼层 · 发表于 2023-8-27 11:40:55

显示全部楼层 · 发表于 2023-8-27 12:13:01

WD剩余一个。双击杀。

显示全部楼层 · 发表于 2023-8-27 12:13:28

蜘蛛2

显示全部楼层 · 发表于 2023-8-27 12:15:41

显示全部楼层 · 发表于 2023-8-27 14:20:21

诺顿扫描2 双击杀2

显示全部楼层 · 发表于 2023-8-27 14:44:33

火绒扫描kill 1x
卡巴扫描miss 1x

显示全部楼层 · 发表于 2023-8-27 15:40:20

Malwarebytes
www.malwarebytes.com
-Log Details-
Scan Date: 8/27/23
Scan Time: 3:39 PM
Log File: d1021b44-44ac-11ee-b609-2c56dc95a2ae.json
-Software Information-
Version: 4.6.1.280
Components Version: 1.0.2117
Update Package Version: 1.0.74507
License: Premium
-System Information-
OS: Windows 11 (Build 22621.1992)
CPU: x64
File System: NTFS
User: Admin\25727
-Scan Summary-
Scan Type: Custom Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 4
Threats Detected: 2
Threats Quarantined: 0
Time Elapsed: 0 min, 18 sec
-Scan Options-
Memory: Disabled
Startup: Disabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect
-Scan Details-
Process: 0
(No malicious items detected)
Module: 0
(No malicious items detected)
Registry Key: 0
(No malicious items detected)
Registry Value: 0
(No malicious items detected)
Registry Data: 0
(No malicious items detected)
Data Stream: 0
(No malicious items detected)
Folder: 0
(No malicious items detected)
File: 2
Generic.Malware.Agent.DDS,
TREEPOL\BD619254.EXE, No Action By User, 1000002, 0, 1.0.74507, 2F90CEF459DA977E0B263414, dds, 02446924, 88BF884150CB727B9D7B06904940FA5D, 010600C7D1A509F221E78D82087881AA50C2CC924138FE6E5B14CCDD93B5D642
PUP.Optional.OfferCore, TREEPOL\82C422C0.EXE, No Action By User, 10396, 1095848, 1.0.74507, , ame, , DE8E7166ADFA4F754F76CD9BE3A8F9DC, FAF1188718206D1764153F7184EB53E95C72A117FD8C7E957743557B4F208961
Physical Sector: 0
(No malicious items detected)
WMI: 0
(No malicious items detected)
(end)

复制代码

显示全部楼层 · 发表于 2023-8-27 16:57:44

奇安信清空

显示全部楼层 · 发表于 2023-8-27 17:16:18

本帖最后由 GreatMOLA 于 2023-8-27 17:23 编辑

Bitdefender

复制代码

On-Access scanning has detected a threat. The file has been quarantined.C:\33download\Treepol\Treepol\B65DE294.exe is malware of type Gen:Suspicious.Cloud.2.@pGfa0!qw1f

复制代码

Advanced Threat Control has started a disinfection action on a process detected as malicious.Process path: D:\edge download\Treepol\Treepol\82C422C0.exe. Threat name: ATC.SuspiciousBehavior.53FACB6C54F53E44.

复制代码

7BB205D0.exe 执行:

C:\Users\User\AppData\Local\Temp\nsrC92E.tmp\app-32.7z=>resources=>app.asar=>node_modules/node-hide-console-window/build/Release/node-hide-console-window.node 是恶意软件 Gen:Variant.Midie.127256

复制代码

C:\Users\User\AppData\Local\Temp\nsrC92E.tmp\app-32.7z=>resources=>app.asar=>node_modules/node-hide-console-window/bin/win32-ia32-114/node-hide-console-window.node 是恶意软件 Gen:Variant.Midie.127256

复制代码

[病毒样本] x4 (2023-08-27)