【05.23】#VirusPackage 5x + Modified Samples

显示全部楼层 · 发表于 2018-5-26 12:43:13

191196846 发表于 2018-5-23 18:53
Intercept X 了解下

新技术？还是之前的ml加进来了

显示全部楼层 · 发表于 2018-5-27 00:40:36

本帖最后由小飞侠.net 于 2018-5-27 01:26 编辑

X-Sec Antivirus ---（Windows 10 Creators Update（Redstone 4）....1803）：

Basic Info:
---------------------
Database Version: 2018.05.24.01
Program Version: 2.1.1.0
Heuristic Engine: Enabled
Cloud Engine: Enabled
Enhanced Mode: Disabled
Backup Before Resolve: Yes
Resolve Threats: Scan only
Scan Priority: Normal
---------------------
Targets:
---------------------
C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524
---------------------
2018/05/26 10:20:58 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(10).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018/05/26 10:20:59 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(11).exe -- [Cloud] Cloud:Trojan.Win32.Crypted
2018/05/26 10:21:00 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(12).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018/05/26 10:21:00 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(13).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018/05/26 10:21:00 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(14).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/26 10:21:01 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(15).exe -- [Cloud] Cloud:Suspicious.Win32.Generic
2018/05/26 10:21:01 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(16).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018/05/26 10:21:04 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(1).exe -- [Cloud] Cloud:Trojan.Win32.Infostealer
2018/05/26 10:21:11 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(2).exe -- [Cloud] Cloud:Trojan.Win32.Crypted
2018/05/26 10:21:16 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(3).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/26 10:21:19 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(17).scr -- [Cloud] Cloud:Trojan.Win32.Injector
2018/05/26 10:21:21 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(4).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/26 10:21:21 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(6).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/26 10:21:22 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(7).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/26 10:21:23 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(5).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/26 10:21:23 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(8).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/26 10:21:23 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Modified Samples\(9).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/26 10:21:24 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(10).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018/05/26 10:21:24 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(11).exe -- [Cloud] Cloud:Trojan.Win32.Crypted
2018/05/26 10:21:25 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(12).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018/05/26 10:21:25 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(13).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018/05/26 10:21:26 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(14).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/26 10:21:26 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(15).exe -- [Cloud] Cloud:Suspicious.Win32.Generic
2018/05/26 10:21:27 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(16).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018/05/26 10:21:31 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(1).exe -- [Cloud] Cloud:Trojan.Win32.Infostealer
2018/05/26 10:21:38 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(2).exe -- [Cloud] Cloud:Trojan.Win32.Crypted
2018/05/26 10:21:44 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(3).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/26 10:21:46 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(17).scr -- [Cloud] Cloud:Trojan.Win32.Injector
2018/05/26 10:21:48 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(4).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/26 10:21:49 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(5).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/26 10:21:49 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(6).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/26 10:21:50 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(7).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/26 10:21:50 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(8).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/26 10:21:50 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17xObfuscator 0524\Virus17x 0524\Samples\(9).exe -- [Cloud] Cloud:Trojan.Win32.Generic

瑞星---（Windows 10 Creators Update（Redstone 4）....1803）：云引擎（开）RDM+引擎（开）

            瑞星反恶软引擎命令行扫描器（社区交流版）

编译于：Sep 22 2017 15:07:50

提示：
  - 本工具供社区交流使用，请勿用于其他用途
  - 本工具没有恶意软件删除、清除、隔离功能
  - 本工具包含开发中的新特性，结果仅供参考

* 命令行中的选项开关：-output-json -log=C:\瑞星RDM+引擎\ScanLog_180527011546.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject

* 加载恶软签名库： C:\瑞星RDM+引擎/malware.rmd
* 恶软签名库加载成功，发布序号为 4299
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Sun May 27 01:15:51 2018

{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2Virus5x 0523AutInject\\2Virus5x 0523\\Modified Samples\\M(4).exe","infect":{"engine":"sha1","signature":"c2hhMTp5osqGNdtzhnFGILzN+1ZdhnvLhw","threat":"Spyware.Ursnif!8.1DEF"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2Virus5x 0523AutInject\\2Virus5x 0523\\Samples\\(3).exe","infect":{"engine":"sha1","signature":"c2hhMTp+x5ZiBquw72X3T3SWqknac+vsSg","threat":"Trojan.Generic!8.C3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2Virus5x 0523AutInject\\2Virus5x 0523\\Modified Samples\\M(3).exe","infect":{"engine":"sha1","signature":"c2hhMTqONL9LnWXu/e1Y1VK05JU+Itzt0w","threat":"Trojan.Crypto!8.364"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2Virus5x 0523AutInject\\2Virus5x 0523\\Modified Samples\\M(5).exe","infect":{"engine":"sha1","signature":"c2hhMTq5m107lI7EvxAxPFzbdHx3i7+i9w","threat":"Backdoor.Agent!8.C5D"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2Virus5x 0523AutInject\\2Virus5x 0523\\Samples\\(2).exe","infect":{"engine":"sha1","signature":"c2hhMToAh+rZUOd9i4dRj6LQM8avEJQvaA","threat":"Downloader.Autoit!8.1B9"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2Virus5x 0523AutInject\\2Virus5x 0523\\Modified Samples\\M(1).exe","infect":{"engine":"sha1","signature":"c2hhMTrMvCqElm2T2H1LFiokY83vbAhz5Q","threat":"Spyware.Ursnif!8.1DEF"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2Virus5x 0523AutInject\\2Virus5x 0523\\Samples\\(1).exe","infect":{"engine":"sha1","signature":"c2hhMTqmGC+tX0I2a83h22i7n/tb83Sqxw","threat":"Spyware.Ursnif!8.1DEF"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2Virus5x 0523AutInject\\2Virus5x 0523\\Modified Samples\\M(2).exe","infect":{"engine":"sha1","signature":"c2hhMTrn8SV3zUB2qZlgj0pg7+VfNKwQwA","threat":"Downloader.Autoit!8.1B9"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2Virus5x 0523AutInject\\2Virus5x 0523\\Samples\\(4).exe","infect":{"engine":"sha1","signature":"c2hhMTpcfs7+IWhnP/RZhWYoj0QwJf46UQ","threat":"Spyware.Ursnif!8.1DEF"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2Virus5x 0523AutInject\\2Virus5x 0523\\Samples\\(5).exe","infect":{"engine":"tfe","signature":"dGZlOgy5SVTK4g7Ibw","threat":"Backdoor.Agent!8.C5D"},"type":"scan"}

扫描结束: Sun May 27 01:15:51 2018

总扫描耗时: 0:0:725(m:s:ms)
总扫描对象: 10
总扫描文件: 10
总恶意文件: 10
有效检出率: 100.00%

Emsisoft Emergency Kit - 版本 2018.4
上次更新： 2018/5/27 1:08:46
用户帐号： TECLAST\Admin
电脑名称： TECLAST
操作系统版本： Windows 10x64

Emsisoft Emergency Kit 绿色免费版
(已开启)加入 Emsisoft 云、更新源：测试版
Bitdefender（B）+Emsisoft（A）双引擎

扫描设置：

扫描方式：自定义扫描
对象： Rootkits, 内存, C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\

检测流氓软件(PUPs)： On
扫描压缩包： On
扫描邮件存档： Off
ADS数据流： On
文件扩展名过滤： Off
直接磁盘访问： Off

扫描开始于：       2018/5/27 1:09:53
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Modified Samples\M(2).exe -> (AutoIT Script) -> (unicode)       发现风险： AIT:Trojan.Agent.CXHP (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Samples\(2).exe -> (AutoIT r) -> (AutoIT Script) -> (unicode)       发现风险： AIT:Trojan.Agent.CXHP (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Samples\(2).exe -> (AutoIT Script) -> (unicode)       发现风险： AIT:Trojan.Agent.CXHP (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Modified Samples\M(3).exe       发现风险： Trojan.Injector (A) [294011]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Modified Samples\M(5).exe       发现风险： Trojan.GenericKD.30858284 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Modified Samples\M(4).exe       发现风险： Trojan.GenericKD.30874367 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Samples\(3).exe       发现风险： Trojan.Injector (A) [294011]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Modified Samples\M(1).exe       发现风险： Trojan.GenericKD.30859734 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Samples\(4).exe       发现风险： Trojan.GenericKD.30858028 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Samples\(1).exe       发现风险： Trojan.GenericKD.30854049 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Samples\(5).exe       发现风险： Trojan.GenericKD.30858284 (B) [krnl.xmd]

已扫描       1848
发现       11

扫描完成后：       2018/5/27 1:10:31
扫描时间：       0:00:38

ESET Smart Security Premium 64位（高级启发式（Y）+压缩文件（Y）+自解压加壳（Y）+DNA智能签名（Y）++（Windows 10 Creators Update（Redstone 4）....1803）：

日志
正在扫描日志
检测引擎的版本: 17449P (20180526)
日期: 2018/5/27  时间: 1:01:32
已扫描的磁盘、文件夹和文件: C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Modified Samples\M(1).exe - Win32/[图片]Spy.Ursnif.BR 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Modified Samples\M(2).exe > AUTOIT > script.bin - Win32/TrojanDownloader.Autoit.OLR 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Modified Samples\M(3).exe - Win32/Injector.DYEC 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Modified Samples\M(4).exe - Win32/GenKryptik.CAMK 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Modified Samples\M(5).exe - MSIL/Injector.RGT 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Samples\(1).exe - Win32/[图片]Spy.Ursnif.BR 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Samples\(2).exe > AUTOIT > script.bin - Win32/TrojanDownloader.Autoit.OLR 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Samples\(3).exe - Win32/Injector.DYEC 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Samples\(4).exe - Win32/GenKryptik.CAMK 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2Virus5x 0523AutInject\2Virus5x 0523\Samples\(5).exe - MSIL/Injector.RGT 特洛伊木马的变种 - 通过删除清除 [1]
已扫描的对象数: 12
发现的威胁数: 10
已清

除对象数: 10
完成时间: 1:03:12 总扫描时间: 100 秒 (00:01:40)

备注:
[1] 由于对象中仅包含病毒主体，因此已被删除。

Dr.Web CureIt! 简体中文绿色免费版---（ Windows 7 Ultimate with SP1 简体中文旗舰版....）：

-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Command line used:-rpcep:\pipe\51EEB4FC4 -rpcpr:np

Limit the use of the computer resources to 100%
Instances used for this session: 10
Object(s) to scan:
- C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523

C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(3).exe - infected with Trojan.PWS.Stealer.1932
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(3).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(3).exe - infected with Trojan.PWS.Stealer.1932
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(3).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(5).exe - infected with Trojan.PWS.Stealer.23680
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(5).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(4).exe - infected with Trojan.Siggen7.49533
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(4).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(5).exe - infected with Trojan.PWS.Stealer.23680
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(5).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(1).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(4).exe - infected with Trojan.Siggen7.49533
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(4).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(1).exe - Ok
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(2).exe is AUTOIT container
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(2).exe is AUTOIT container
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(2).exe\Users\Coringa\AppData\Local\AutoIt v3\Aut2Exe\aut292E.tmp.tok - packed by ASCRIPT
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(2).exe\Users\Coringa\AppData\Local\AutoIt v3\Aut2Exe\aut292E.tmp.tok - packed by ASCRIPT
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(2).exe - container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(2).exe - container

Total 8710394 bytes in 10 files scanned (12 objects)
Total 4 files (6 objects) are clean
Total 6 files

are infected
Scan time is 00:00:02.658

火绒安全---（ Windows 7 Ultimate with SP1 简体中文旗舰版....）：部分未知文件已发送到seclab@huorong.cn，等处理中。。。

病毒库：2018-05-26 15:57
开始时间：2018-05-27 00:37
总计用时：00:00:17
扫描对象：21个
扫描文件：10个
发现

风险：8个
已处理风险：0个
发现系统修复项：0个
处理系统修复项：0个

病毒详情

风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(5).exe, 病毒名：Trojan/Generic!580E133E15394D1B, 病毒ID：[580e133e15394d1b], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(2).exe, 病毒名：VirTool/AutInject.b, 病毒ID：[9cc748a4c8e14bf7], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(3).exe, 病毒名：Trojan/Generic!5FBCCB6962410A0C, 病毒ID：[5fbccb6962410a0c], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(2).exe, 病毒名：VirTool/AutInject.b, 病毒ID：[9cc748a4c8e14bf7], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(5).exe, 病毒名：Trojan/Generic!580E133E15394D1B, 病毒ID：[580e133e15394d1b], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Modified Samples\M(4).exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：[b27d4294cde6a1ec], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(1).exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：[b27d4294cde6a1ec], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523\Samples\(4).exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：[b27d4294cde6a1ec], 处理结果：已忽略

文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2Virus5x 0523.rar
文件大小: 4.60 MB (4,829,780 字节)
修改时间: 2018年05月27日，00:36:53
MD5: EC08CA23C37DA27EC11845A4D07AC6A6
SHA1: F1934E5AB0BB8FB36CC70BFCDCDC4C3C522D609A
SHA256: 324D0002E13AA3C80D90498E9D0E810E20964CDAF773CB48DC744AAAFB157776
SHA512: 98C4A3269EF9A9FAC4B068ABC3A2FD4ED3496345B0BD6B28A0079EA7A6C82C320402C5359794E5DB67F16C543CFC9173A346F7148AB10A0AEEB279C15733D694
CRC32: D08CFAC6
计算时间: 0.13s

[病毒样本] 【05.23】#VirusPackage 5x + Modified Samples