SilverFox 9X

神龟Turmi

yzwnoob！

下载：
https://wwtu.lanzouv.com/TS-250104-01

VT：
https://www.virustotal.com/gui/f ... f39cfde579a65000df5
https://www.virustotal.com/gui/f ... 794a50662d0619a7e4c
https://www.virustotal.com/gui/f ... c9c126a31ea923b79bb
https://www.virustotal.com/gui/f ... 8435e5f06e5bb4a47fc
https://www.virustotal.com/gui/f ... 4426ba0ffb9780f10d1
https://www.virustotal.com/gui/f ... b8383700c6638a348ea
https://www.virustotal.com/gui/f ... 69723cc7e08bd8ab7bf
https://www.virustotal.com/gui/f ... e7bee1cbbcfe0677bba
https://www.virustotal.com/gui/f ... 5a002fa1bba20c10f72
处扫3/4：火绒 腾讯 瑞星 NANO（部分）

MB：
https://bazaar.abuse.ch/sample/6 ... 39cfde579a65000df5/
https://bazaar.abuse.ch/sample/9 ... 794a50662d0619a7e4c
https://bazaar.abuse.ch/sample/f ... c9c126a31ea923b79bb
https://bazaar.abuse.ch/sample/b ... 8435e5f06e5bb4a47fc
https://bazaar.abuse.ch/sample/c ... 4426ba0ffb9780f10d1
https://bazaar.abuse.ch/sample/b ... b8383700c6638a348ea
https://bazaar.abuse.ch/sample/7 ... 69723cc7e08bd8ab7bf
https://bazaar.abuse.ch/sample/a ... e7bee1cbbcfe0677bba
https://bazaar.abuse.ch/sample/2 ... 5a002fa1bba20c10f72

FD丶纸鸢

卡巴miss all

inhh1

FD丶纸鸢 发表于 2025-1-4 11:35
卡巴miss all

卡巴双击没有PDM？

syswow64

Symantec扫描miss all

随便双击了一个，SEP直接被退出，进程都死了



卡巴还是给力的

TT助手




其他随便点了一个msi，卡巴能检测到，但是无法清除，高级清除也清不掉，一重启又回来了

最后用安天的ARK工具暴力删除文件解决了

PhozeAMTB

WD Kill all

多变的风向

FSP 0

UNknownOoo

X-Sec
扫描

1. Targets:
   
2. ---------------------
   
3. C:\Users\UnknownOoo\Downloads\TS-250104-01-SilverFox9X
   
4. ---------------------
   
5. 2025/01/04 11:46:43 Threat Detected: C:\Users\UnknownOoo\Downloads\TS-250104-01-SilverFox9X\installer64v1.2.5.msi -- [rame-classic] Trojan.Agent!1.1075D
   
6. 2025/01/04 11:46:43 Threat Detected: C:\Users\UnknownOoo\Downloads\TS-250104-01-SilverFox9X\installer64v0.2.8.msi -- [rame-classic] Trojan.Agent!1.1075D
   
7. 2025/01/04 11:46:44 Threat Detected: C:\Users\UnknownOoo\Downloads\TS-250104-01-SilverFox9X\installer64v3.2.6.msi -- [rame-classic] Trojan.Agent!1.1075D
   
8. 2025/01/04 11:46:44 Threat Detected: C:\Users\UnknownOoo\Downloads\TS-250104-01-SilverFox9X\installer64v5.3.4.msi -- [rame-classic] Trojan.Agent!1.1075D
   
9. 2025/01/04 11:46:45 Threat Detected: C:\Users\UnknownOoo\Downloads\TS-250104-01-SilverFox9X\installer64v7.4.8.msi -- [rame-classic] Trojan.Agent!1.1075D
   
10. 2025/01/04 11:46:45 Threat Detected: C:\Users\UnknownOoo\Downloads\TS-250104-01-SilverFox9X\installer64v8.2.6.msi -- [rame-classic] Trojan.Agent!1.1075D
    
11. 2025/01/04 11:46:46 Threat Detected: C:\Users\UnknownOoo\Downloads\TS-250104-01-SilverFox9X\installer64v9.5.7.msi -- [rame-classic] Trojan.Agent!1.1075D
    
12. 2025/01/04 11:46:46 Threat Detected: C:\Users\UnknownOoo\Downloads\TS-250104-01-SilverFox9X\installer64v9.2.4.msi -- [rame-classic] Trojan.Agent!1.1075D
    
13. 2025/01/04 11:46:47 Threat Detected: C:\Users\UnknownOoo\Downloads\TS-250104-01-SilverFox9X\T1助手1.0.2.msi -- [rame-classic] Trojan.Agent!1.1075D
    

复制代码

inhh1

BD企业版老样子，继续阻止驱动+后续
卡巴PDM

123456aaaafsdeg

咖啡0

FD丶纸鸢

inhh1 发表于 2025-1-4 11:42
卡巴双击没有PDM？

实体机不敢双击（）