Exploit/VulnDriver

显示全部楼层 · 发表于 2025-9-15 13:38:23

biue 发表于 2025-9-15 00:21
腾讯电脑管家不报

ioa都报了，难道和管家不是一个库？

显示全部楼层 · 发表于 2025-9-15 15:42:09

Dear Wwwab,

Thank you for your submission.
The detection for this threat will be included in the next update of detection engine 31862

NSecKrnl.sys - Win64/NSecsoft.A potentially unsafe application
NSecVulnDriver.exe - Win64/KillProc.AD trojan

Regards,

ESET Malware Response Team

显示全部楼层 · 发表于 2025-9-15 18:12:00

wwwab 发表于 2025-9-15 15:42

已经过去一天了，却没有后续了。

Hello Richard,

Thank you for the sample.
I have forwarded it to our Antimalware laboratory for analyze.
Once we have an update from them I will contact you back.

Have a great day ahead!

Best regards,
Laura Suverjanu
Business Technical Support Specialist

显示全部楼层 · 发表于 2025-9-15 18:28:15

ESSP KILL

显示全部楼层 · 发表于 2025-9-17 07:00:31

本帖最后由 Rukia 于 2025-9-17 07:27 编辑

Hello Richard,

Thank you for your patience with this case.

We have an update from our Antimalware Team and the attached driver is vulnerable and will be properly detected by the Anti-Tampering module in the next couple of updates.

Do not hesitate to contact us for any further assistance.

Have a great day ahead!

Best regards,
Alberto STADLER
Business Technical Support Engineer

BEST

显示全部楼层 · 发表于 2025-9-24 14:02:35

这种提前是不是需要先把驱动注册进去才行

[病毒样本] Exploit/VulnDriver

本帖子中包含更多资源