震惊！双击人士请进，这是一个赚钱的样本

学雷锋做人

样本来源：http://www.52pojie.cn/thread-627830-1-1.html
样本下载：

双击党福音，玩毒将会走上致富的道路......

我会学雷锋做人，把赚钱机会让给你们了，就贴一个火绒扫描结果

wajika

没兴趣了

小飞侠.net

Complete scanning result of "100RMB.zip", processed in VirusTotal at 07/24/2017 17:39:22 (CET)

[ file data ]
* name..: 100RMB.zip
* size..: 755298
* md5...: 6f1d9d19546b55421cf48ba4ea05da73
* sha1..: 12125e9af6fa48053a9bad284e43859225e67e92

[ scan result ]
ALYac        1.1.1.2/20170724        found nothing
AVG        8.0.1489.320/20170724        found nothing
AVware        1.5.0.42/20170721        found nothing
Ad-Aware        3.0.3.1010/20170724        found nothing
AegisLab        4.2/20170724        found nothing
AhnLab-V3        3.9.2.18187/20170724        found nothing
Alibaba        1.0/20170724        found nothing
Antiy-AVL        3.0.0.1/20170724        found nothing
Arcabit        1.0.0.817/20170724        found nothing
Avast        8.0.1489.320/20170724        found nothing
Avira        8.3.3.4/20170724        found nothing
Baidu        1.0.0.2/20170724        found nothing
BitDefender        7.2/20170724        found nothing
Bkav        1.3.0.9262/20170724        found nothing
CAT-QuickHeal        14.00/20170724        found nothing
CMC        1.1.0.977/20170724        found nothing
ClamAV        0.99.2.0/20170724        found nothing
Comodo        27502/20170724        found nothing
Cyren        5.4.30.7/20170724        found nothing
DrWeb        7.0.28.2020/20170724        found nothing
ESET-NOD32        15798/20170724        found nothing
Emsisoft        4.0.1.883/20170724        found nothing
F-Prot        4.7.1.166/20170724        found nothing
F-Secure        11.0.19100.45/20170724        found nothing
Fortinet        5.4.247.0/20170724        found nothing
GData        A:25.13538B:25.10070/20170724        found nothing
Ikarus        0.1.5.2/20170724        found nothing
Jiangmin        16.0.100/20170724        found nothing
K7AntiVirus        10.19.24071/20170724        found nothing
K7GW        10.19.24071/20170724        found nothing
Kaspersky        15.0.1.13/20170724        found nothing
Kingsoft        2013.8.14.323/20170724        found nothing
MAX        2017.6.26.1/20170724        found nothing
Malwarebytes        2.1.1.1115/20170724        found nothing
McAfee        6.0.6.653/20170723        found nothing
McAfee-GW-Edition        v2015/20170724        found nothing
MicroWorld-eScan        12.0.250.0/20170724        found nothing
Microsoft        1.1.14003.0/20170724        found nothing
NANO-Antivirus        1.0.92.17955/20170724        found Trojan.Win32.Agent.eqrkws
Panda        4.6.4.2/20170724        found nothing
Qihoo-360        1.0.0.1120/20170724        found nothing
Rising        25.0.0.1/20170724        found nothing
SUPERAntiSpyware        5.6.0.1032/20170724        found nothing
Sophos        4.98.0/20170724        found nothing
Symantec        1.4.0.0/20170724        found nothing
Tencent        1.0.0.1/20170724        found nothing
TheHacker        6.8.0.5.1772/20170724        found nothing
TotalDefense        37.1.62.1/20170724        found nothing
TrendMicro        9.862.0.1074/20170724        found nothing
TrendMicro-HouseCall        9.950.0.1006/20170724        found nothing
VBA32        3.12.26.4/20170724        found nothing
VIPRE        59782/20170724        found nothing
ViRobot        2014.3.20.0/20170724        found nothing
Webroot        1.0.0.207/20170724        found nothing
WhiteArmor        9101276/20170721        found nothing
Yandex        5.5.1.3/20170724        found nothing
Zillya        2.0.0.3343/20170721        found nothing
ZoneAlarm        1.0/20170724        found nothing
Zoner        1.0/20170724        found nothing
nProtect        2017-07-24.02/20170724        found nothing

360 Total Security扫描日志

扫描时间：2017-07-24 23:32:18
扫描用时：00:00:11
扫描项目总数：5
威胁总数：0
处理威胁数：0

扫描选项
----------------------
扫描压缩包：是
常规引擎设置：Bitdefender引擎, 小红伞引擎

扫描内容
----------------------
文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\100RMB.zip
文件大小: 737 KB (755,298 字节)
修改时间: 2017年07月24日，23:31:57
MD5: 6f1d9d19546b55421cf48ba4ea05da73
SHA1: 12125e9af6fa48053a9bad284e43859225e67e92
SHA256: aac72142231d9e4c8a56d2b6d65794cae204b9752f953f42784836c25d26659c
CRC32: 00c9ee2e
计算时间: 0.02s



扫描结果
======================
未发现威胁

ziyerain2015

不敢双击！

小飞侠.net

ziyerain2015 发表于 2017-7-24 23:35
不敢双击！

TS居然没报

ziyerain2015

小飞侠.net 发表于 2017-7-24 23:37
TS居然没报

去网站查了下，除了国内的瑞星火绒360和ESET外，其他的国外杀毒软件好像都不报的！

tianzhena

咖啡

ziyerain2015

这算是内网的劫持嘛？不太懂，魔盾都判断没毒.....搞不懂高手解析下

zst470396853

卡巴  Q管国际版  没报

360  kill

小飞侠.net

zst470396853 发表于 2017-7-25 00:26
卡巴  Q管国际版  没报

360  kill

TS在国内没服务器？不是同一朵云？