Stealer 14x

xiaozhu009

https://qfile.qq.com/q/Jj3spkzze4
https://pan.huang1111.cn/s/4RmRlig

吃瓜群众第123位

AhnLab V3 Lite  机器学习kill8x


其余文件触发云分析,分析后再kill2x





1x虽然检出但无法清除,已上报AhnLab

fdsax

best扫描4x，双击5x

Myrenaser

好久不见，甚是想念
EES解压剩余 x1： core-silent.exe，手动上传显示未发现威胁——core-silent.exe - ESET LiveGuard - 高级行为报告
包括VT上面一片绿色，生机盎然：VirusTotal - File - 598306C75D0A54FCB18965C92F9C9C4348C51353B99B2A6EC6A6D5D638E4A1BA
双击后被深度行为检测清除：
C:\Users\Administrator\AppData\Local\Temp\Setup\cache\1783436438889\component_1.exe.tmp：A variant of Win64/ClipBanker_AGen.U trojan
C:\Users\Administrator\Desktop\core-silent.exe：Win64/ClipBanker_AGen.U trojan
C:\Users\Administrator\AppData\Local\Temp\Setup\cache\1783436438889\component_2.exe.tmp：A variant of WinGo/Kryptik.UP trojan

以下是解压清除 x13：
C:\Users\Administrator\AppData\Local\Temp\7zE8F9AECD4\07fad0b7.exe：A variant of WinGo/Kryptik.UP trojan
C:\Users\Administrator\AppData\Local\Temp\7zE8F9AECD4\asr.exe：Win64/TrojanDownloader.Rugmi.KP trojan
C:\Users\Administrator\AppData\Local\Temp\7zE8F9AECD4\BypassCs.exe：Python/Spy.Agent.DTV trojan
C:\Users\Administrator\Downloads\07fad0b7.exe：A variant of WinGo/Kryptik.UP trojan
C:\Users\Administrator\Downloads\asr.exe：Win64/TrojanDownloader.Rugmi.KP trojan
C:\Users\Administrator\Downloads\BypassCs.exe：Python/Spy.Agent.DTV trojan
C:\Users\Administrator\Downloads\Unyx.exe：A variant of WinGo/Kryptik.UP trojan
C:\Users\Administrator\Downloads\Exodus Larp V2.exe：A variant of Generik.EJQZGWN trojan
C:\Users\Administrator\Downloads\NMSSaveEditor.exe：A variant of WinGo/Kryptik.UP trojan
C:\Users\Administrator\Downloads\new_hotmail_pass_changer.exe：A variant of Win64/TrojanDownloader.Agent.DHG trojan
C:\Users\Administrator\Downloads\photo-67412326770404.lnk.bin：LNK/TrojanDownloader.Agent.CWF trojan
C:\Users\Administrator\Downloads\VapeV4.exe：A variant of Generik.JBMOGMK trojan
C:\Users\Administrator\Downloads\Setup.exe：A variant of WinGo/Kryptik.UP trojan
C:\Users\Administrator\Downloads\mpclient.dll：A variant of WinGo/Kryptik.UP trojan
C:\Users\Administrator\Downloads\Void Launcher.exe：Suspicious Object
手动ELG：Generik.EZAVMXI trojanVoid Launcher.exe - ESET LiveGuard - 高级行为报告
C:\Users\Administrator\Downloads\USERENV.dll：A variant of Win64/Agent.JPY trojan

xjwtzq

奇安信kill 8 ，拦截1

夜光星

卡巴解压后还剩4个

细路(L)

好奇怪，只是扫描，又弹出个下载智能分析。。。反正最后剩3

心醉咖啡

360

ahhh

eis  12x


腾讯管家  10x

班德就是我

avast 扫描10个 双击idp杀了一个