龟(Agent)包(Tesla) 2311212 22X

GDHJDSYDH

EIS清空

嘿嘿不能说

22

1. C:\Users\Killer\Desktop\1121\231121-01-AgentTesla-4f4bd4.exe [L] Win32:PWSX-gen [Trj] (0)
   
2. C:\Users\Killer\Desktop\1121\231121-02-AgentTesla-29ec4c.exe [L] Win32:PWSX-gen [Trj] (0)
   
3. C:\Users\Killer\Desktop\1121\231121-03-SmokeLoader-a0e394.exe [L] Win32:PWSX-gen [Trj] (0)
   
4. C:\Users\Killer\Desktop\1121\231121-04-AgentTesla-41c205.exe [L] Win32:PWSX-gen [Trj] (0)
   
5. C:\Users\Killer\Desktop\1121\231121-05-CobaltStrike-189129.exe [L] Win64:Evo-gen [Trj] (0)
   
6. C:\Users\Killer\Desktop\1121\231121-06-AgentTesla-b971a6.exe [L] Win32:RATX-gen [Trj] (0)
   
7. C:\Users\Killer\Desktop\1121\231121-07-AgentTesla-64b66a.exe [L] Win32:PWSX-gen [Trj] (0)
   
8. C:\Users\Killer\Desktop\1121\231121-08-AgentTesla-d20084.exe [L] Win32:PWSX-gen [Trj] (0)
   
9. C:\Users\Killer\Desktop\1121\231121-09-AgentTesla-fbf7c4.exe [L] Win32:PWSX-gen [Trj] (0)
   
10. C:\Users\Killer\Desktop\1121\231121-10-AgentTesla-a77eec.exe [L] Win32:PWSX-gen [Trj] (0)
    
11. C:\Users\Killer\Desktop\1121\231121-11-AgentTesla-fe5abc.exe [L] Win32:CrypterX-gen [Trj] (0)
    
12. C:\Users\Killer\Desktop\1121\231121-12-AgentTesla-68ee1d.exe [L] Win32:PWSX-gen [Trj] (0)
    
13. C:\Users\Killer\Desktop\1121\231121-13-AgentTesla-4c625e.exe [L] Win32:PWSX-gen [Trj] (0)
    
14. C:\Users\Killer\Desktop\1121\231121-14-AgentTesla-1fcc29.exe [L] Win32:PWSX-gen [Trj] (0)
    
15. C:\Users\Killer\Desktop\1121\231121-15-Lokibot-a3aaf4.exe [L] Win32:PWSX-gen [Trj] (0)
    
16. C:\Users\Killer\Desktop\1121\231121-16-Lime-098e00.exe [L] Win32:RATX-gen [Trj] (0)
    
17. C:\Users\Killer\Desktop\1121\231121-17-AgentTesla-d76ff3.exe [L] Win32:PWSX-gen [Trj] (0)
    
18. C:\Users\Killer\Desktop\1121\231121-18-AgentTesla-5396ec.exe [L] Win32:PWSX-gen [Trj] (0)
    
19. C:\Users\Killer\Desktop\1121\231121-19-AgentTesla-c5c0b7.exe [L] Win32:PWSX-gen [Trj] (0)
    
20. C:\Users\Killer\Desktop\1121\231121-20-AgentTesla-1b8f96.exe [L] Win32:PWSX-gen [Trj] (0)
    
21. C:\Users\Killer\Desktop\1121\231121-21-AgentTesla-4a6ed3.exe [L] Win32:PWSX-gen [Trj] (0)
    
22. C:\Users\Killer\Desktop\1121\231121-22-AgentTesla-bd2c71.exe [L] Win32:PWSX-gen [Trj] (0)

复制代码

2023.09.25  ESET（默认，断网仅扫描）  7个

1. C:\Users\abori\Desktop\1121\231121-02-AgentTesla-29ec4c.exe - MSIL/GenKryptik.FUYZ 特洛伊木马 的变量 - 已通过删除清除 [1]
   
2. C:\Users\abori\Desktop\1121\231121-05-CobaltStrike-189129.exe - Win64/GenKryptik.FRMA 特洛伊木马 的变量 - 已通过删除清除 [1]
   
3. C:\Users\abori\Desktop\1121\231121-07-AgentTesla-64b66a.exe - MSIL/Spy.AgentTesla.F 特洛伊木马 的变量 - 已通过删除清除 [1]
   
4. C:\Users\abori\Desktop\1121\231121-08-AgentTesla-d20084.exe - MSIL/Spy.AgentTesla.F 特洛伊木马 的变量 - 已通过删除清除 [1]
   
5. C:\Users\abori\Desktop\1121\231121-09-AgentTesla-fbf7c4.exe - MSIL/Spy.AgentTesla.F 特洛伊木马 的变量 - 已通过删除清除 [1]
   
6. C:\Users\abori\Desktop\1121\231121-11-AgentTesla-fe5abc.exe - MSIL/Kryptik.AIUK 特洛伊木马 的变量 - 已通过删除清除 [1]
   
7. C:\Users\abori\Desktop\1121\231121-16-Lime-098e00.exe - MSIL/TrojanDropper.Agent.FOV 特洛伊木马 的变量 - 已通过删除清除 [1]

复制代码

具有攻击性，再杀14个

1. C:\Users\abori\Desktop\1121\231121-01-AgentTesla-4f4bd4.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
   
2. C:\Users\abori\Desktop\1121\231121-03-SmokeLoader-a0e394.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
   
3. C:\Users\abori\Desktop\1121\231121-04-AgentTesla-41c205.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
   
4. C:\Users\abori\Desktop\1121\231121-10-AgentTesla-a77eec.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
   
5. C:\Users\abori\Desktop\1121\231121-12-AgentTesla-68ee1d.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
   
6. C:\Users\abori\Desktop\1121\231121-13-AgentTesla-4c625e.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
   
7. C:\Users\abori\Desktop\1121\231121-14-AgentTesla-1fcc29.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
   
8. C:\Users\abori\Desktop\1121\231121-15-Lokibot-a3aaf4.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
   
9. C:\Users\abori\Desktop\1121\231121-17-AgentTesla-d76ff3.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
   
10. C:\Users\abori\Desktop\1121\231121-18-AgentTesla-5396ec.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
    
11. C:\Users\abori\Desktop\1121\231121-19-AgentTesla-c5c0b7.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
    
12. C:\Users\abori\Desktop\1121\231121-20-AgentTesla-1b8f96.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
    
13. C:\Users\abori\Desktop\1121\231121-21-AgentTesla-4a6ed3.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]
    
14. C:\Users\abori\Desktop\1121\231121-22-AgentTesla-bd2c71.exe - ML/Augur 特洛伊木马 - 已通过删除清除 [1]

复制代码

2023.09.09  KIS  5个（很稳定）

1. 今天，2023/11/21 12:36:32        C:\Users\Killer\Desktop\1121\231121-16-Lime-098e00.exe\crs_0001\crs_0001        检测到        检测到恶意对象        HEUR:Trojan.MSIL.Tasker.gen        机器学习        文件        C:\Users\Killer\Desktop\1121\231121-16-Lime-098e00.exe//crs_0001//        crs_0001        检测到        木马        高        启发式分析        
   
2. 今天，2023/11/21 12:36:32        C:\Users\Killer\Desktop\1121\231121-09-AgentTesla-fbf7c4.exe        检测到        检测到恶意对象        HEUR:Trojan-PSW.MSIL.Agensla.a        专家分析        文件        C:\Users\Killer\Desktop\1121        231121-09-AgentTesla-fbf7c4.exe        检测到        木马        高        确切        
   
3. 今天，2023/11/21 12:36:23        C:\Users\Killer\Desktop\1121\231121-03-SmokeLoader-a0e394.exe        检测到        检测到恶意对象        HEUR:Backdoor.Win32.Androm.gen        机器学习        文件        C:\Users\Killer\Desktop\1121        231121-03-SmokeLoader-a0e394.exe        检测到        木马        高        启发式分析        
   
4. 今天，2023/11/21 12:36:23        C:\Users\Killer\Desktop\1121\231121-08-AgentTesla-d20084.exe        检测到        检测到恶意对象        HEUR:Trojan-PSW.MSIL.Agensla.a        专家分析        文件        C:\Users\Killer\Desktop\1121        231121-08-AgentTesla-d20084.exe        检测到        木马        高        确切        
   
5. 今天，2023/11/21 12:36:23        C:\Users\Killer\Desktop\1121\231121-07-AgentTesla-64b66a.exe        检测到        检测到恶意对象        HEUR:Trojan-PSW.MSIL.Agensla.a        专家分析        文件        C:\Users\Killer\Desktop\1121        231121-07-AgentTesla-64b66a.exe        检测到        木马        高        确切        

复制代码

你是不是故意的！

2023.08.07  360（套装）  14个

UNknownOoo

火绒
扫描：10X

1. 扫描文件：22
   
2. 发现风险：10
   
3. 已处理风险：0
   
4. 病毒详情：
   
5. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-16-Lime-098e00.exe, 病毒名：TrojanDropper/MSIL.Agent.gx, 病毒ID：9284a9ac777cda1e, 处理结果：暂不处理
   
6. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-03-SmokeLoader-a0e394.exe, 病毒名：Trojan/Agent.bgk, 病毒ID：646e26e69eabf433, 处理结果：暂不处理
   
7. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-07-AgentTesla-64b66a.exe, 病毒名：TrojanSpy/Agent.ae, 病毒ID：7182995b0f36c985, 处理结果：暂不处理
   
8. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-08-AgentTesla-d20084.exe, 病毒名：TrojanSpy/Agent.ae, 病毒ID：7182995b0f36c985, 处理结果：暂不处理
   
9. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-09-AgentTesla-fbf7c4.exe, 病毒名：TrojanSpy/Agent.ae, 病毒ID：7182995b0f36c985, 处理结果：暂不处理
   
10. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-18-AgentTesla-5396ec.exe, 病毒名：Trojan/MSIL.Agent.dj, 病毒ID：c5c57cb4688e2ddd, 处理结果：暂不处理
    
11. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-02-AgentTesla-29ec4c.exe, 病毒名：HEUR:VirTool/MSIL.Obfuscator.gen!A, 病毒ID：3fda44dcb57a42be, 处理结果：暂不处理
    
12. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-14-AgentTesla-1fcc29.exe, 病毒名：TrojanSpy/MSIL.AgentTesla.nt, 病毒ID：defb0a61b90f577a, 处理结果：暂不处理
    
13. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-17-AgentTesla-d76ff3.exe, 病毒名：TrojanSpy/MSIL.AgentTesla.nt, 病毒ID：defb0a61b90f577a, 处理结果：暂不处理
    
14. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-05-CobaltStrike-189129.exe, 病毒名：Backdoor/CobaltStrike.ar, 病毒ID：94cd5e78b0868892, 处理结果：暂不处理
    

复制代码

X-Sec
扫描：ALL

1. ---------------------
   
2. 2023/11/21 12:57:21 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-02-AgentTesla-29ec4c.exe -- [xave-cloud] Spyware.Generic
   
3. 2023/11/21 12:57:21 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-01-AgentTesla-4f4bd4.exe -- [xave-cloud] Spyware.Generic
   
4. 2023/11/21 12:57:21 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-03-SmokeLoader-a0e394.exe -- [rame-classic] Trojan.SmokeLoader!1.EE66
   
5. 2023/11/21 12:57:21 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-04-AgentTesla-41c205.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.90
   
6. 2023/11/21 12:57:21 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-06-AgentTesla-b971a6.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.92
   
7. 2023/11/21 12:57:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-07-AgentTesla-64b66a.exe -- [xave-cloud] Spyware.Generic
   
8. 2023/11/21 12:57:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-08-AgentTesla-d20084.exe -- [xave-heur] Heur:Stealer.Generic
   
9. 2023/11/21 12:57:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-05-CobaltStrike-189129.exe -- [xave-cloud] Backdoor.Generic
   
10. 2023/11/21 12:57:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-14-AgentTesla-1fcc29.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
    
11. 2023/11/21 12:57:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-13-AgentTesla-4c625e.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
    
12. 2023/11/21 12:57:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-12-AgentTesla-68ee1d.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.90
    
13. 2023/11/21 12:57:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-11-AgentTesla-fe5abc.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.87
    
14. 2023/11/21 12:57:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-10-AgentTesla-a77eec.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.90
    
15. 2023/11/21 12:57:22 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-15-Lokibot-a3aaf4.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.98
    
16. 2023/11/21 12:57:23 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-19-AgentTesla-c5c0b7.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
    
17. 2023/11/21 12:57:23 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-18-AgentTesla-5396ec.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
    
18. 2023/11/21 12:57:23 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-17-AgentTesla-d76ff3.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
    
19. 2023/11/21 12:57:23 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-09-AgentTesla-fbf7c4.exe -- [xave-cloud] Spyware.Generic
    
20. 2023/11/21 12:57:23 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-16-Lime-098e00.exe -- [xave-cloud] Backdoor.Generic
    
21. 2023/11/21 12:57:23 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-22-AgentTesla-bd2c71.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
    
22. 2023/11/21 12:57:23 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-21-AgentTesla-4a6ed3.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.100
    
23. 2023/11/21 12:57:23 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\1121\231121-20-AgentTesla-1b8f96.exe -- [rame-rdm.msil2] Malware.Obfus/MSIL@AI.88

复制代码

心醉咖啡

金山毒霸

haol

Mcafee found 22 threats.

GreatMOLA

Norton（NGAV）all

AdvML10x+Malcode12x

TrendMicro 19x

biue

onedrive

GreatMOLA 发表于 2023-11-21 05:19
Norton（NGAV）all

AdvML10x+Malcode12x

norton现在应该是空壳杀毒，博通技术租用者吧

AlphaRabbit

11 21包，Avast高敏感全灭

sichuanwenxuan

KFA剩下一个。WD剩下一个，双击杀。