收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 【05.29】#VirusPackage 7x + Modified Sample
123
返回列表 发新帖
楼主: Jerry.Lin
 收起左侧

[病毒样本] 【05.29】#VirusPackage 7x + Modified Sample

[复制链接]
dongwenqi
发表于 2018-5-30 13:31:37 | 显示全部楼层
wusiyuanjh 发表于 2018-5-30 13:28
目前卡巴已经全灭

恩，早上收到邮件了
回复

举报

ELOHIM
发表于 2018-5-31 14:40:19 | 显示全部楼层
1#样本上传不了微软。。。
回复

举报

小飞侠.net
发表于 2018-6-2 20:29:59 | 显示全部楼层
本帖最后由 小飞侠.net 于 2018-6-2 21:23 编辑

X-Sec Antivirus ---（Windows 10 Creators Update（Redstone 4）....1803）：

Basic Info:
---------------------
Database Version: 2018.05.31.01
Program Version: [图片]2.1.1.0
Heuristic Engine: Enabled
Cloud Engine: Enabled
Enhanced Mode: Disabled
Backup Before Resolve: Yes
Resolve Threats: Scan only
Scan Priority: Normal
---------------------
Targets:
---------------------
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031
---------------------
2018-06-02 21:21:39 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(1).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-02 21:21:39 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(2).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-02 21:21:40 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(4).exe -- [Cloud] Cloud:Trojan.Win32.Ransom
2018-06-02 21:21:40 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(3).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-02 21:21:40 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(6).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-02 21:21:40 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(5).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018-06-02 21:21:41 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(7).exe -- [Cloud] Cloud:Trojan.Win32.Downloader
2018-06-02 21:21:45 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(1).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-02 21:21:45 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(2).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-02 21:21:46 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(3).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-02 21:21:46 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(4).exe -- [Cloud] Cloud:Trojan.Win32.Ransom
2018-06-02 21:21:46 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(5).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018-06-02 21:21:46 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(6).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-02 21:21:46 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(7).exe -- [Cloud] Cloud:Trojan.Win32.Downloader



瑞星---（Windows 10 Creators Update（Redstone 4）....1803）：云引擎（开）RDM+引擎（开）     

                瑞星反恶软引擎命令行扫描器（社区交流版）                 


编译于：Sep 22 2017   15:07:50

提示：
  - 本工具供社区交流使用，请勿用于其他用途
  - 本工具没有恶意软件删除、清除、隔离功能
  - 本工具包含开发中的新特性，结果仅供参考

* 命令行中的选项开关：-output-json -log=C:\瑞星RDM+引擎\ScanLog_180602211705.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031

* 加载恶软签名库： C:\瑞星RDM+引擎/malware.rmd
* 恶软签名库加载成功，发布序号为 4332
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Sat Jun 02 21:17:20 2018

{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Samples\\(1).exe","infect":{"engine":"sha1","signature":"c2hhMTpLw04kfkkjeL9h9iYob7SHY2Z8QA","threat":"Downloader.Upatre!8.B5"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Modified Samples\\M(6).exe","infect":{"engine":"sha1","signature":"c2hhMTo9ZEaj9eN5yh4WeRKTZ/01sbkY4A","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Modified Samples\\M(1).exe","infect":{"engine":"sha1","signature":"c2hhMTrSxv1wtAU/xKN1sXaXZRITTIEl+w","threat":"Downloader.Agent!8.B23"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Modified Samples\\M(3).exe","infect":{"engine":"sha1","signature":"c2hhMTqjQ1Q6TzU5kCy7tgW7u9Y475aq6Q","threat":"Trojan.Generic!8.C3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Modified Samples\\M(4).exe","infect":{"engine":"sha1","signature":"c2hhMToKvl5NHhP/+NWdXEyip3kOCqpatw","threat":"Trojan.Fuerboos!8.EFC8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Modified Samples\\M(7).exe","infect":{"engine":"sha1","signature":"c2hhMTp4B+t8oJNmHCt177cXK22vmpabGg","threat":"Downloader.Generic!8.141"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Modified Samples\\M(5).exe","infect":{"engine":"sha1","signature":"c2hhMTrZJ1KyLSBF2TlmtsWBQR+0sdG3pg","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Modified Samples\\M(2).exe","infect":{"engine":"sha1","signature":"c2hhMTryw/Uo1IN9BWbRfon/rhkvAhjzPA","threat":"Spyware.Noon!8.E7C9"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Samples\\(4).exe","infect":{"engine":"sha1","signature":"c2hhMTp1F30Cj/qeEcARoO+NBkaOqaGUhA","threat":"Trojan.Fuerboos!8.EFC8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Samples\\(6).exe","infect":{"engine":"sha1","signature":"c2hhMTrWBpIW/0TvNOzwqjlYLxsBFcHs1g","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Samples\\(3).exe","infect":{"engine":"sha1","signature":"c2hhMTpN8nJkyq6iRuq2UdYYrY5VTPGtbg","threat":"Trojan.Generic!8.C3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Samples\\(7).exe","infect":{"engine":"sha1","signature":"c2hhMToRRA9NBZ7hmV+vnPggXTvvXTfMYQ","threat":"Downloader.Generic!8.141"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Samples\\(5).exe","infect":{"engine":"sha1","signature":"c2hhMToyF3Z7QVPiLcMDRJf1wwwuQLAhrw","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus 7x 0529Agent2031\\Virus 7x 0529\\Samples\\(2).exe","infect":{"engine":"rdmk","signature":"cmRtazo0iLa3em47THSlt4ZT1E8O","threat":"Spyware.Noon!8.E7C9"},"type":"scan"}

扫描结束: Sat Jun 02 21:17:21 2018

总扫描耗时: 0:0:599(m:s:ms)
总扫描对象: 14
总扫描文件: 14
总恶意文件: 14
有效检出率: 100.00%



Emsisoft Emergency Kit - 版本 2018.4
上次更新： 2018-06-02 16:35:55
用户帐号： TECLAST\Admin
电脑名称： TECLAST
操作系统版本： Windows 10 x64

Emsisoft Emergency Kit 绿色免费版
(已开启)加入 Emsisoft 云、更新源：测试版
    Bitdefender（B）+Emsisoft（A） 双引擎

扫描设置：

扫描方式： 自定义扫描
对象： Rootkits, 内存, C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\

检测流氓软件(PUPs)： On
扫描压缩包： On
扫描邮件存档： Off
ADS数据流： On
文件扩展名过滤： Off
直接磁盘访问： Off

扫描开始于：        2018-06-02 21:12:58
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(3).exe         发现风险： Trojan.GenericKD.30897145 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(5).exe         发现风险： Trojan.GenericKD.30894838 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(7).exe         发现风险： Trojan.GenericKD.30903065 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(6).exe         发现风险： Trojan.GenericKD.30894509 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(1).exe         发现风险： Trojan.GenericKD.30895079 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(4).exe         发现风险： Trojan.GenericKD.30895331 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(2).exe         发现风险： Gen:Variant.Graftor.493647 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(1).exe         发现风险： Trojan.GenericKD.30895079 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(4).exe         发现风险： Trojan.GenericKDZ.44314 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(2).exe         发现风险： Trojan.GenericKD.30894269 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(5).exe         发现风险： Trojan.GenericKD.30894838 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(6).exe         发现风险： Trojan.GenericKD.30894509 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(7).exe         发现风险： Trojan.GenericKD.30902291 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(3).exe         发现风险： Gen:Variant.Razy.338620 (B) [krnl.xmd]

已扫描        1934
发现        14

扫描完成后：        2018-06-02 21:13:27
扫描时间：        0:00:29



ESET Smart Security Premium 64位（高级启发式（Y）+压缩文件（Y）+自解压加壳（Y）+DNA智能签名（Y）++（Windows 10 Creators Update（Redstone 4）....1803）：

日志
正在扫描日志
检测引擎的版本: 17487P (20180602)
日期: 2018-06-02  时间: 21:08:18
已扫描的磁盘、文件夹和文件: C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(1).exe - Win32/TrojanDownloader.Agent.DWX 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(2).exe - Win32/Injector.DYHK 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(3).exe - MSIL/Agent.APN 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(4).exe - Win32/Kryptik.GHEC 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(5).exe - MSIL/Kryptik.JCV 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(6).exe - Win32/Kryptik.GHFN 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Modified Samples\M(7).exe > NSIS > Script.nsi - NSIS/TrojanDownloader.Agent.NXI 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(1).exe - Win32/TrojanDownloader.Agent.DWX 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(2).exe - Win32/Injector.DYHK 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(3).exe - MSIL/Agent.APN 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(4).exe - Win32/Kryptik.GHEC 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(5).exe - MSIL/Kryptik.JCV 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(6).exe - Win32/Kryptik.GHFN 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus 7x 0529Agent2031\Virus 7x 0529\Samples\(7).exe > NSIS > Script.nsi - NSIS/TrojanDownloader.Agent.NXI 特洛伊木马 - 通过删除清除 [1]
已扫描的对象数: 22
发现的威胁数: 14
已清除对象数: 14
完成时间: 21:08:42  总扫描时间: 24 秒 (00:00:24)

备注:
[1] 由于对象中仅包含病毒主体，因此已被删除。



Dr.Web CureIt! 简体中文绿色免费版---（ Windows 7 Ultimate with SP1 简体中文旗舰版....）：

-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Command line used:-rpcep:\pipe\3AC7D0E11 -rpcpr:np

Limit the use of the computer resources to 100%
Instances used for this session: 10
Object(s) to scan:
- C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529


C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(6).exe - infected with Trojan.Emotet.207
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(7).exe is NSIS container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(6).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(5).exe - infected with Trojan.PWS.Stealer.23680
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(5).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(7).exe - container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(4).exe - infected with Trojan.Encoder.24384
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(4).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(2).exe - infected with Trojan.Inject1.54688
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(2).exe - infected
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(7).exe is NSIS container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(6).exe - infected with Trojan.Emotet.207
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(6).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(5).exe - infected with Trojan.PWS.Stealer.23680
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(5).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(7).exe - container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(3).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(2).exe - infected with Trojan.Inject1.54688
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(2).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(1).exe - infected with Trojan.Gootkit.92
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(1).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(3).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(4).exe - infected with Trojan.Encoder.24384
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(4).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(1).exe - infected with Trojan.Gootkit.92
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(1).exe - infected

Total 5084174 bytes in 14 files scanned (20 objects)
Total 4 files (10 objects) are clean
Total 10 files are infected
Scan time is 00:00:00.923


火绒安全---（ Windows 7 Ultimate with SP1 简体中文旗舰版....）：部分未知文件已发送到seclab@huorong.cn，等处理中。。。

病毒库：2018-06-02 14:54
开始时间：2018-06-02 20:27
总计用时：00:00:15
扫描对象：20个
扫描文件：14个
发现风险：14个
已处理风险：0个
发现系统修复项：0个
处理系统修复项：0个

病毒详情

风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(1).exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：[b27d4294cde6a1ec], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(2).exe, 病毒名：Trojan/Generic!9518D5F9BB66B9BC, 病毒ID：[9518d5f9bb66b9bc], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(5).exe, 病毒名：Trojan/Generic!671D3B3B64FFC4A4, 病毒ID：[671d3b3b64ffc4a4], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(6).exe, 病毒名：Trojan/Generic!F3DF94A0C8035D6A, 病毒ID：[f3df94a0c8035d6a], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(3).exe, 病毒名：Trojan/Generic!70999F95E199536D, 病毒ID：[70999f95e199536d], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(7).exe >> [NSIS].nsi, 病毒名：TrojanDownloader/Agent.qz, 病毒ID：[29651a9bf784b0b4], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(2).exe, 病毒名：Trojan/Generic!62492D2A54D17562, 病毒ID：[62492d2a54d17562], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(3).exe, 病毒名：Trojan/Generic!F9B5DCA9F83CD498, 病毒ID：[f9b5dca9f83cd498], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(5).exe, 病毒名：Trojan/Generic!0A89D6D2A363BB83, 病毒ID：[a89d6d2a363bb83], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(6).exe, 病毒名：Trojan/Generic!E854BBA20C4B24FF, 病毒ID：[e854bba20c4b24ff], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(7).exe >> [NSIS].nsi, 病毒名：TrojanDownloader/Agent.qz, 病毒ID：[29651a9bf784b0b4], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Modified Samples\M(4).exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：[b27d4294cde6a1ec], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(4).exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：[b27d4294cde6a1ec], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529\Samples\(1).exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：[b27d4294cde6a1ec], 处理结果：已忽略

文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus 7x 0529.rar
文件大小: 2.12 MB (2,225,238 字节)
修改时间: 2018年06月02日，20:26:17
MD5: 2749F5D6F6C3EA95BFAFC8F4B6D9ED6F
SHA1: 02745BB25BBC80D2FF64608A773CAE2546691D62
SHA256: 6BF14C4231698E36D32D4D041DEDC08C36909B5EF0D2D9D20EFAA35FE0588AB7
SHA512: 5F1263AB421B4713849B858FB087A4E99F6085D5DAF2E7018CDE45E6FE698F827EC398A6C8581361D1C6259E1394BC34EF88A339870CCA16F518E7791BA42934
CRC32: A059A61D
计算时间: 0.06s

回复

举报

123
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-1 10:37 , Processed in 0.087371 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表