缉毒卫队测试包 2017新年特别期 祝你鸡年大吉吧！

Eset小粉絲

Avira 8x
[mw_shl_code=css,true]27/1/2017, 12:18:27 PM [Real-Time Protection] Malware found
        The pattern of 'TR/Dropper.Gen [trojan]'
        detected in file 'C:\Users\Ivan\Downloads\2017.1.27\2017.1.27-01.Backdoor.Hedo.exe%'.
        Action performed: Move file to quarantine

27/1/2017, 12:18:26 PM [Real-Time Protection] Malware found
        The pattern of 'JS/Dldr.Locky.75001 [virus]'
        detected in file 'C:\Users\Ivan\Downloads\2017.1.27\2017.1.27-09.Ransom(Downloader).Locky.wsf%'.
        Action performed: Move file to quarantine

27/1/2017, 12:18:26 PM [Real-Time Protection] Malware found
        The pattern of 'TR/Crypt.ZPACK.zaxpr [trojan]'
        detected in file 'C:\Users\Ivan\Downloads\2017.1.27\2017.1.27-07.Ransom.Crysis.exe%'.
        Action performed: Move file to quarantine

27/1/2017, 12:18:26 PM [Real-Time Protection] Malware found
        The pattern of 'TR/AD.NsisInject.jzgqj [trojan]'
        detected in file 'C:\Users\Ivan\Downloads\2017.1.27\2017.1.27-06.Ransom.Troldesh.exe%'.
        Action performed: Move file to quarantine

27/1/2017, 12:18:25 PM [Real-Time Protection] Malware found
        The pattern of 'TR/Crypt.ZPACK.ghmli [trojan]'
        detected in file 'C:\Users\Ivan\Downloads\2017.1.27\2017.1.27-05.Exploit.CallerCheck.exe%'.
        Action performed: Move file to quarantine

27/1/2017, 12:18:25 PM [Real-Time Protection] Malware found
        The pattern of 'TR/Crypt.ZPACK.pcuja [trojan]'
        detected in file 'C:\Users\Ivan\Downloads\2017.1.27\2017.1.27-04.Trojan.Kovter.exe%'.
        Action performed: Move file to quarantine

27/1/2017, 12:18:25 PM [Real-Time Protection] Malware found
        The pattern of 'TR/Milicry.vbzgk [trojan]'
        detected in file 'C:\Users\Ivan\Downloads\2017.1.27\2017.1.27-03.Ransom.Sage.exe%'.
        Action performed: Move file to quarantine

27/1/2017, 12:18:24 PM [Real-Time Protection] Malware found
        The pattern of 'TR/Dropper.VB.pxzws [trojan]'
        detected in file 'C:\Users\Ivan\Downloads\2017.1.27\2017.1.27-02.Trojan.VBInjector.exe%'.
        Action performed: Move file to quarantine[/mw_shl_code]

嘉新

诺顿剩8  10

VIPRE:8X,miss 08,10
双击,全miss

aboringman

Trend Micro：

扫描：kill 4 files；



双击：Aegis击杀三，阻止一，miss二。

名称:        2017.1.27-02.Trojan.VBInjector.exe

来自:        未知

版本:       

版权:       

检测到的资源或进程 ID:        HKCU\SOFTWARE\WinRAR\HWID

处理措施:        已终止

威胁名称:        TSPY_FAREIT.MIP00000001

类型:        威胁

受感染文件:        C:\Users\abori\De…rojan.VBInjector.exe

处理措施:        已移除

检测方式:        实时扫描

名称:        2017.1.27-03.Ransom.Sage.exe

来自:        未知

版本:       

版权:       

检测到的资源或进程 ID:        C:\Users\abori\Desktop\2017.1.27-03.Ransom.Sage.exe

处理措施:        已清除

威胁名称:        HEU_AEGISCS965

类型:        威胁

受感染文件:        C:\Users\abori\De…3.Ransom.Sage.exe

处理措施:        已移除

检测方式:        实时扫描

威胁名称:        TROJ_KOVTER.MIP00000033

类型:        威胁

受感染文件:        C:\Users\abori\De…4.Trojan.Kovter.exe

处理措施:        已移除

检测方式:        实时扫描

名称:        2017.1.27-06.Ransom.Troldesh.exe

来自:        未知

版本:       

版权:       

检测到的资源或进程 ID:        C:\Users\abori\Desktop\新建文件夹\2017.1.27-06.Ransom.Troldesh.exe

处理措施:        已终止

ericdj

aboringman 发表于 2017-1-27 15:49
Trend Micro show time！【loading......】

loading了这么久啊

BE_HC

AVG扫描x4 监控杀了04的衍生物
感谢纠正

aboringman

ericdj 发表于 2017-1-27 16:27
loading了这么久啊

用趋势测主防需要耐心【关联杀很耗时间，必须耐心等待】，结果刚刚统计完成，我来发。

进击的银月

Scan start:        2017/1/27 16:36:12
2017.1.27\2017.1.27-05.Exploit.CallerCheck.exe%          Trojan.GenericKD.4244100 (B) [krnl.xmd]
2017.1.27\2017.1.27-06.Ransom.Troldesh.exe%          Trojan.GenericKD.4246066 (B) [krnl.xmd]
2017.1.27\2017.1.27-07.Ransom.Crysis.exe%          Trojan.GenericKD.4243369 (B) [krnl.xmd]
2017.1.27\2017.1.27-09.Ransom(Downloader).Locky.wsf%          Trojan.GenericKD.3831340 (B) [krnl.xmd]
2017.1.27\2017.1.27-01.Backdoor.Hedo.exe%          Trojan.Generic.20403809 (B) [krnl.xmd]
2017.1.27\2017.1.27-02.Trojan.VBInjector.exe%          Trojan.Generic.20400077 (B) [krnl.xmd]
2017.1.27\2017.1.27-03.Ransom.Sage.exe%          Trojan.GenericKD.4244403 (B) [krnl.xmd]
2017.1.27\2017.1.27-04.Trojan.Kovter.exe%          Trojan.GenericKD.4243928 (B) [krnl.xmd]

Scanned        10
Found        8

Scan end:        2017/1/27 16:36:19
Scan time:        0:00:07


EMSI八个~~~~

ericdj

aboringman 发表于 2017-1-27 16:34
用趋势测主防需要耐心【关联杀很耗时间，必须耐心等待】，结果刚刚统计完成，我来发。

好像用BD引擎的都是干点了8个，可惜我在外面，不然试试ATC

aboringman

ericdj 发表于 2017-1-27 16:41
好像用BD引擎的都是干点了8个，可惜我在外面，不然试试ATC

我反复对了结果，确定趋势的总成绩也是8【扫描干掉四只；Aegis干掉三只，阻止一只勒索】