rootkit.signed

petr0vic

wh759626933

卡巴miss

hhhq316

蜘蛛

Fadouse

ESSP Kill

1. Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
   
2. 3/20/2024 4:24:02 PM;Real-time file system protection;file;E:\Code\Virus\1.sys;Win64/Agent.DOR trojan;cleaned by deleting;LAPTOP\Fadouse;Event occurred on a new file created by the application: C:\Program Files\Bandizip\Bandizip.exe (AB7C5C3728A1B132444C69A31DA61541F2BF4B25).;35ED2E0FF9AECD8AFE9450A46FF7C2690CAF9507;3/20/2024 4:23:46 PM
   

复制代码

DisaPDB

360

1. 类型:木马-Win64/Trojan.Generic.H8gAGtkA
   
2. 描述:木马是一种伪装成正常文件的恶意软件，会盗取您的帐号、密码等隐私资料。
   
3. 扫描引擎:云安全引擎
   
4. 文件路径:C:\Users\Administrator\Desktop\1.sys
   
5. 文件大小:174.3K (178,520 字节)
   
6. 文件指纹（MD5）:55459a47449b4cd12034ca22d2ca0778
   
7. 数字签名:Microsoft Windows Hardware Compatibility Publisher
   
8. 数字签名是否有效:有效
   
9. 处理建议:隔离文件
   

复制代码

UNknownOoo

火绒
扫描：特征 1x

1. 病毒详情：
   
2. 风险路径：C:\Users\UnknownOoo\Downloads\Compressed\1.sys, 病毒名：Rootkit/Loader.e, 病毒ID：97f29e1bfe8475c2, 处理结果：已处理，删除文件

复制代码

DisaPDB

UNknownOoo 发表于 2024-3-20 17:28
火绒
扫描：特征 1x

和那些BadUpdate释放的驱动一样

祸兮福所倚

Avast-kill

Eset小粉絲

New malicious software was found in the attached file. Its detection will be included in the next update.
HEUR:Rootkit.Win64.Agent.gen

biue