收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 【05.24】#VirusPackage 8x + Modified Samples
123
返回列表 发新帖
楼主: Jerry.Lin
 收起左侧

[病毒样本] 【05.24】#VirusPackage 8x + Modified Samples

[复制链接]
stewart0811
发表于 2018-5-24 23:34:00 | 显示全部楼层
Norton Security
Samples(8/8) + M(7/8) = Total(15/16)
回复

举报

cemiko 该用户已被删除
发表于 2018-5-25 04:39:57 | 显示全部楼层
pal家族 发表于 2018-5-24 22:18
KES11 with
Non-cloud databases

这个结合上面双击的成绩，其实就很能说明问题了，卡巴缩减本地库的操作我是真没看懂。
回复

举报

心醉咖啡
发表于 2018-5-25 18:51:26 | 显示全部楼层
毒霸扫描miss
回复

举报

mengrufeihua
头像被屏蔽
发表于 2018-5-25 20:26:22 | 显示全部楼层
提示: 该帖被管理员或版主屏蔽
回复

举报

小飞侠.net
发表于 2018-5-28 20:52:57 | 显示全部楼层
本帖最后由 小飞侠.net 于 2018-5-28 21:27 编辑

                          ,,,                               ,,,      
X-Sec Antivirus ---（Windows 10 Creators Update（Redstone 4）....1803）：

Basic Info:
---------------------
Database Version: 2018.05.25.01
Program Version: [图片]2.1.1.0
Heuristic Engine: Enabled
Cloud Engine: Enabled
Enhanced Mode: Disabled
Backup Before Resolve: Yes
Resolve Threats: Scan only
Scan Priority: Normal
---------------------
Targets:
---------------------
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055
---------------------
2018/05/28 21:27:44 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(2).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/28 21:27:44 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(1).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/28 21:27:48 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(3).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/28 21:27:48 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(4).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/28 21:27:49 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(6).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/28 21:27:49 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(5).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/28 21:27:50 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(7).exe -- [Cloud] Cloud:Trojan.Win32.Trickbot
2018/05/28 21:27:50 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(8).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018/05/28 21:27:55 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(1).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/28 21:27:55 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(2).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/28 21:28:00 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(4).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/28 21:28:00 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(3).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018/05/28 21:28:00 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(6).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/28 21:28:01 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(5).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/05/28 21:28:01 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(7).exe -- [Cloud] Cloud:Trojan.Win32.Trickbot
2018/05/28 21:28:01 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(8).exe -- [Cloud] Cloud:Trojan.Win32.Emotet


   瑞星---（Windows 10 Creators Update（Redstone 4）....1803）：云引擎（开）RDM+引擎（开）

                瑞星反恶软引擎命令行扫描器（社区交流版）                 


编译于：Sep 22 2017   15:07:50

提示：
  - 本工具供社区交流使用，请勿用于其他用途
  - 本工具没有恶意软件删除、清除、隔离功能
  - 本工具包含开发中的新特性，结果仅供参考

* 命令行中的选项开关：-output-json -log=C:\瑞星RDM+引擎\ScanLog_180528212321.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055

* 加载恶软签名库： C:\瑞星RDM+引擎/malware.rmd
* 恶软签名库加载成功，发布序号为 4302
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Mon May 28 21:23:35 2018

{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Modified Samples\\M(7).exe","infect":{"engine":"sha1","signature":"c2hhMTqjzUqBgKnhhWVrJeXDcF6gpH/D6Q","threat":"Trojan.Crypto!8.364"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Modified Samples\\M(8).exe","infect":{"engine":"sha1","signature":"c2hhMTpu2VbW+rVYRBmx3BcKvkCsXCxf7Q","threat":"Trojan.Emotet!8.B95"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Modified Samples\\M(6).exe","infect":{"engine":"sha1","signature":"c2hhMTo1+YDTv0SjPBPZQ5xNP74hfTBeNg","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Modified Samples\\M(5).exe","infect":{"engine":"sha1","signature":"c2hhMToOkfeXlgTbaA2FsmMB6OTRWmiqzA","threat":"Spyware.Ursnif!8.1DEF"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Modified Samples\\M(3).exe","infect":{"engine":"sha1","signature":"c2hhMTpZzsTqsdpKaNhURxEgXvj8UfHvuA","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Modified Samples\\M(4).exe","infect":{"engine":"sha1","signature":"c2hhMTpLY3yQ4C6q06z624AqghNUhFCwoA","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Modified Samples\\M(2).exe","infect":{"engine":"sha1","signature":"c2hhMTrZzDWE2VYG90JyeRFaTYeSw16lVw","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Modified Samples\\M(1).exe","infect":{"engine":"sha1","signature":"c2hhMToabLwviDgcE0RdFrsY7yuxf2bx/g","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Samples\\(5).exe","infect":{"engine":"sha1","signature":"c2hhMTolsU8fPP2LfCeEg9hnSVplh2iJUw","threat":"Spyware.Ursnif!8.1DEF"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Samples\\(8).exe","infect":{"engine":"sha1","signature":"c2hhMTpS5q85KxjLTf2WsOXQ/nTv7uYFuQ","threat":"Trojan.Emotet!8.B95"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Samples\\(7).exe","infect":{"engine":"sha1","signature":"c2hhMTqetCMqVSdpNv+CLCeZbXDnWXVQvg","threat":"Trojan.Crypto!8.364"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Samples\\(6).exe","infect":{"engine":"sha1","signature":"c2hhMToLiRJazLa65n2GSx8cWN97LSjdAQ","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Samples\\(3).exe","infect":{"engine":"sha1","signature":"c2hhMTrIInfzBADY6Tdxq5f0GW3nGlPXdQ","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Samples\\(2).exe","infect":{"engine":"sha1","signature":"c2hhMToblSqYXmSVj0EapW1HfUVXNHoPTg","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Samples\\(4).exe","infect":{"engine":"sha1","signature":"c2hhMTp7kRLw6P2jQhaI/7nfoW0TjpsbIg","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus8x 0524Generic2055\\Virus8x 0524\\Samples\\(1).exe","infect":{"engine":"sha1","signature":"c2hhMTp7Xsxk8OUpH9qgzCzvsPQ9nZQDcA","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}

扫描结束: Mon May 28 21:23:36 2018

总扫描耗时: 0:0:652(m:s:ms)
总扫描对象: 16
总扫描文件: 16
总恶意文件: 16
有效检出率: 100.00%



Emsisoft Emergency Kit - 版本 2018.4
上次更新： 2018/5/28 20:35:39
用户帐号： TECLAST\Admin
电脑名称： TECLAST
操作系统版本： Windows 10x64

Emsisoft Emergency Kit 绿色免费版
(已开启)加入 Emsisoft 云、更新源：测试版
    Bitdefender（B）+Emsisoft（A） 双引擎

扫描设置：

扫描方式： 自定义扫描
对象： Rootkits, 内存, 恶意残留, C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\

检测流氓软件(PUPs)： On
扫描压缩包： On
扫描邮件存档： Off
ADS数据流： On
文件扩展名过滤： Off
直接磁盘访问： Off

扫描开始于：        2018/5/28 21:19:58
C:\Users\Admin\AppData\Roaming\baidu         发现风险： Application.AppInstall (A) [224507]
C:\Users\Admin\AppData\Local\baidu         发现风险： Application.AppInstall (A) [226898]
C:\Users\Admin\AppData\Local\sysassistbyhotwheel         发现风险： Application.Toolbar (A) [230313]
Key: HKEY_USERS\S-1-5-21-1320124207-2627790254-4257915705-1001\SOFTWARE\PPSTREAM         发现风险： Application.Toolbar (A) [281127]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(2).exe         发现风险： Trojan.Agent.CZLD (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(3).exe         发现风险： Trojan.Agent.CZLD (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(4).exe         发现风险： Trojan.Agent.CZLD (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(8).exe         发现风险： Trojan.Emotet (A) [294010]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(1).exe         发现风险： Trojan.Agent.CZLD (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(5).exe         发现风险： Trojan.GenericKD.30867863 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(6).exe         发现风险： Trojan.GenericKD.30867845 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(2).exe         发现风险： Trojan.Agent.CZLD (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(7).exe         发现风险： Trojan.Generic.22955727 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(3).exe         发现风险： Trojan.Agent.CZLD (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(4).exe         发现风险： Trojan.Agent.CZLD (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(6).exe         发现风险： Trojan.GenericKD.30866735 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(1).exe         发现风险： Trojan.GenericKD.30866805 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(8).exe         发现风险： Trojan.Emotet (A) [294010]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(7).exe         发现风险： Trojan.GenericKD.30867557 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(5).exe         发现风险： Trojan.GenericKD.30866325 (B) [krnl.xmd]

已扫描        62829
发现        20

扫描完成后：        2018/5/28 21:20:25
扫描时间：        0:00:27



ESET Smart Security Premium 64位（高级启发式（Y）+压缩文件（Y）+自解压加壳（Y）+DNA智能签名（Y）++（Windows 10 Creators Update（Redstone 4）....1803）：

日志
正在扫描日志
检测引擎的版本: 17458P (20180528)
日期: 2018/5/28  时间: 21:13:17
已扫描的磁盘、文件夹和文件: C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(1).exe - Win32/Injector.DYEM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(2).exe - Win32/Injector.DYEM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(3).exe - Win32/Injector.DYEM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(4).exe - Win32/Injector.DYEM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(5).exe - Win32/Spy.Ursnif.BO 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(6).exe - Win32/Kryptik.GHBP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(7).exe - Win32/TrickBot.AQ 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Modified Samples\M(8).exe - Win32/Emotet.BH 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(1).exe - Win32/Injector.DYEM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(2).exe - Win32/Injector.DYEM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(3).exe - Win32/Injector.DYEM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(4).exe - Win32/Injector.DYEM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(5).exe - Win32/Spy.Ursnif.BO 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(6).exe - Win32/Kryptik.GHBP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(7).exe - Win32/TrickBot.AQ 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus8x 0524Generic2055\Virus8x 0524\Samples\(8).exe - Win32/Emotet.BH 特洛伊木马 - 通过删除清除 [1]
已扫描的对象数: 16
发现的威胁数: 16
已清除对象数: 16
完成时间: 21:13:37  总扫描时间: 20 秒 (00:00:20)

备注:
[1] 由于对象中仅包含病毒主体，因此已被删除。



Dr.Web CureIt! 简体中文绿色免费版---（ Windows 7 Ultimate with SP1 简体中文旗舰版....）：

-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Command line used:-rpcep:\pipe\189EF7213 -rpcpr:np

Limit the use of the computer resources to 100%
Instances used for this session: 10
Object(s) to scan:
- C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524


C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(6).exe - infected with Trojan.Gootkit.92
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(6).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(8).exe - infected with Trojan.PWS.Spy.20936
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(8).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(7).exe - infected with Trojan.Trick.45128
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(7).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(3).exe - infected with Trojan.PWS.Stealer.23900
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(3).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(1).exe - infected with Trojan.PWS.Stealer.23900
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(1).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(2).exe - infected with Trojan.PWS.Stealer.23900
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(2).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(7).exe - infected with Trojan.Trick.45128
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(7).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(8).exe - infected with Trojan.PWS.Spy.20936
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(8).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(6).exe - infected with Trojan.Gootkit.92
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(6).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(4).exe - infected with Trojan.PWS.Stealer.23900
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(4).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(1).exe - infected with Trojan.PWS.Stealer.23900
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(1).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(4).exe - infected with Trojan.PWS.Stealer.23900
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(4).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(5).exe - infected with Trojan.Siggen7.49533
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(5).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(3).exe - infected with Trojan.PWS.Stealer.23900
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(3).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(2).exe - infected with Trojan.PWS.Stealer.23900
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(2).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(5).exe - infected with Trojan.Siggen7.49533
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(5).exe - infected

Total 7900560 bytes in 16 files scanned
There are no clean objects detected
Total 16 files are infected
Scan time is 00:00:01.675



火绒安全---（ Windows 7 Ultimate with SP1 简体中文旗舰版....）：部分未知文件已发送到seclab@huorong.cn，等处理中。。。

病毒库：2018-05-28 16:29
开始时间：2018-05-28 20:48
总计用时：00:00:11
扫描对象：20个
扫描文件：16个
发现风险：14个
已处理风险：0个
发现系统修复项：0个
处理系统修复项：0个

病毒详情

风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(1).exe, 病毒名：Trojan/Generic!3E75726F05C90D8E, 病毒ID：[3e75726f05c90d8e], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(4).exe, 病毒名：Trojan/Generic!5B6F30D4B0C81D4E, 病毒ID：[5b6f30d4b0c81d4e], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(3).exe, 病毒名：Trojan/Generic!8E372A51EF046F04, 病毒ID：[8e372a51ef046f04], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(2).exe, 病毒名：Trojan/Generic!54A8BD9D3E313FEB, 病毒ID：[54a8bd9d3e313feb], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(8).exe, 病毒名：Trojan/Generic!CD5B7B07FE50E1C6, 病毒ID：[cd5b7b07fe50e1c6], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(7).exe, 病毒名：HEUR:VirTool/Obfuscator.gen!B, 病毒ID：[2d18551aef762f90], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(2).exe, 病毒名：Trojan/Generic!F1D93F1A98F67AEC, 病毒ID：[f1d93f1a98f67aec], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(1).exe, 病毒名：Trojan/Generic!DF32B7CAE590B17C, 病毒ID：[df32b7cae590b17c], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(3).exe, 病毒名：Trojan/Generic!4FF99D94E3D43052, 病毒ID：[4ff99d94e3d43052], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(4).exe, 病毒名：Trojan/Generic!5F873C7ADA97B4B3, 病毒ID：[5f873c7ada97b4b3], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Modified Samples\M(6).exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：[b27d4294cde6a1ec], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(7).exe, 病毒名：HEUR:VirTool/Obfuscator.gen!B, 病毒ID：[2d18551aef762f90], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(8).exe, 病毒名：Trojan/Generic!F5B5D385115E4B64, 病毒ID：[f5b5d385115e4b64], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524\Samples\(6).exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：[b27d4294cde6a1ec], 处理结果：已忽略

文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus8x 0524.rar
文件大小: 4.09 MB (4,299,458 字节)
修改时间: 2018年05月28日，20:41:00
MD5: 59151C263A7AE7BA06193E2E713E963F
SHA1: 731DFAFFA5B023089BF4B621B1E951D75A4F1440
SHA256: 91A5B381E87FF2FEC79BC0D5647FCF4F262988504B3A510BCD17BF216E3B49C1
SHA512: EBEA4B1011879AC83A2918EE3F2904FBB7B972785B633E02C163B702530888A67A7FCDD60152E23C10AA3B915565793966563CFA65B3B4D36F7413BD876D728C
CRC32: C0FB8B07
计算时间: 0.31s


回复

举报

123
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-1 10:24 , Processed in 0.096250 second(s), 14 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表