龟包 240109 25X

UNknownOoo

火绒
扫描：20X

1. 扫描文件：25
   
2. 发现风险：20
   
3. 已处理风险：0
   
4. 病毒详情：
   
5. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-07-Async-375e34.exe, 病毒名：Backdoor/MSIL.DcRat.a, 病毒ID：eb06897b83bd81bd, 处理结果：暂不处理
   
6. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-13-CobaltStrike-ed2194.exe, 病毒名：Backdoor/CobaltStrike.d, 病毒ID：9c6caf6b7979d2d0, 处理结果：暂不处理
   
7. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-17-Berbew-3c92ee.exe, 病毒名：Worm/Mimail.a, 病毒ID：4e96b616a2af8041, 处理结果：暂不处理
   
8. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-11-Miner-7ea146.exe, 病毒名：Trojan/W64.CoinMiner.by, 病毒ID：3fcb78e528f39e74, 处理结果：暂不处理
   
9. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-06-Redline-d6e02d.exe, 病毒名：TrojanSpy/MSIL.PwStealer.o, 病毒ID：693c4b0d8ed98a02, 处理结果：暂不处理
   
10. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-20-Berbew-136fa3.exe, 病毒名：Worm/Mimail.a, 病毒ID：4e96b616a2af8041, 处理结果：暂不处理
    
11. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-19-Berbew-04da42.exe, 病毒名：Worm/Mimail.a, 病毒ID：4e96b616a2af8041, 处理结果：暂不处理
    
12. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-18-Berbew-c9d3b3.exe, 病毒名：Worm/Mimail.a, 病毒ID：4e96b616a2af8041, 处理结果：暂不处理
    
13. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-21-Berbew-498aca.exe, 病毒名：Worm/Mimail.a, 病毒ID：4e96b616a2af8041, 处理结果：暂不处理
    
14. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-23-Berbew-99bc0c.exe, 病毒名：Worm/Mimail.a, 病毒ID：4e96b616a2af8041, 处理结果：暂不处理
    
15. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-22-Berbew-d86648.exe, 病毒名：Worm/Mimail.a, 病毒ID：4e96b616a2af8041, 处理结果：暂不处理
    
16. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-24-Miner-180a24.exe, 病毒名：Trojan/W64.CoinMiner.f, 病毒ID：aa4fcb8dd552d90c, 处理结果：暂不处理
    
17. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-04-AgentTesla-9c558d.exe, 病毒名：TrojanSpy/MSIL.AgentTesla.mq, 病毒ID：41467760e1a2a3a2, 处理结果：暂不处理
    
18. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-15-Expiro-91c486.exe, 病毒名：Trojan/VBClone.f, 病毒ID：56c3a48ef92a7f49, 处理结果：暂不处理
    
19. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-01-Rootkit-df6135.sys, 病毒名：Rootkit/W64.StartPage.d, 病毒ID：1ca4c5b612fe7324, 处理结果：暂不处理
    
20. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-25-Miner-620015.exe, 病毒名：Trojan/CoinMiner.iq, 病毒ID：e16bb13c81486220, 处理结果：暂不处理
    
21. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-03-Rootkit-b0b989.sys, 病毒名：Rootkit/StartPage.bd, 病毒ID：d2045ecfe32bf7a4, 处理结果：暂不处理
    
22. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-02-Rootkit-e80cfc.sys, 病毒名：Rootkit/StartPage.bd, 病毒ID：d2045ecfe32bf7a4, 处理结果：暂不处理
    
23. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-09-Sectop-62081e.exe, 病毒名：HVM:Trojan/Injector.bo, 病毒ID：74f24d08342d5a5b, 处理结果：暂不处理
    
24. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-10-AgentTesla-02328d.exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：b27d4294cde6a1ec, 处理结果：暂不处理

复制代码

X-Sec
扫描：ALL

1. ---------------------
   
2. 2024/01/09 09:43:54 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-02-Rootkit-e80cfc.sys -- [xave-cloud] Rootkit.Generic
   
3. 2024/01/09 09:43:55 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-01-Rootkit-df6135.sys -- [xave-cloud] Rootkit.Generic
   
4. 2024/01/09 09:43:55 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-03-Rootkit-b0b989.sys -- [xave-cloud] Rootkit.Generic
   
5. 2024/01/09 09:43:55 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-04-AgentTesla-9c558d.exe -- [xave-cloud] Spyware.Generic
   
6. 2024/01/09 09:43:59 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-05-AgentTesla-eecaa6.exe -- [xave-cloud] Spyware.Generic
   
7. 2024/01/09 09:43:59 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-06-Redline-d6e02d.exe -- [xave-cloud] Stealer.Generic
   
8. 2024/01/09 09:43:59 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-07-Async-375e34.exe -- [xave-cloud] Backdoor.Generic
   
9. 2024/01/09 09:44:01 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-09-Sectop-62081e.exe -- [xave-cloud] Stealer.Generic
   
10. 2024/01/09 09:44:02 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-10-AgentTesla-02328d.exe -- [xave-cloud] Spyware.Generic
    
11. 2024/01/09 09:44:03 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-08-AgentTesla-1e72bf.exe -- [xave-cloud] Spyware.Generic
    
12. 2024/01/09 09:44:03 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-11-Miner-7ea146.exe -- [xave-cloud] Trojan.Generic
    
13. 2024/01/09 09:44:04 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-13-CobaltStrike-ed2194.exe -- [xave-cloud] Backdoor.Generic
    
14. 2024/01/09 09:44:03 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-12-Unknown-f7966a.exe -- [xave-cloud] Trojan.Generic
    
15. 2024/01/09 09:44:04 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-14-Redline-2db1c8.exe -- [xave-cloud] Stealer.Generic
    
16. 2024/01/09 09:44:04 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-15-Expiro-91c486.exe -- [xave-cloud] Virus.Generic
    
17. 2024/01/09 09:44:05 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-17-Berbew-3c92ee.exe -- [xave-cloud] Backdoor.Generic
    
18. 2024/01/09 09:44:06 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-18-Berbew-c9d3b3.exe -- [xave-cloud] Backdoor.Generic
    
19. 2024/01/09 09:44:06 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-16-CobaltStrike-ad8223.exe -- [xave-cloud] Backdoor.Generic
    
20. 2024/01/09 09:44:07 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-19-Berbew-04da42.exe -- [xave-cloud] Backdoor.Generic
    
21. 2024/01/09 09:44:07 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-20-Berbew-136fa3.exe -- [xave-cloud] Backdoor.Generic
    
22. 2024/01/09 09:44:08 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-22-Berbew-d86648.exe -- [xave-cloud] Backdoor.Generic
    
23. 2024/01/09 09:44:08 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-21-Berbew-498aca.exe -- [xave-cloud] Backdoor.Generic
    
24. 2024/01/09 09:44:08 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-24-Miner-180a24.exe -- [xave-cloud] Trojan.Generic
    
25. 2024/01/09 09:44:08 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-23-Berbew-99bc0c.exe -- [xave-cloud] Backdoor.Generic
    
26. 2024/01/09 09:44:09 Threat Detected: C:\Users\UnknownOoo\Downloads\Compressed\TurtleSUSP-240109-repkg\TurtleSUSP-240109-25-Miner-620015.exe -- [xave-cloud] Trojan.Generic
    

复制代码

GreatMOLA

弹性 25x

IamAngry

z80405789 发表于 2024-1-9 08:42
剩余3双击触发行为拦截2

行为检测还挺有存在感的

tony099

BD 剩余6X

莒县小哥

DisaPDB

360 24x
自动机 2x 报法下发1x

合计25/25

Tant

ESSP 24x

pengnengkai1989

真小读者 发表于 2024-1-9 09:03
华为的弹窗还挺好看的

类似腾讯的电脑管家

biue

yaokai815

金山毒霸kill all