【缉毒卫队测试包】第42期 20180104

cloud01

dong0512 发表于 2018-1-6 11:19
都是解压后主动杀的，手动扫描没有反应

说明都杀完了。双击才能发挥AMS效果和HIPS效果。

abc277399

PanzerVIIIMaus 发表于 2018-1-5 23:20
看来二扫拉黑了，顺带放出当时日志

估计是！

bbs2811125

ESET kill 11x，SEP补充1、12；剩余跨平台5、14号样本

1. Log
   
2. D:\搜狗高速下载\18.1.4\180104-10.Backdoor.Thom3k.exe.infected - a variant of Win32/Spy.Agent.PEX trojan - cleaned by deleting [1]
   
3. D:\搜狗高速下载\18.1.4\180104-11.Miner.Luoxkexp.exe.infected - a variant of Win32/BitCoinMiner.DQ potentially unsafe application - cleaned by deleting [1]
   
4. D:\搜狗高速下载\18.1.4\180104-13.VBA.Downloader.docx.infected - a variant of Generik.BVVDPAT trojan - cleaned by deleting [1]
   
5. D:\搜狗高速下载\18.1.4\180104-15.Cheat.Aimjunkies.exe.infected - a variant of Win32/Injector.DJLU trojan - cleaned by deleting [1]
   
6. D:\搜狗高速下载\18.1.4\180104-2.PUP.Cr173.exe.infected - a variant of Win32/Gaofenquming.B potentially unwanted application - cleaned by deleting [1]
   
7. D:\搜狗高速下载\18.1.4\180104-3.PUP.MailRU.exe.infected - a variant of Win32/MailRu.D potentially unwanted application - cleaned by deleting [1]
   
8. D:\搜狗高速下载\18.1.4\180104-4.Miner.Pronetads.exe.infected - a variant of Win32/Kryptik.GBGJ trojan - cleaned by deleting [1]
   
9. D:\搜狗高速下载\18.1.4\180104-6.Miner.Reconyc.exe.infected » UPX » BAT2EXE » 1.bat - BAT/CoinMiner.YL trojan - cleaned by deleting [1]
   
10. D:\搜狗高速下载\18.1.4\180104-6.Miner.Reconyc.exe.infected » BAT2EXE - is OK
    
11. D:\搜狗高速下载\18.1.4\180104-7.Exploit.CVE-2017-11882.doc.infected - Win32/Exploit.CVE-2017-11882.V trojan - cleaned by deleting [1]
    
12. D:\搜狗高速下载\18.1.4\180104-8.Miner.Crypto-pool.exe.infected - BAT/CoinMiner.YN trojan - cleaned by deleting [1]
    
13. D:\搜狗高速下载\18.1.4\180104-9.Backdoor.Poison.exe.infected - a variant of Win32/Kryptik.GBFF trojan - cleaned by deleting [1]
    

复制代码

Hacky

火绒报毒

pal家族

RAV v17
9x

adaxcz

这是什么

游龙云翔

BullGuard解压X7，留1

游龙云翔

Bullguard解压杀11留4，未双击未右键