4x

zhuzhu009

除了4.msi之外都是首次上传vt（应该没重复）
话说怎么把wenshushu的网盘删掉了
https://f.wss.cc/f/f38e36fwdd6

https://pan.huang1111.cn/s/E7no7Hb

ongarabazanade

毒霸全漏

Raven95676

eset kill 3x

ongarabazanade 发表于 2024-9-15 09:19

已经反馈

这世界如露水般

卡巴kill3x
就留了个2.exe

ongarabazanade

keen-qv 发表于 2024-9-15 09:27
已经反馈

善良的人随时随地都能找到做好事的机会

Fadouse

Kaspersky + DI Kill All
Deep Instinct 静态Kill 1x

双击 3.exe 安装后 Kaspersky 删除释放物+回滚 ->

1. Event: Malicious object detected
   
2. User: LAPTOP\fadou
   
3. User type: Initiator
   
4. Application name: Enancemen.exe
   
5. Application path: C:\Sandbox\fadou\VirusTest\drive\C\Goole Chrome121.3.5.6 Pry\res
   
6. Component: File Anti-Virus
   
7. Result description: Detected
   
8. Type: Trojan
   
9. Name: HEUR:Trojan.Win32.Agentb.gen
   
10. Precision: Heuristic Analysis
    
11. Threat level: High
    
12. Object type: File
    
13. Object name: jli.dll
    
14. Object path: C:\Sandbox\fadou\VirusTest\drive\C\Goole Chrome121.3.5.6 Pry\res
    
15. MD5 of an object: E78F66762A50B819A44EE792F3D3E5A4
    
16. Reason: Machine learning
    
17. Databases release date: Yesterday, 9/14/2024 10:30:00 PM

复制代码

1. Event: Malicious object detected
   
2. Application: Goole Chrome
   
3. User: LAPTOP\fadou
   
4. User type: Initiator
   
5. Component: System Watcher
   
6. Result description: Detected
   
7. Type: Trojan
   
8. Name: PDM:Trojan.Win32.Generic
   
9. Threat level: High
   
10. Object type: Process
    
11. Object path: E:\Code\Virus
    
12. Object name: 3.exe
    
13. Reason: Behavior analysis
    
14. Databases release date: Yesterday, 9/14/2024 10:30:00 PM
    
15. MD5: 1EC8EF971AA211DAC1CF3AAD9F80D85E

复制代码

双击 1.msi 安装后 DI+Kapsersky Kill 释放物->

1. Event: Object deleted
   
2. User: NT AUTHORITY\SYSTEM
   
3. User type: System user
   
4. Application name: DeepStaticService.exe
   
5. Application path: C:\Program Files\DeepInstinct
   
6. Component: File Anti-Virus
   
7. Result description: Deleted
   
8. Type: Adware
   
9. Name: not-a-virus:HEUR:AdWare.Win32.PolarWind.gen
   
10. Precision: Partially
    
11. Threat level: Medium
    
12. Object type: File
    
13. Object name: HaloDesktop.exe
    
14. Object path: C:\Sandbox\fadou\VirusTest\user\current\AppData\Local
    
15. MD5 of an object: BA4F92AF87F25E50F27230F5B5AF23A4

复制代码

1. Event: Object deleted
   
2. User: NT AUTHORITY\SYSTEM
   
3. User type: System user
   
4. Application name: DeepStaticService.exe
   
5. Application path: C:\Program Files\DeepInstinct
   
6. Component: File Anti-Virus
   
7. Result description: Deleted
   
8. Type: Adware
   
9. Name: not-a-virus:HEUR:AdWare.Win32.Burden.gen
   
10. Precision: Exactly
    
11. Threat level: Medium
    
12. Object type: File
    
13. Object name: HaloHelper.exe
    
14. Object path: C:\Sandbox\fadou\VirusTest\user\current\AppData\Local\Utils
    
15. MD5 of an object: 4CE2B387C0C9362ACF87A092CDF1AD99

复制代码

1. Event: Object deleted
   
2. User: NT AUTHORITY\SYSTEM
   
3. User type: System user
   
4. Application name: DeepStaticService.exe
   
5. Application path: C:\Program Files\DeepInstinct
   
6. Component: File Anti-Virus
   
7. Result description: Deleted
   
8. Type: Adware
   
9. Name: not-a-virus:HEUR:AdWare.Win32.PolarWind.gen
   
10. Precision: Partially
    
11. Threat level: Medium
    
12. Object type: File
    
13. Object name: HaloTray.exe
    
14. Object path: C:\Sandbox\fadou\VirusTest\user\current\AppData\Local
    
15. MD5 of an object: BE482D41D38C6A6691010E58FB8E1876

复制代码

1. Event: We found an application that can be used by intruders to damage your computer or personal data.
   
2. User: NT AUTHORITY\SYSTEM
   
3. User type: System user
   
4. Application name: DeepStaticService.exe
   
5. Application path: C:\Program Files\DeepInstinct
   
6. Component: File Anti-Virus
   
7. Result description: Detected
   
8. Type: Adware
   
9. Name: not-a-virus:HEUR:AdWare.Win32.Burden.gen
   
10. Precision: Partially
    
11. Threat level: Medium
    
12. Object type: File
    
13. Object name: arctrl.dll
    
14. Object path: C:\Sandbox\fadou\VirusTest\user\current\AppData\Local\Utils
    
15. MD5 of an object: 022D8C9EDB5CA9BF91C8ED318CA07BED
    
16. Reason: Expert analysis
    
17. Databases release date: Today, 9/15/2024 8:42:00 AM

复制代码

双击 4.msi 安装时DI弹窗拦截 ->

Luna_ovo

huorong 开启高级启发选项 ，kill all



eset (ees) kill 3x



(qihu360潜在不受欢迎的软件 显眼)

biue

腾讯电脑管家 4X