virussign.com_20251126_LimitedFree

显示全部楼层 · 发表于 3 小时前

本帖最后由 Curve25519 于 2025-11-28 15:46 编辑

ESET Smart Security Premium 解压 kill 12x（virussign.com_454c9a7c3d21a6857f88c86febbd2520.vir 和 virussign.com_ae269d192705b3b5dce8de4fbd1d6fd0.vir 报潜在的不安全应用程序的变种），剩6x，扫描 kill virussign.com_bdf7121ae8f4629dd7bb23e7c532a450.vir

2025/11/28 15:42:22;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_7a45e5faffa8b4c002fc3e5c94194750.vir;Win32/Virut.NBP 病毒;已清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;4757B7FCD5DFD9D03DE9D54E201B58FBFD80C631;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;
2025/11/28 15:42:24;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_92e5e19fa21db66600e7980e70f5a970.vir;Win32/Spy.CardSpy.NAF 特洛伊木马的变量;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;15CA45F9E4D42B8EB40171FDEE26F424C07C48BE;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;
2025/11/28 15:42:24;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_050a154468306f4154abe01eb5884a90.vir;Win32/VBClone.E 特洛伊木马的变量;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;17D4BC36ED93370ACB6A4F0A3EF0BADCD366ED74;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;
2025/11/28 15:42:24;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_60c732503f53ea6a69e2d61081935b00.vir;MSIL/TrojanDownloader.Agent_AGen.BYT 特洛伊木马的变量;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;AC7F048B32675A7DDE70BA5E588C95F0AA717DB7;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;
2025/11/28 15:42:24;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_a74719ea17c558b73b151da34f30f720.vir;Win32/Spy.Shiz.NBX 特洛伊木马;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;12E392A452CE54309F7502ADFE484716F34E38C4;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;
2025/11/28 15:42:24;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_ec5f4968fd882e0ca21673cb495ed680.vir;Win32/VB.TPB 特洛伊木马的变量;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;29010A649240511B279F16B820F312A0D0E48D3D;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;
2025/11/28 15:42:25;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_d6dcb333acb737167a088b74f48d90b0.vir;Win32/VBClone.E 特洛伊木马的变量;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;850EF176C6EA406AC0F8DDB125075B6F3B80D6FA;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;
2025/11/28 15:42:26;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_ff3f64093e073b7cce59f6d0ed0f85b0.vir;Win32/VBClone.E 特洛伊木马的变量;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;6F11EAA4C555945E6801CF311AE8D86543C4C4D2;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;
2025/11/28 15:42:26;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_d9d83acef961241971bdd642d056aab0.vir;Win64/Agent_AGen.IYN 特洛伊木马的变量;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;5164C8DA15ADAE44F5E32DB337D4116E9B5651B5;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;
2025/11/28 15:42:28;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_9ae27aad32327a419a9062b31fe74a60.vir;Win64/GenKryptik.HNDD 特洛伊木马的变量;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;4F7448C6A43A20E07FF63E5070045DBE23D8CF79;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;
2025/11/28 15:42:29;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_454c9a7c3d21a6857f88c86febbd2520.vir;MSIL/GameHack.CSN 潜在的不安全应用程序的变量;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;38C74B4BC7AB3C4693819A37A73250A72371867B;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;
2025/11/28 15:42:32;文件系统实时防护;文件;\Device\TweakCubeRamDisk0\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_ae269d192705b3b5dce8de4fbd1d6fd0.vir;Win32/GameHack_AGen.ADU 潜在的不安全应用程序的变量;已通过删除清除;DESKTOP-K07940I\Admin;在通过应用程序创建的新文件上发生了事件: C:\Program Files\WinRAR\WinRAR.exe (D150653D2058987677CD7ED3FF5344D9BA9D2739).;67D5E063ACE51F60D3E267921E67AC934EA21F36;2025/11/28 15:42:22;S-1-5-21-1216372390-1976424117-2270819850-1001;

扫描日志
检测引擎的版本: 32266 (20251128)
日期: 2025/11/28 时间: 15:45:36
已扫描的磁盘、文件夹和文件: W:\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_1e96e145ba9817692fb0f125bd715e50.vir;W:\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_07f9b3cde468564b86e7df9ef481a780.vir;W:\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_7a45e5faffa8b4c002fc3e5c94194750.vir;W:\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_7fa82c8bfedc061655aed89ec7b881b0.vir;W:\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_2141bc8be6fab96cf388a7b1f97e01a0.vir;W:\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_bdf7121ae8f4629dd7bb23e7c532a450.vir
用户: DESKTOP-K07940I\Admin
W:\Sandbox\Admin\DefaultBox\drive\W\virussign.com_20251126_LimitedFree\virussign.com_20251126_LimitedFree\virussign.com_bdf7121ae8f4629dd7bb23e7c532a450.vir - Suspicious Object - 已保留
已扫描的对象数: 6756
检测数: 1
已清除的对象数: 0
完成时间: 15:45:36 总扫描时间: 0 秒 (00:00:00)

[病毒样本] virussign.com_20251126_LimitedFree