白加黑

请叫我德玛西亚

360双击

c199529

腾讯电脑管家18

右键扫描不报毒

hashcake

Bandizip.exe(zx:0.96299481)(conv:0.32035562)(FML:0.02111331)(TEX:0.00684894) final:0.2939061475917697
[SCAN] PROC CLEAN pid=2640 C:\Program Files\Bandizip\Bandizip.exe score=0.2939

ark.x64.dll(zx:0.01933719)(conv:0.00178379)(FML:0.02351330)(TEX:0.00005852) final:0.003522742310936733
[SCAN] DLL CLEAN pid=2640 C:\Program Files\Bandizip\ark.x64.dll score=0.0035
[mem] dump fail pid=2612 @0x7FF889D61000+4096: no-MZ
[mem] dump fail pid=2612 @0x7FF889D62000+4096: no-MZ
[mem] dump fail pid=2612 @0x7FF889D63000+4096: no-MZ
[mem] dump fail pid=2612 @0x7FF889D64000+4096: no-MZ
[SCAN] PROC CLEAN pid=5920 C:\Users\Administrator\Desktop\甜甜视频.exe score=0.0000

QtsVFS.dll(zx:0.99438900)(conv:0.67745310)(FML:0.99899584)(TEX:0.99997067) final:0.9702869597945228
[SCAN] DLL MAL pid=5920 C:\Users\Administrator\Desktop\QtsVFS.dll score=0.9703
程序:Ti Security Agent
程序:Ti Security Agent
标题:需要注意
标题:需要注意
内容:发现潜在恶意程序:QtsVFS.dll (置信度 97.0%)
----------------------------------------
内容:发现潜在恶意程序:QtsVFS.dll (置信度 97.0%) [去重]
----------------------------------------

powershell.exe(zx:0.30203545)(conv:0.00042268)(FML:0.01901183)(TEX:0.00563588) final:0.03921267843591493
[SCAN] PROC CLEAN pid=6024 C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe score=0.0392
打包... C:\ProgramData\TiSecurityAgent\Quarantine\QtsVFS.dll.9b8b1af8005255cc.7z,C:\Users\Administrator\Desktop\QtsVFS.dll
[mem] dump fail pid=6024 @0x7FF862996000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629D1000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629D3000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629D4000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629D5000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629D6000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629D7000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629D8000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629D9000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629DA000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629DC000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629DD000+8192: no-MZ
[mem] dump fail pid=6024 @0x7FF8629DF000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629E0000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629E1000+12288: no-MZ
[mem] dump fail pid=6024 @0x7FF8629E4000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629E5000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629E6000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629E7000+12288: no-MZ
[mem] dump fail pid=6024 @0x7FF8629EA000+8192: no-MZ
[mem] dump fail pid=6024 @0x7FF8629EC000+4096: no-MZ
[隔离] 已打包加密并删除源文件: C:\Users\Administrator\Desktop\QtsVFS.dll -> C:\ProgramData\TiSecurityAgent\Quarantine\QtsVFS.dll.9b8b1af8005255cc.7z
程序:Ti Security Agent
标题:需要注意
内容:于 C:\Users\Administrator\Desktop\QtsVFS.dll 中发现威胁。文件已隔离。
----------------------------------------
[mem] dump fail pid=6024 @0x7FF8629ED000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629EE000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF862997000+4096: no-MZ
[mem] dump fail pid=6024 @0x7FF8629F0000+4096: no-MZ