楼主: Jerry.Lin
收起左侧

[病毒样本] 2【05.30】#VirusPackage 7x + Modified Samples

[复制链接]
pal家族
发表于 2018-6-1 09:43:36 | 显示全部楼层
microlao 发表于 2018-5-31 23:52
请问大大有没有繁中zhtw版本

请联系tw客服获取
microlao
发表于 2018-6-1 10:13:38 | 显示全部楼层
pal家族 发表于 2018-6-1 09:43
请联系tw客服获取

T^T 我嘗試一下
小飞侠.net
发表于 2018-6-3 20:52:33 | 显示全部楼层
本帖最后由 小飞侠.net 于 2018-6-3 21:23 编辑

X-Sec Antivirus ---(Windows 10 Creators Update(Redstone 4)....1803):

Basic Info:
---------------------
Database Version: 2018.05.31.01
Program Version: [图片]2.1.1.0
Heuristic Engine: Enabled
Cloud Engine: Enabled
Enhanced Mode: Disabled
Backup Before Resolve: Yes
Resolve Threats: Scan only
Scan Priority: Normal
---------------------
Targets:
---------------------
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053
---------------------
2018-06-03 21:22:25 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(2).exe -- [Cloud] Cloud:Backdoor.Win32.Remcos
2018-06-03 21:22:26 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(3).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018-06-03 21:22:27 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(4).exe -- [Cloud] Cloud:Trojan.Win32.Trickbot
2018-06-03 21:22:27 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(1).exe -- [Cloud] Cloud:Trojan.Win32.Ursnif
2018-06-03 21:22:27 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(5).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-03 21:22:28 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(7).msi -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-03 21:22:31 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(6).scr -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-03 21:22:35 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(1).exe -- [Cloud] Cloud:Trojan.Win32.Ursnif
2018-06-03 21:22:35 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(2).exe -- [Cloud] Cloud:Backdoor.Win32.Remcos
2018-06-03 21:22:36 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(3).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018-06-03 21:22:36 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(4).exe -- [Cloud] Cloud:Trojan.Win32.Trickbot
2018-06-03 21:22:36 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(5).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-03 21:22:37 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(7).msi -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-03 21:22:39 Threat Detected: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(6).scr -- [Cloud] Cloud:Trojan.Win32.Generic




    瑞星---(Windows 10 Creators Update(Redstone 4)....1803):云引擎(开)RDM+引擎(开)   
                瑞星反恶软引擎命令行扫描器(社区交流版)                 


编译于:Sep 22 2017   15:07:50

提示:
  - 本工具供社区交流使用,请勿用于其他用途
  - 本工具没有恶意软件删除、清除、隔离功能
  - 本工具包含开发中的新特性,结果仅供参考

* 命令行中的选项开关:-output-json -log=C:\瑞星RDM+引擎\ScanLog_180603211826.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053

* 加载恶软签名库: C:\瑞星RDM+引擎/malware.rmd
* 恶软签名库加载成功,发布序号为 4338
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Sun Jun 03 21:18:41 2018

{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Modified Samples\\M(7).msi","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Modified Samples\\M(3).exe","infect":{"engine":"sha1","signature":"c2hhMToMb+MOHSeRfXH+11cDWD2Xt+WBFw","threat":"Spyware.Agent!8.C6"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Modified Samples\\M(4).exe","infect":{"engine":"rdmk","signature":"cmRtazoAcj36HV3PX4aRw4PDNFXP","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Modified Samples\\M(6).scr","infect":{"engine":"sha1","signature":"c2hhMTpFZGlpJr4s779i+E7H5r8JWmpLpw","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Modified Samples\\M(5).exe","infect":{"engine":"sha1","signature":"c2hhMTrfzofikyda/MbUKU73S4GlW4pJeQ","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Samples\\(1).exe","infect":{"engine":"sha1","signature":"c2hhMToTR5VSSUbzck4FQauWoMfdvyhTig","threat":"Trojan.Kovter!8.152"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Modified Samples\\M(1).exe","infect":{"engine":"sha1","signature":"c2hhMTpX1Dem5gAwnMjfAyafAj0e+Q59og","threat":"Trojan.Kovter!8.152"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Modified Samples\\M(2).exe","infect":{"engine":"sha1","signature":"c2hhMToGMI4iO2kHEGKcfhGRSCdYEjttdg","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Samples\\(7).msi","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Samples\\(2).exe","infect":{"engine":"sha1","signature":"c2hhMTro3f2YB5vym4Jb/eKIWk+Oq24jnw","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Samples\\(3).exe","infect":{"engine":"sha1","signature":"c2hhMToGjbOepwQw2JCO2ww7shBePwblLA","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Samples\\(4).exe","infect":{"engine":"sha1","signature":"c2hhMToyvJzPgElCGyZ2UPjIb7Lb99f0Og","threat":"Trojan.TrickBot!8.E313"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Samples\\(5).exe","infect":{"engine":"sha1","signature":"c2hhMTrop3wBDFMB2NYhmrvjVPMZXfaSzw","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\2 Virus 7x 0529Obfuscator2053\\2 Virus 7x 0529\\Samples\\(6).scr","infect":{"engine":"sha1","signature":"c2hhMTrhuyMJTZj/Wvye1rPkelW+dBR57Q","threat":"Backdoor.Agent!8.C5D"},"type":"scan"}

扫描结束: Sun Jun 03 21:18:41 2018

总扫描耗时: 0:0:463(m:s:ms)
总扫描对象: 14
总扫描文件: 14
总恶意文件: 12
有效检出率: 85.71%



Emsisoft Emergency Kit - 版本 2018.4
上次更新: 2018-06-03 20:45:29
用户帐号: TECLAST\Admin
电脑名称: TECLAST
操作系统版本: Windows 10 x64

Emsisoft Emergency Kit 绿色免费版
(已开启)加入 Emsisoft 云、更新源:测试版
    Bitdefender(B)+Emsisoft(A) 双引擎

扫描设置:

扫描方式: 自定义扫描
对象: Rootkits, 内存, C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\

检测流氓软件(PUPs): On
扫描压缩包: On
扫描邮件存档: Off
ADS数据流: On
文件扩展名过滤: Off
直接磁盘访问: Off

扫描开始于:        2018-06-03 21:15:05
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(7).msi -> (Embedded EXE)         发现风险: Trojan.GenericKD.30900820 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(7).msi -> (Embedded EXE)         发现风险: Trojan.GenericKD.30900820 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(4).exe         发现风险: Trojan.TrickBot (A) [294055]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(3).exe         发现风险: Trojan.GenericKD.30899187 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(5).exe         发现风险: Trojan.GenericKD.30899643 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(6).scr         发现风险: Trojan.GenericKD.30900306 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(1).exe         发现风险: Trojan.GenericKD.30899919 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(2).exe         发现风险: Trojan.GenericKD.30899884 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(2).exe         发现风险: Trojan.Agent.CZPQ (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(4).exe         发现风险: Trojan.TrickBot (A) [294055]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(3).exe         发现风险: Trojan.GenericKD.30899187 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(1).exe         发现风险: Trojan.GenericKD.30899919 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(5).exe         发现风险: Trojan.GenericKD.30899643 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(6).scr         发现风险: Trojan.GenericKD.30900306 (B) [krnl.xmd]

已扫描        1833
发现        14

扫描完成后:        2018-06-03 21:15:31
扫描时间:        0:00:26



ESET Smart Security Premium 64位(高级启发式(Y)+压缩文件(Y)+自解压加壳(Y)+DNA智能签名(Y)++(Windows 10 Creators Update(Redstone 4)....1803):

日志
正在扫描日志
检测引擎的版本: 17487P (20180602)
日期: 2018-06-03  时间: 21:08:58
已扫描的磁盘、文件夹和文件: C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(1).exe - Win32/Spy.Ursnif.BR 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(2).exe - Win32/Injector.DYHU 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(3).exe - MSIL/Spy.Agent.AES 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(4).exe - Win32/TrickBot.AQ 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(5).exe - Win32/Kryptik.GHFU 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(6).scr - MSIL/Kryptik.OGZ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Modified Samples\M(7).msi > MSI > Binary._D7D112F049BA1A655B5D9A1D0702DEE5 - MSIL/TrojanDropper.Agent.DNB 特洛伊木马 的变种 - 扫描完成后再选择处理方式
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(1).exe - Win32/Spy.Ursnif.BR 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(2).exe - Win32/Injector.DYHU 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(3).exe - MSIL/Spy.Agent.AES 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(4).exe - Win32/TrickBot.AQ 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(5).exe - Win32/Kryptik.GHFU 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(6).scr - MSIL/Kryptik.OGZ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\2 Virus 7x 0529Obfuscator2053\2 Virus 7x 0529\Samples\(7).msi > MSI > Binary._D7D112F049BA1A655B5D9A1D0702DEE5 - MSIL/TrojanDropper.Agent.DNB 特洛伊木马 的变种 - 扫描完成后再选择处理方式
已扫描的对象数: 44
发现的威胁数: 14
已清除对象数: 12
完成时间: 21:09:13  总扫描时间: 15 秒 (00:00:15)

备注:
[1] 由于对象中仅包含病毒主体,因此已被删除。



Dr.Web CureIt! 简体中文绿色免费版---( Windows 7 Ultimate with SP1 简体中文旗舰版....):

-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Command line used:-rpcep:\pipe\112F0F6FB -rpcpr:np

Limit the use of the computer resources to 100%
Instances used for this session: 10
Object(s) to scan:
- C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529


C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(5).exe - infected with Trojan.EmotetENT.222
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(5).exe - infected
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(7).msi is OLE container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(3).exe - infected with Trojan.PWS.Stealer.19347
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(3).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(4).exe - infected with Trojan.Trick.46136
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(4).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(4).exe - infected with Trojan.Trick.46136
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(4).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(3).exe - infected with Trojan.PWS.Stealer.19347
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(3).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(5).exe - infected with Trojan.EmotetENT.222
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(5).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(6).scr - infected with Trojan.Nanocore.23
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(6).scr - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(7).msi\stream000 - infected with Trojan.PWS.Stealer.18836
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(7).msi - infected container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(1).exe - infected with Trojan.Siggen7.49533
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(1).exe - infected
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(7).msi is OLE container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(7).msi\stream000 - infected with Trojan.PWS.Stealer.18836
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(7).msi - infected container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(2).exe - infected with Trojan.PWS.Stealer.23680
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(2).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(6).scr - infected with Trojan.Nanocore.23
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(6).scr - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(2).exe - infected with Trojan.PWS.Stealer.23680
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(2).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(1).exe - infected with Trojan.Siggen7.49533
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(1).exe - infected

Total 6702742 bytes in 14 files scanned (16 objects)
There are no clean objects detected
Total 14 files are infected
Scan time is 00:00:01.143


火绒安全---( Windows 7 Ultimate with SP1 简体中文旗舰版....):部分未知文件已发送到seclab@huorong.cn,等处理中。。。

病毒库:2018-06-02 14:54
开始时间:2018-06-03 20:49
总计用时:00:00:15
扫描对象:16个
扫描文件:14个
发现风险:14个
已处理风险:0个
发现系统修复项:0个
处理系统修复项:0个

病毒详情

风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(1).exe, 病毒名:HVM:VirTool/Obfuscator.gen!A, 病毒ID:[b27d4294cde6a1ec], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(5).exe, 病毒名:Trojan/Generic!9BC672A997C5B13A, 病毒ID:[9bc672a997c5b13a], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(4).exe, 病毒名:Trojan/Generic!D98801032A65E226, 病毒ID:[d98801032a65e226], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(3).exe, 病毒名:Trojan/Generic!54F82A3645D95B57, 病毒ID:[54f82a3645d95b57], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(2).exe, 病毒名:Trojan/Generic!67A44078E6DFA118, 病毒ID:[67a44078e6dfa118], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(6).scr, 病毒名:Trojan/Generic!0D956502EA9EE480, 病毒ID:[d956502ea9ee480], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Modified Samples\M(7).msi, 病毒名:Trojan/Generic!5675EEC93054084D, 病毒ID:[5675eec93054084d], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(4).exe, 病毒名:Trojan/Generic!C919CE3D7BEF4252, 病毒ID:[c919ce3d7bef4252], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(3).exe, 病毒名:Trojan/Generic!5D78749F48219079, 病毒ID:[5d78749f48219079], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(2).exe, 病毒名:Trojan/Generic!79AE6B7AC0DCC760, 病毒ID:[79ae6b7ac0dcc760], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(5).exe, 病毒名:Trojan/Generic!21766BC5F266B09A, 病毒ID:[21766bc5f266b09a], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(7).msi, 病毒名:Trojan/Generic!3A8006522CBE9762, 病毒ID:[3a8006522cbe9762], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(6).scr, 病毒名:Trojan/Generic!2AA5D3183D273A62, 病毒ID:[2aa5d3183d273a62], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529\Samples\(1).exe, 病毒名:HVM:VirTool/Obfuscator.gen!A, 病毒ID:[b27d4294cde6a1ec], 处理结果:已忽略


文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\2 Virus 7x 0529.rar
文件大小: 3.92 MB (4,118,332 字节)
修改时间: 2018年06月03日,20:47:17
MD5: 49E04E3B1CE141A841687FF166215E35
SHA1: 49D47CC1D268708345A3F6536D0440E81539AB54
SHA256: 19ED8DF5A43DE9B3AD0DFD6B0F221C9D46F687E792A7B4C0A5AED6726090F288
SHA512: 7789783C7883DF3EE5744AB64EB2C60CA681E4CAAE56AB8B4B0DB082A990E201A7C961C28E00CD594199FA56DF162538157730A20EFD5668BF3CA91B65773A8F
CRC32: BB186CE3
计算时间: 0.14s

您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-4-26 00:49 , Processed in 0.100467 second(s), 14 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表