Добре дошли!

Добре дошли в нашите форуми, пълни с полезна информация. Имате проблем с компютъра или телефона си? Публикувайте нова тема и ще намерите решение на всичките си проблеми. Общувайте свободно и открийте безброй нови приятели.

Моля, регистрирайте се за да публикувате тема и да получите пълен достъп до всички функции.

Подпомагане на АВ програмите с дефиниции, откриване на нови заплахи - част 18

Последователи

8 юни 20188 г.

преди 1 час, nikssi написа:


https://www.upload.ee/files/8535903/ard.rar.html[


https://www.upload.ee/files/8535985/4194yd09wue2sdd.zipx.html

AVG IS отстреля и двата файла...Първият при стартирането му,вторият беше неутрализиран при скан на поискване...Благодаря за щамовете на nikssi !!!

Отговори 8,9k
Прегледи 625,1k
Създадено 11 г.11 г.
Последен отговор 11 Сеп11 Сеп

Потребители с най-много отговори

attj 2440 поста
Лудият Учен 2407 поста
nikssi 889 поста
ТHEBOSS 567 поста

Най-популярни публикации

B-boy/StyLe/

4 януари 20206 г.

Каква ползва от него тогава, като мълчи като риба? Само за красота и да товари системата ли?
tigertron

9 юли 201610 г.

При мен пък на тестовата машина с Windows XP SP3 и MS NetFreamwork 4 не иска да се стартира. Явно и вирусите спират поддръжката на XP
Proshark

26 декември 20169 г.

Този е за пращане : http://dox.bg/files/dw?a=9f58b3c1f9 https://www.virustotal.com/bg/file/2ee50fd5c9f67e8814142de2009ec4234ee19dec1d4e9189ac5f45c359ed20eb/analysis/1482744276/

Публикувани изображения

9 юни 20188 г.

https://ndox.abv.bg/download?id=a2baddf3f7

pass: **

9 юни 20188 г.

преди 1 час, Мальчик Бананан написа:

https://ndox.abv.bg/download?id=a2baddf3f7

Покажи скритото съдържание

pass: **

Остатък един файл - 0 / 58

9 юни 20188 г.

То този файл ми го направи архиватора май.

9 юни 20188 г.

Sophos Anti-Virus изрева още при разархивирането, а после при сканиране допълнително намери следните:

Full Scanning

>>> Virus 'Troj/DocDl-OER' found in file /home/svetliof/Internet/gg/Invoice-doc-06D993_19.doc
>>> Virus 'Mal/Generic-S' found in file /home/svetliof/Internet/gg/fntwr.exe
>>> Virus 'Troj/DocDl-NZD' found in file /home/svetliof/Internet/gg/6GC9pulsebg9176281948679.doc
>>> Virus 'Mal/Generic-S' found in file /home/svetliof/Internet/gg/scancop.exe
>>> Virus 'Troj/HtaDl-M' found in file /home/svetliof/Internet/gg/Order.hta

12 files scanned in 8 seconds.
5 viruses were discovered.
No PUAs were discovered.
5 files out of 12 were infected.

9 юни 20188 г.

преди 2 часа, Мальчик Бананан написа:

https://ndox.abv.bg/download?id=a2baddf3f7

Затвори скритото съдържание

pass: **

AVG IS засече 11/12...Първите 4 при разархивиране,после още 6 при скан на поискване и накрая един при стартиране...Мерси за щамовете на Мальчик Бананан !!!

9 юни 20188 г.

преди 2 часа, Мальчик Бананан написа:

https://ndox.abv.bg/download?id=a2baddf3f7

Покажи скритото съдържание

pass: **

DarkEdge

Потребител

Пол:Мъж
Град:127.0.0.1:65535
Интереси:Няма начин да няма начин! Професия - каруцарин. Моля, колеги!

13 юни 20188 г.

CVE-2018-8174

13 юни 20188 г.

преди 7 часа, DarkEdge написа:

CVE-2018-8174

Редактирано 13 юни 20188 г. от nikssi (преглед на промените)

DarkEdge

Потребител

Пол:Мъж
Град:127.0.0.1:65535
Интереси:Няма начин да няма начин! Професия - каруцарин. Моля, колеги!

13 юни 20188 г.

@nikssi, нарочно не дадох директен линк за сваляне, за да се види/прочете за какво иде реч.

13 юни 20188 г.

Sophos Anti-Virus не издаде ни вопъл, ни стон, при зареждане на URL, но при сканиране на файла се коригира:
>>> Virus 'Mal/ExpJS-CM' found in file /home/beta/Internet/index.html

1 file scanned in 5 seconds.
1 virus was discovered.
No PUAs were discovered.
1 file out of 1 was infected.

13 юни 20188 г.

преди 1 час, DarkEdge написа:

@nikssi, нарочно не дадох директен линк за сваляне, за да се види/прочете за какво иде реч.

Добре тогава трия прикачения файл.

17 юни 20188 г.

UP- UP

https://www.upload.ee/files/8570083/rttig.rar.html

17 юни 20188 г.

преди 39 минути, nikssi написа:

UP- UP

Затвори скритото съдържание

https://www.upload.ee/files/8570083/rttig.rar.html

AVG IS с детекция при разархивиране на файла...Мерси за проверката на nikssi !!!

17 юни 20188 г.

Sophos Anti-Virus не откри нищо, нито при разархивиране, нито при сканиране, хем преди всяка проверка го ъпдейтвам за по-сигурно.

19 юни 20188 г.

30 файла: https://transfer.sh/iiEzd/30.7z

Есет:

19 юни 20188 г.

Касперски остави 6 броя, a затри 42. Пускам ги принудително и КГБ-то веднага се обажда за подозрителна активност. Сега прави advanced desinfection и рестарт. После ще покажа скрийншот.

19 юни 20188 г.

Sophos Anti-Virus изрева още при разархивирането с 3 последователни алерта за блокиране.

Full Scanning

>>> Virus 'Troj/Equation-G' found in file /home/beta/Internet/30/26.exe/System/Doublepulsar-1.3.1.exe
>>> Virus 'Troj/Eternal-A' found in file /home/beta/Internet/30/26.exe/System/Eternalblue-2.2.0.exe
>>> Virus 'Troj/Equatio-B' found in file /home/beta/Internet/30/26.exe/System/Eternalromance-1.4.0.exe
>>> PUA 'Generic PUA JG' (of type Other) found in file /home/beta/Internet/30/26.exe/System/taskhost.exe
>>> Virus 'Troj/Equation-Y' found in file /home/beta/Internet/30/26.exe/System/cnli-1.dll
>>> Virus 'Troj/Eqdrug-AC' found in file /home/beta/Internet/30/26.exe/System/coli-0.dll
>>> Virus 'Troj/Equatio-BN' found in file /home/beta/Internet/30/26.exe/System/crli-0.dll
>>> Virus 'Troj/Equatio-BN' found in file /home/beta/Internet/30/26.exe/System/dmgd-4.dll
>>> Virus 'Mal/Generic-S' found in file /home/beta/Internet/30/26.exe/System/Doublepulsar.dll
>>> Virus 'Mal/VMProtBad-A' found in file /home/beta/Internet/30/26.exe/System/Eternalblue.dll
>>> Virus 'Troj/Equatio-BN' found in file /home/beta/Internet/30/26.exe/System/exma-1.dll
>>> PUA 'Equation Group' (of type Hacktool) found in file /home/beta/Internet/30/26.exe/System/libeay32.dll
>>> PUA 'Equation Group' (of type Hacktool) found in file /home/beta/Internet/30/26.exe/System/libxml2.dll
>>> PUA 'Generic PUA AJ' (of type Other) found in file /home/beta/Internet/30/26.exe/System/NansHou.dll
>>> PUA 'Equation Group' (of type Hacktool) found in file /home/beta/Internet/30/26.exe/System/posh-0.dll
>>> PUA 'Equation Group' (of type Hacktool) found in file /home/beta/Internet/30/26.exe/System/ssleay32.dll
>>> Virus 'Troj/Equatio-Q' found in file /home/beta/Internet/30/26.exe/System/tibe-2.dll
>>> Virus 'Mal/Generic-S' found in file /home/beta/Internet/30/26.exe/System/tich-1.dll
>>> PUA 'Equation Group' (of type Hacktool) found in file /home/beta/Internet/30/26.exe/System/trch-1.dll
>>> Virus 'Troj/Equatio-BN' found in file /home/beta/Internet/30/26.exe/System/trfo-2.dll
>>> PUA 'Equation Group' (of type Hacktool) found in file /home/beta/Internet/30/26.exe/System/tucl-1.dll
>>> Virus 'Mal/Generic-S' found in file /home/beta/Internet/30/26.exe/System/tufo-2.dll
>>> PUA 'Equation Group' (of type Hacktool) found in file /home/beta/Internet/30/26.exe/System/ucl.dll
>>> Virus 'Mal/Generic-L' found in file /home/beta/Internet/30/26.exe/System/xdvl-0.dll
>>> Virus 'Mal/Generic-L' found in file /home/beta/Internet/30/26.exe/System/zlib1.dll
>>> Virus 'Mal/Inject-CEE' found in file /home/beta/Internet/30/05.exe
>>> Virus 'Mal/GandCrab-B' found in file /home/beta/Internet/30/16.exe
>>> Virus 'Mal/EncPk-ADN' found in file /home/beta/Internet/30/17.exe

30 files scanned in 17 seconds.
19 viruses were discovered.
9 PUAs were discovered.
4 files out of 30 were infected.

Как е зададен алгоритъма да смята, като горе вирусите са 19 на брой прехванати? А най-долу заключава, че само 4 файла са инфектирани. Важното е за спорта, че хвана нещо

19 юни 20188 г.

С малко закъснение: шестте оставени файла, бяха стартирани ръчно и последва рестарт за дезинфекция, за всеки един от тях. В крайна сметка всички файлове бяха премахнати. Прилагам log за любопитните:

Цитат

19.06.2018 18.54.17   Detected object (file) deleted   C:\Users\Eclipse\AppData\Local\Microsoft\Windows\ssxOdwLUP.exe   File: C:\Users\Eclipse\AppData\Local\Microsoft\Windows\ssxOdwLUP.exe   Object name: UDS:Trojan-Banker.Win32.Emotet.sb   Object type: Trojan program   Time: 19-Jun-18 18:54
19.06.2018 18.53.13   Detected object (process memory) deleted   c:\users\eclipse\desktop\new folder\19.exe   Process memory: c:\users\eclipse\desktop\new folder\19.exe   Object name: PDM:Trojan.Win32.Generic   Object type: Trojan program   Time: 19-Jun-18 18:53
19.06.2018 18.46.24   Detected object (file) deleted   C:\Users\Eclipse\AppData\Local\Microsoft\Windows\gmTceQ9nOza1wiKp.exe   File: C:\Users\Eclipse\AppData\Local\Microsoft\Windows\gmTceQ9nOza1wiKp.exe   Object name: UDS:Trojan-Banker.Win32.Emotet.sb   Object type: Trojan program   Time: 19-Jun-18 18:46
19.06.2018 18.35.35   Detected object (process memory) deleted   c:\users\eclipse\desktop\new folder\14.exe   Process memory: c:\users\eclipse\desktop\new folder\14.exe   Object name: PDM:Trojan.Win32.Badur.a   Object type: Trojan program   Time: 19-Jun-18 18:35
19.06.2018 18.35.35   Detected object (process memory) deleted   c:\users\eclipse\appdata\local\microsoft\windows\mspthrdnevada.exe   Process memory: c:\users\eclipse\appdata\local\microsoft\windows\mspthrdnevada.exe   Time: 19-Jun-18 18:35
19.06.2018 18.32.45   Detected object (process memory) deleted   c:\users\eclipse\desktop\new folder\03.exe   Process memory: c:\users\eclipse\desktop\new folder\03.exe   Object name: PDM:Trojan.Win32.Badur.a   Object type: Trojan program   Time: 19-Jun-18 18:32
19.06.2018 18.26.32   Detected object (process memory) deleted   c:\users\eclipse\desktop\new folder\12.exe   Process memory: c:\users\eclipse\desktop\new folder\12.exe   Object name: PDM:Trojan.Win32.Badur.a   Object type: Trojan program   Time: 19-Jun-18 18:26
19.06.2018 18.23.48   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\27.exe   File: C:\Users\Eclipse\Desktop\New folder\27.exe   Object name: HEUR:Trojan-PSW.Win32.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.20   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\28.exe   File: C:\Users\Eclipse\Desktop\New folder\28.exe   Object name: HEUR:Trojan.Win32.Generic   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/xdvl-0.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/xdvl-0.dll   Object name: Trojan.Win32.ShadowBrokers.ak   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/zlib1.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/zlib1.dll   Object name: Trojan.Win32.EquationDrug.dp   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/trfo-2.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/trfo-2.dll   Object name: Trojan.Win32.ShadowBrokers.ap   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/tucl-1.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/tucl-1.dll   Object name: Trojan.Win32.ShadowBrokers.ai   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/ucl.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/ucl.dll   Object name: Trojan.Win32.Shadowbrokers.co   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/tufo-2.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/tufo-2.dll   Object name: HEUR:Trojan-Downloader.Win32.Generic   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/tich-1.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/tich-1.dll   Object name: Trojan.Win32.Webdown.d   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/trch-1.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/trch-1.dll   Object name: Trojan.Win32.ShadowBrokers.ag   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/tibe-2.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/tibe-2.dll   Object name: Trojan.Win32.ShadowBrokers.ad   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/posh-0.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/posh-0.dll   Object name: Trojan.Win32.ShadowBrokers.ab   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/ssleay32.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/ssleay32.dll   Object name: Trojan.Win32.ShadowBrokers.cz   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/dmgd-4.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/dmgd-4.dll   Object name: Trojan.Win32.ShadowBrokers.ay   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/Eternalblue.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/Eternalblue.dll   Object name: HEUR:Trojan-Downloader.Win32.Generic   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/exma-1.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/exma-1.dll   Object name: Trojan.Win32.ShadowBrokers.x   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/coli-0.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/coli-0.dll   Object name: Trojan.Win32.ShadowBrokers.u   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/crli-0.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/crli-0.dll   Object name: Trojan.Win32.ShadowBrokers.at   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/cnli-1.dll   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/cnli-1.dll   Object name: Trojan.Win32.ShadowBrokers.ao   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/Eternalromance-1.4.0.exe   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/Eternalromance-1.4.0.exe   Object name: Trojan.Win32.ShadowBrokers.f   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/svchost.exe   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/svchost.exe   Object name: Trojan.Win64.Reincarnation.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/taskhost.exe   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/taskhost.exe   Object name: not-a-virus:NetTool.Win32.Portscan.lt   Object type: Legitimate software that can be used by criminals to damage your computer or personal data   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/Doublepulsar-1.3.1.xml   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/Doublepulsar-1.3.1.xml   Object name: HEUR:Trojan.Script.EquationDrug.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/Doublepulsar-1.3.1.exe   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/Doublepulsar-1.3.1.exe   Object name: Backdoor.Win32.ShadowBrokers.f   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe//System/Eternalblue-2.2.0.exe   File: C:\Users\Eclipse\Desktop\New folder\26.exe//System/Eternalblue-2.2.0.exe   Object name: Exploit.Win32.ShadowBrokers.ae   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.19   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\26.exe   File: C:\Users\Eclipse\Desktop\New folder\26.exe   Time: 19-Jun-18 18:23
19.06.2018 18.23.07   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\25.exe   File: C:\Users\Eclipse\Desktop\New folder\25.exe   Object name: HEUR:Backdoor.Win32.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.06   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\24.exe   File: C:\Users\Eclipse\Desktop\New folder\24.exe   Object name: HEUR:Trojan.Win32.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.05   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\22.exe   File: C:\Users\Eclipse\Desktop\New folder\22.exe   Object name: HEUR:Backdoor.Win32.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.04   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\21.exe   File: C:\Users\Eclipse\Desktop\New folder\21.exe   Object name: HEUR:Backdoor.Win32.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.04   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\20.exe   File: C:\Users\Eclipse\Desktop\New folder\20.exe   Object name: HEUR:Backdoor.Win32.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.03   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\18.exe   File: C:\Users\Eclipse\Desktop\New folder\18.exe   Object name: HEUR:Backdoor.Win32.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.02   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\15.exe   File: C:\Users\Eclipse\Desktop\New folder\15.exe   Object name: HEUR:Backdoor.Win32.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.02   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\11.exe   File: C:\Users\Eclipse\Desktop\New folder\11.exe   Object name: HEUR:Trojan-PSW.Win32.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.23.01   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\13.exe   File: C:\Users\Eclipse\Desktop\New folder\13.exe   Object name: HEUR:Trojan.MSIL.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:23
19.06.2018 18.22.56   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\10.exe   File: C:\Users\Eclipse\Desktop\New folder\10.exe   Object name: HEUR:Backdoor.Win32.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:22
19.06.2018 18.22.54   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\09.exe   File: C:\Users\Eclipse\Desktop\New folder\09.exe   Object name: UDS:Trojan-Spy.Win32.AutoIt.cv   Object type: Trojan program   Time: 19-Jun-18 18:22
19.06.2018 18.22.51   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\08.exe   File: C:\Users\Eclipse\Desktop\New folder\08.exe   Object name: HEUR:Trojan.Win32.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:22
19.06.2018 18.22.48   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\07.exe   File: C:\Users\Eclipse\Desktop\New folder\07.exe   Object name: HEUR:Trojan.Win32.Generic   Object type: Trojan program   Time: 19-Jun-18 18:22
19.06.2018 18.22.46   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\06.exe   File: C:\Users\Eclipse\Desktop\New folder\06.exe   Object name: HEUR:Trojan.MSIL.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:22
19.06.2018 18.22.44   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\05.exe   File: C:\Users\Eclipse\Desktop\New folder\05.exe   Object name: HEUR:Trojan.Win32.Generic   Object type: Trojan program   Time: 19-Jun-18 18:22
19.06.2018 18.22.41   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\04.exe   File: C:\Users\Eclipse\Desktop\New folder\04.exe   Object name: HEUR:Backdoor.MSIL.Agent.gen   Object type: Trojan program   Time: 19-Jun-18 18:22
19.06.2018 18.22.38   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\16.exe   File: C:\Users\Eclipse\Desktop\New folder\16.exe   Object name: UDS:Trojan-Ransom.Win32.GandCrypt.a   Object type: Trojan program   Time: 19-Jun-18 18:22
19.06.2018 18.22.38   Detected object (file) deleted   C:\Users\Eclipse\Desktop\New folder\02.exe   File: C:\Users\Eclipse\Desktop\New folder\02.exe   Object name: Backdoor.Win32.Androm.qaqb   Object type: Trojan program   Time: 19-Jun-18 18:22

19 юни 20188 г.

преди 4 часа, NIKISHARK написа:

30 файла: https://transfer.sh/iiEzd/30.7z

Есет:

AVG IS терминира и бастиса всичките 30 заплахи...29 при разархивиране и още един файл при стартирането му(номер 24)...Папката остана празна...Мерси за щамовете на NIKISHARK !!!

20 юни 20188 г.

27 файла: https://transfer.sh/jYNwy/Vir.7z

p.s. Не мога да разбера логиката на тази "Репутация на файл" при Есет- хем с лоша репутация,хем не го блокира....

https://www.virustotal.com/bg/file/42ad458e12b1f108d9a8b5c603413af5465738f88c63b407062d938646e2aead/analysis/

20 юни 20188 г.

преди 1 час, NIKISHARK написа:

27 файла: https://transfer.sh/jYNwy/Vir.7z

p.s. Не мога да разбера логиката на тази "Репутация на файл" при Есет- хем с лоша репутация,хем не го блокира....

https://www.virustotal.com/bg/file/42ad458e12b1f108d9a8b5c603413af5465738f88c63b407062d938646e2aead/analysis/

Касперски остави 05.exe След старт излезе *.inf със следния контент:

Цитат

[Version]
signature = "$CHICAGO$"
AdvancedINF = 2.5, "You need a new version of advpack.dll"

[DefaultInstall]
RunPreSetupCommands = cfjstfcqqlzkkoznzkyeirvtpnhvilgxpwtgjmgm:2

[cfjstfcqqlzkkoznzkyeirvtpnhvilgxpwtgjmgm]
C:\Users\****\Desktop\Vir\05.exe

Намирисва на бацил.

20 юни 20188 г.

преди 2 часа, NIKISHARK написа:

27 файла: https://transfer.sh/jYNwy/Vir.7z

p.s. Не мога да разбера логиката на тази "Репутация на файл" при Есет- хем с лоша репутация,хем не го блокира....

https://www.virustotal.com/bg/file/42ad458e12b1f108d9a8b5c603413af5465738f88c63b407062d938646e2aead/analysis/

AVG IS елиминира всички зарази,че даже засече един вирус в повече...23 от гадинките бяха заловени при разархивиране,останалите 4 бяха изтрити при стартиране,при което и DEEP SCREEN си свърши работата...Папката остана празна...Благодаря на за щамовете SHARK-и !!!

20 юни 20188 г.

преди 56 минути, Лудият Учен написа:

AVG IS елиминира всички зарази,че даже засече един вирус в повече...

Ти хвалиш ли се? В предния архив на Акулката, от 30 възможни Касперски изби над 40 бройки. А от сегашния архив са 32. Общо за вчера и днес(двата архива) са 85 броя. Сиреч- днес са 32, а от предния път 53. Знам, че не е нещо кой-знае какво, но все пак....

20 юни 20188 г.

Sophos Anti-Virus издаде 3-4 предупреждение за заплахи при разархивирана , а после след сканиране откри само 13 гадини:
Full Scanning

>>> Virus 'Mal/EncPk-ANR' found in file /home/beta/Internet/Vir/15.exe
>>> Virus 'Mal/EncPk-ANR' found in file /home/beta/Internet/Vir/22.exe
>>> Virus 'Mal/EncPk-ANR' found in file /home/beta/Internet/Vir/18.exe
>>> Virus 'Mal/EncPk-ANR' found in file /home/beta/Internet/Vir/02.exe
>>> Virus 'Mal/EncPk-ANR' found in file /home/beta/Internet/Vir/04.exe
>>> Virus 'Mal/FareitVB-N' found in file /home/beta/Internet/Vir/20.exe
>>> Virus 'Mal/Fareit-Q' found in file /home/beta/Internet/Vir/08.exe
>>> Virus 'Troj/Fareit-CHG' found in file /home/beta/Internet/Vir/26.exe
>>> Virus 'Mal/Fareit-Q' found in file /home/beta/Internet/Vir/19.exe
>>> Virus 'Mal/Fareit-Q' found in file /home/beta/Internet/Vir/16.exe
>>> Virus 'Mal/FareitVB-N' found in file /home/beta/Internet/Vir/23.exe
>>> Virus 'Mal/FareitVB-N' found in file /home/beta/Internet/Vir/21.exe
>>> Virus 'Mal/Fareit-Q' found in file /home/beta/Internet/Vir/06.exe

27 files scanned in 12 seconds.
13 viruses were discovered.
No PUAs were discovered.
13 files out of 27 were infected.