13X

hsks

https://wormhole.app/vPp6b#H9j1VsaPVvHdCSTukj1eug
https://www.123pan.com/s/FJUmjv-gA6N.html
https://pan.xiaomuxi.cn/s/Jjyiz
https://pan.huang1111.cn/s/MNN9Nix

莒县小哥

WD清空

1073328164

迈克菲扫描 kill 6x（超常发挥）

卡巴opentip跑了一圈，检出9x，余下的已上报（才过了几分钟又拉黑了俩）

btbtg

761773275

BD 5X

DisaPDB

360 扫描9x

1. 扫描类型: 自定义扫描
   
2. 扫描引擎:360云查杀引擎（本地木马库）  360启发式引擎  QEX脚本查杀引擎
   
3.              QVM Ⅱ人工智能引擎 鲲鹏引擎
   
4. 扫描内容
   
5. ----------------------
   
6. C:\Users\DisaExploit\Desktop\1313\
   
7. 
   
8. 白名单设置
   
9. ----------------------
   
10. C:\Users\DisaExploit\Desktop\人员明细表格单.exe 0fbe0d7f772f192018bb856ed76bbf33
    
11. C:\Users\DisaExploit\AppData\Roaming\OpenArk\kernel\OpenArkDrv64.sys bd5b87be607fa55f7d9a2af89e2ef38e
    
12. C:\Users\DisaExploit\Desktop\OpenArk_1.3.6_64bit_Setup\OpenArk_1.3.6_64bit_Setup.exe a186e957edaed6e1e54bf553bdfe90b6
    
13. C:\Users\DisaExploit\Desktop\4115860730.exe 7c1fd39213586bff2a3ad6a094cbcc8c
    
14. 
    
15. 扫描结果
    
16. ======================
    
17. 
    
18. 危险文件：9个
    
19. ----------------------------------------------------------------
    
20. C:\Users\DisaExploit\Desktop\1313\1313\@m9.exe d320ccec047a03f81cbb5e9c590537ba 70,2,70,2000,256,1,100,0 ERT=2_0_0_1,11_100_2000_256 [云安全引擎][木马-Win64/Trojan.Inject.HgEATd8A][隔离文件][处理成功]
    
21. C:\Users\DisaExploit\Desktop\1313\1313\a_Qf6jpQfZ.exe 33511a5b7a87b45d1ef6b7f490f3a1c2 70,2,70,2000,256,1,100,0 ERT=2_0_0_1,11_100_2000_256 [云安全引擎][木马-Win32/Ransom.Generic.HxIBCCMA][隔离文件][处理成功]
    
22. C:\Users\DisaExploit\Desktop\1313\1313\exe.exe bd23443eae17ff9ec5cb9225c64dd76b 70,0,30,2044,256,1,100,0 ERT=2_0_0_1,16_100_2044_1,11_100_2044_256 [云特征引擎][木马-HEUR/QVM07.1.0823.Malware.Gen][隔离文件][处理成功]
    
23. C:\Users\DisaExploit\Desktop\1313\1313\Installer.exe 54e43d56ab116124430aacbfd67630cb 70,0,70,2000,256,1,100,0 ERT=2_0_0_1,11_100_2000_256 [云安全引擎][木马-Trojan.Generic][隔离文件][处理成功]
    
24. C:\Users\DisaExploit\Desktop\1313\1313\KLL.exe dae5a734c5b1180c4f09194bc308fad6 70,2,70,2000,256,1,100,0 ERT=2_0_0_1,11_100_2000_256 [云安全引擎][木马-Win64/Trojan.Inject.HgEATd4A][隔离文件][处理成功]
    
25. C:\Users\DisaExploit\Desktop\1313\1313\P.exe 274d320ac62ff8f66a0b3c9c5ca46a7e 70,2,70,2000,256,1,100,0 ERT=2_0_0_1,11_100_2000_256 [云安全引擎][木马-Win64/Trojan.Generic.HgEATd8A][隔离文件][处理成功]
    
26. C:\Users\DisaExploit\Desktop\1313\1313\setup-240731.exe e9ab6914e10736aded06c42078a253ca 70,2,70,2000,256,1,100,0 ERT=2_0_0_1,11_100_2000_256 [云安全引擎][木马-Win32/Ransom.Generic.HxIBBo8A][隔离文件][处理成功]
    
27. C:\Users\DisaExploit\Desktop\1313\1313\supe-07.30.exe ef04870189687bc738a001af81ade3fc 70,2,70,2000,256,1,100,0 ERT=2_0_0_1,11_100_2000_256 [云安全引擎][木马-Win32/Ransom.Generic.HgIATd8A][隔离文件][处理成功]
    
28. C:\Users\DisaExploit\Desktop\1313\1313\UCK.exe e0ae2950d9ca3338ef4ecb0e72d0ddcc 70,0,40,2044,256,1,100,0 ERT=2_0_0_1,16_100_2044_1,11_100_2044_256 [云特征引擎][木马-HEUR/QVM202.0.082E.Malware.Gen][隔离文件][处理成功]
    

复制代码

剩余双击 全部寄掉

爱杀毒的韩钦德

莒县小哥 发表于 2024-7-31 15:40
WD清空

这不是默认设置吧

莒县小哥

爱杀毒的韩钦德 发表于 2024-7-31 15:56
这不是默认设置吧

零容忍模式

1073328164

爱杀毒的韩钦德 发表于 2024-7-31 15:56
这不是默认设置吧

零容忍模式，参考下就行，不代表默认设置下的查杀能力

biue

腾讯电脑管家 6X