龟包 231118 33X

UNknownOoo

火绒
扫描：23X

1. 扫描文件：33
   
2. 发现风险：23
   
3. 已处理风险：0
   
4. 病毒详情：
   
5. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-06-Msfvenom-f0eff1.exe, 病毒名：VirTool/Meterpreter.a, 病毒ID：d8c9bfd98e4a57a6, 处理结果：暂不处理
   
6. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-07-Msfvenom-62d47d.exe, 病毒名：VirTool/Meterpreter.a, 病毒ID：d8c9bfd98e4a57a6, 处理结果：暂不处理
   
7. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-02-XWorm-dc7be1.exe, 病毒名：Backdoor/MSIL.DDos.a, 病毒ID：8f1bdcc00654e1f5, 处理结果：暂不处理
   
8. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-03-XWorm-67b903.exe, 病毒名：Backdoor/MSIL.DDos.b, 病毒ID：78a08094819513ac, 处理结果：暂不处理
   
9. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-19-Lokibot-c223f5.exe, 病毒名：TrojanSpy/PassStealer.bf, 病毒ID：4eab7b47d1350b8c, 处理结果：暂不处理
   
10. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-04-XWorm-e70c52.exe, 病毒名：TrojanSpy/MSIL.AgentTesla.jr, 病毒ID：ecf1e5e59515c8d7, 处理结果：暂不处理
    
11. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-20-AgentTesla-9bce9b.exe, 病毒名：TrojanSpy/Agent.ae, 病毒ID：7182995b0f36c985, 处理结果：暂不处理
    
12. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-22-CobaltStrike-0fa379.exe, 病毒名：Backdoor/W64.Meterpreter.b, 病毒ID：039db99588a1e0ee, 处理结果：暂不处理
    
13. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-23-Berbew-9705bc.exe, 病毒名：Worm/Mimail.a, 病毒ID：4e96b616a2af8041, 处理结果：暂不处理
    
14. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-21-AgentTesla-550e79.exe, 病毒名：TrojanSpy/Agent.ae, 病毒ID：7182995b0f36c985, 处理结果：暂不处理
    
15. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-25-Redline-2d39ac.exe, 病毒名：TrojanSpy/MSIL.Stealer.cb, 病毒ID：4e77ffb666e612d2, 处理结果：暂不处理
    
16. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-29-Trickbot-65b32d.exe, 病毒名：VirTool/VB.Obfuscator.b, 病毒ID：3e4caa74b603cd6f, 处理结果：暂不处理
    
17. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-18-CobaltStrike-250085.exe, 病毒名：Backdoor/W64.Meterpreter.b, 病毒ID：039db99588a1e0ee, 处理结果：暂不处理
    
18. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-12-Msfvenom-db8e7e.exe, 病毒名：Backdoor/Meterpreter.ed, 病毒ID：9f8cb69c8c50b9b1, 处理结果：暂不处理
    
19. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-27-CobaltStrikeGO-2355ea.exe, 病毒名：Trojan/ShellLoader.y, 病毒ID：cdc9f4812b5efb8f, 处理结果：暂不处理
    
20. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-30-RisePro-2fbc89.exe, 病毒名：HEUR:TrojanDownloader/Agent.bf, 病毒ID：7bec03d7fe2662cb, 处理结果：暂不处理
    
21. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-01-Quasar-72ce9e.exe, 病毒名：Backdoor/Quasar.f, 病毒ID：9877dfc918556493, 处理结果：暂不处理
    
22. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-11-Gh0st-6b7562.exe, 病毒名：Backdoor/Ghost.ag, 病毒ID：c54ca6f994f6b854, 处理结果：暂不处理
    
23. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-08-SmokeLoader-8b9b8f.exe, 病毒名：HVM:Trojan/Injector.gen!A, 病毒ID：b2526d285381439a, 处理结果：暂不处理
    
24. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-09-SmokeLoader-6dfe66.exe, 病毒名：HVM:Trojan/Injector.gen!A, 病毒ID：b2526d285381439a, 处理结果：暂不处理
    
25. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-32-Stealc-5bd6d0.exe, 病毒名：VirTool/Obfuscator.fq, 病毒ID：87f0b01289503335, 处理结果：暂不处理
    
26. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-05-Djvu-b8da6b.exe, 病毒名：VirTool/Obfuscator.fq, 病毒ID：87f0b01289503335, 处理结果：暂不处理
    
27. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1118\231118-17-MsfvenomPYI-08afb7.exe, 病毒名：Backdoor/Meterpreter.an, 病毒ID：7f025ed75cb76303, 处理结果：暂不处理
    

复制代码

X-Sec
扫描：ALL

1. ---------------------
   
2. 2023/11/18 09:21:47 Threat Detected: D:\1118\231118-01-Quasar-72ce9e.exe -- [xave-heur] Heur:Stealer.Generic
   
3. 2023/11/18 09:21:48 Threat Detected: D:\1118\231118-03-XWorm-67b903.exe -- [rame-classic] Trojan.AntiVM!1.CF63
   
4. 2023/11/18 09:21:48 Threat Detected: D:\1118\231118-02-XWorm-dc7be1.exe -- [rame-classic] Trojan.AntiVM!1.CF63
   
5. 2023/11/18 09:21:49 Threat Detected: D:\1118\231118-04-XWorm-e70c52.exe -- [rame-classic] Trojan.Evasion!1.E3A9
   
6. 2023/11/18 09:21:50 Threat Detected: D:\1118\231118-05-Djvu-b8da6b.exe -- [rame-cloud] Trojan.Convagent!8.12323
   
7. 2023/11/18 09:21:50 Threat Detected: D:\1118\231118-06-Msfvenom-f0eff1.exe -- [rame-classic] HackTool.Swrort!1.6477
   
8. 2023/11/18 09:21:51 Threat Detected: D:\1118\231118-09-SmokeLoader-6dfe66.exe -- [rame-cloud] Trojan.Agent!8.B1E
   
9. 2023/11/18 09:21:51 Threat Detected: D:\1118\231118-07-Msfvenom-62d47d.exe -- [rame-classic] HackTool.Swrort!1.6477
   
10. 2023/11/18 09:21:51 Threat Detected: D:\1118\231118-08-SmokeLoader-8b9b8f.exe -- [rame-cloud] Trojan.Agent!8.B1E
    
11. 2023/11/18 09:21:52 Threat Detected: D:\1118\231118-10-AgentTesla-054ba1.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.81
    
12. 2023/11/18 09:21:52 Threat Detected: D:\1118\231118-11-Gh0st-6b7562.exe -- [rame-cloud] Backdoor.Zegost!8.177
    
13. 2023/11/18 09:21:53 Threat Detected: D:\1118\231118-14-AgentTesla-afa0ec.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.80
    
14. 2023/11/18 09:21:53 Threat Detected: D:\1118\231118-12-Msfvenom-db8e7e.exe -- [rame-classic] Trojan.Meterpreter!1.AEA1
    
15. 2023/11/18 09:21:53 Threat Detected: D:\1118\231118-16-AgentTesla-956e2a.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.80
    
16. 2023/11/18 09:21:53 Threat Detected: D:\1118\231118-15-AgentTesla-6a6935.exe -- [rame-cloud] Spyware.AgentTesla!8.10E35
    
17. 2023/11/18 09:21:54 Threat Detected: D:\1118\231118-13-CobaltStrike-a3cc14.exe -- [rame-cloud] Trojan.Shlem!8.160EB
    
18. 2023/11/18 09:21:54 Threat Detected: D:\1118\231118-17-MsfvenomPYI-08afb7.exe -- [rame-classic] Trojan.ShellCodeRunner/PYC!1.ECE5
    
19. 2023/11/18 09:21:55 Threat Detected: D:\1118\231118-19-Lokibot-c223f5.exe -- [xave-heur] Heur:Stealer.Generic
    
20. 2023/11/18 09:21:55 Threat Detected: D:\1118\231118-18-CobaltStrike-250085.exe -- [rame-classic] Backdoor.CobaltStrike!1.D9A1
    
21. 2023/11/18 09:21:56 Threat Detected: D:\1118\231118-21-AgentTesla-550e79.exe -- [rame-classic] Spyware.AgentTesla!1.EE33
    
22. 2023/11/18 09:21:56 Threat Detected: D:\1118\231118-20-AgentTesla-9bce9b.exe -- [rame-classic] Spyware.AgentTesla!1.EE33
    
23. 2023/11/18 09:21:57 Threat Detected: D:\1118\231118-22-CobaltStrike-0fa379.exe -- [rame-classic] Backdoor.CobaltStrike/x64!1.DEE2
    
24. 2023/11/18 09:21:57 Threat Detected: D:\1118\231118-23-Berbew-9705bc.exe -- [rame-classic] Backdoor.Qakbot!1.A74D
    
25. 2023/11/18 09:21:57 Threat Detected: D:\1118\231118-25-Redline-2d39ac.exe -- [rame-tfe] Spyware.Redline!8.1309C
    
26. 2023/11/18 09:21:57 Threat Detected: D:\1118\231118-24-AgentTesla-5ee0d6.exe -- [rame-cloud] Trojan.Generic!8.C3
    
27. 2023/11/18 09:21:58 Threat Detected: D:\1118\231118-26-Quasar-2a5e8a.exe -- [rame-cloud] Backdoor.Androm!8.113
    
28. 2023/11/18 09:21:58 Threat Detected: D:\1118\231118-27-CobaltStrikeGO-2355ea.exe -- [rame-cloud] Trojan.Goshell!8.1818E
    
29. 2023/11/18 09:21:58 Threat Detected: D:\1118\231118-30-RisePro-2fbc89.exe -- [rame-classic] Downloader.Agent!1.D93C
    
30. 2023/11/18 09:21:58 Threat Detected: D:\1118\231118-28-AgentTesla-273deb.exe -- [rame-cloud] Trojan.Kryptik!8.8
    
31. 2023/11/18 09:21:59 Threat Detected: D:\1118\231118-29-Trickbot-65b32d.exe -- [rame-classic] Trojan.Agent!1.DEE0
    
32. 2023/11/18 09:22:00 Threat Detected: D:\1118\231118-31-Mekotio-dbf8ab.msi -- [rame-cloud] Spyware.Mekotio!8.F5DF
    
33. 2023/11/18 09:22:00 Threat Detected: D:\1118\231118-32-Stealc-5bd6d0.exe -- [rame-cloud] Stealer.Convagent!8.1326D
    
34. 2023/11/18 09:22:01 Threat Detected: D:\1118\231118-33-ConnectWise-d1fcf5.exe -- [rame-tfe] HackTool.ConnectWise!8.13A88
    

复制代码

神龟Turmi

1094947421 发表于 2023-11-18 09:19
好像真是老版本

最新版都23.8了（

dght432

360kill all

sichuanwenxuan

WD监控剩下3个。

xiaohehe2

谢谢楼主

心醉咖啡

金山毒霸

hansyu

McAfee 扫描31x，双击1x
missed 1x

GreatMOLA

Trend Micro Apex One 30x

Check Point 32x

hhhq316

蜘蛛 23
实时22

双击阻止 1

嘿嘿不能说

30

1. C:\Users\Killer\Desktop\1118\231118-01-Quasar-72ce9e.exe [L] MSIL:Quasar-A [Rat] (0)
   
2. C:\Users\Killer\Desktop\1118\231118-02-XWorm-dc7be1.exe [L] Win32:MalwareX-gen [Trj] (0)
   
3. C:\Users\Killer\Desktop\1118\231118-03-XWorm-67b903.exe [L] Win32:MalwareX-gen [Trj] (0)
   
4. C:\Users\Killer\Desktop\1118\231118-04-XWorm-e70c52.exe [L] Win32:DropperX-gen [Drp] (0)
   
5. C:\Users\Killer\Desktop\1118\231118-05-Djvu-b8da6b.exe [L] Win32:BotX-gen [Trj] (0)
   
6. C:\Users\Killer\Desktop\1118\231118-06-Msfvenom-f0eff1.exe [L] Win32:Meterpreter-C [Trj] (0)
   
7. C:\Users\Killer\Desktop\1118\231118-07-Msfvenom-62d47d.exe [L] Win32:Meterpreter-C [Trj] (0)
   
8. C:\Users\Killer\Desktop\1118\231118-08-SmokeLoader-8b9b8f.exe [L] Win32:BotX-gen [Trj] (0)
   
9. C:\Users\Killer\Desktop\1118\231118-09-SmokeLoader-6dfe66.exe [L] Win32:BotX-gen [Trj] (0)
   
10. C:\Users\Killer\Desktop\1118\231118-10-AgentTesla-054ba1.exe [L] Win32:PWSX-gen [Trj] (0)
    
11. C:\Users\Killer\Desktop\1118\231118-11-Gh0st-6b7562.exe|>[Embedded_I#16e6f8] [L] Win32:Evo-gen [Trj] (0)
    
12. C:\Users\Killer\Desktop\1118\231118-12-Msfvenom-db8e7e.exe [L] Win32:ShikataGaNai-B [Trj] (0)
    
13. C:\Users\Killer\Desktop\1118\231118-14-AgentTesla-afa0ec.exe [L] Win32:PWSX-gen [Trj] (0)
    
14. C:\Users\Killer\Desktop\1118\231118-15-AgentTesla-6a6935.exe [L] Win32:PWSX-gen [Trj] (0)
    
15. C:\Users\Killer\Desktop\1118\231118-16-AgentTesla-956e2a.exe [L] Win32:PWSX-gen [Trj] (0)
    
16. C:\Users\Killer\Desktop\1118\231118-18-CobaltStrike-250085.exe [L] Win64:MalwareX-gen [Trj] (0)
    
17. C:\Users\Killer\Desktop\1118\231118-19-Lokibot-c223f5.exe [L] Win32:LokiBot-A [Trj] (0)
    
18. C:\Users\Killer\Desktop\1118\231118-20-AgentTesla-9bce9b.exe [L] Win32:PWSX-gen [Trj] (0)
    
19. C:\Users\Killer\Desktop\1118\231118-21-AgentTesla-550e79.exe [L] Win32:PWSX-gen [Trj] (0)
    
20. C:\Users\Killer\Desktop\1118\231118-22-CobaltStrike-0fa379.exe [L] Win32:MsfShell-V [Hack] (0)
    
21. C:\Users\Killer\Desktop\1118\231118-23-Berbew-9705bc.exe|>[Embedded_I#2bdf8] [L] Win32:Kraton-A [Trj] (0)
    
22. C:\Users\Killer\Desktop\1118\231118-23-Berbew-9705bc.exe [L] Win32:Kraton-A [Trj] (0)
    
23. C:\Users\Killer\Desktop\1118\231118-24-AgentTesla-5ee0d6.exe [L] Win32:PWSX-gen [Trj] (0)
    
24. C:\Users\Killer\Desktop\1118\231118-25-Redline-2d39ac.exe [L] Win32:PWSX-gen [Trj] (0)
    
25. C:\Users\Killer\Desktop\1118\231118-27-CobaltStrikeGO-2355ea.exe [L] Win64:Malware-gen (0)
    
26. C:\Users\Killer\Desktop\1118\231118-28-AgentTesla-273deb.exe [L] Win32:PWSX-gen [Trj] (0)
    
27. C:\Users\Killer\Desktop\1118\231118-29-Trickbot-65b32d.exe|>[Embedded_I#72201] [L] Win32:BankerX-gen [Trj] (0)
    
28. C:\Users\Killer\Desktop\1118\231118-29-Trickbot-65b32d.exe [L] Win32:BankerX-gen [Trj] (0)
    
29. C:\Users\Killer\Desktop\1118\231118-30-RisePro-2fbc89.exe [L] Win32:BackdoorX-gen [Trj] (0)
    
30. C:\Users\Killer\Desktop\1118\231118-31-Mekotio-dbf8ab.msi|>Binary.pcihnhd.dll [L] Win32:SpywareX-gen [Trj] (0)
    
31. C:\Users\Killer\Desktop\1118\231118-31-Mekotio-dbf8ab.msi [L] Other:Malware-gen [Trj] (0)
    
32. C:\Users\Killer\Desktop\1118\231118-32-Stealc-5bd6d0.exe [L] Win32:BotX-gen [Trj] (0)
    
33. C:\Users\Killer\Desktop\1118\231118-11-Gh0st-6b7562.exe [L] FileRepMalware [Trj] (0)
    
34. C:\Users\Killer\Desktop\1118\231118-17-MsfvenomPYI-08afb7.exe [L] FileRepMalware [Misc] (0)

复制代码

剩下3个运行一段时间均无任何拦截