【05.31】#VirusPackage 13x + Modified Samples

Jerry.Lin

https://abuaaedugr-my.sharepoint ... -rgLMFs61g?e=Te0bub


请勿刻意上传至VT


如 Modified Samples 报毒名与原样本有较大出入，则不计算在内。
行为防御检测计算在内
鼓励双击，结果置顶


回帖格式建议

杀软名称 + 时间

Samples查杀率 + M_Samples查杀率 = Total



例如：

XXXX  05 22 21:27

Samples(5/10) + M(3/10) = Total(8/20)


----------------------------------------------
Second Scan 05 22 21:29

Samples(7/10) + M(3/10) = Total(10/20)

Jerry.Lin

AVIRA  05 31 21:41

Samples(13/13) + M(13/13) = Total(26/26)

全是启发+云杀

谁敢一战伞伞

1. 2018/5/31, 21:38:55 [Real-Time Protection] Malware found
   
2.         The pattern of 'HEUR/AGEN.1014677 [heuristic]'
   
3.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(13).scr'.
   
4.         Action performed: Delete file
   
5.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
   
6. 
   
7. 2018/5/31, 21:38:52 [Real-Time Protection] Malware found
   
8.         The pattern of 'TR/ATRAPS.Gen [trojan]'
   
9.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(12).exe'.
   
10.         Action performed: Delete file
    
11.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
12. 
    
13. 2018/5/31, 21:38:47 [Real-Time Protection] Malware found
    
14.         The pattern of 'TR/Crypt.XPACK.636497 (Cloud) [TR/Crypt.XPACK.636497]'
    
15.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(11).exe'.
    
16.         Action performed: Delete file
    
17.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
18. 
    
19. 2018/5/31, 21:38:33 [Real-Time Protection] Malware found
    
20.         The pattern of 'HEUR/APC (Cloud) [HEUR/APC]'
    
21.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(10).exe'.
    
22.         Action performed: Delete file
    
23.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
24. 
    
25. 2018/5/31, 21:38:19 [Real-Time Protection] Malware found
    
26.         The pattern of 'TR/Crypt.ZPACK.Gen [trojan]'
    
27.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(9).exe'.
    
28.         Action performed: Delete file
    
29.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
30. 
    
31. 2018/5/31, 21:38:13 [Real-Time Protection] Malware found
    
32.         The pattern of 'DR/Delphi.Gen (Cloud) [DR/Delphi.Gen]'
    
33.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(8).exe'.
    
34.         Action performed: Delete file
    
35.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
36. 
    
37. 2018/5/31, 21:37:55 [Real-Time Protection] Malware found
    
38.         The pattern of 'TR/Dropper.Gen [trojan]'
    
39.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(7).exe'.
    
40.         Action performed: Delete file
    
41.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
42. 
    
43. 2018/5/31, 21:37:52 [Real-Time Protection] Malware found
    
44.         The pattern of 'TR/Crypt.ZPACK.Gen [trojan]'
    
45.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(6).exe'.
    
46.         Action performed: Delete file
    
47.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
48. 
    
49. 2018/5/31, 21:37:46 [Real-Time Protection] Malware found
    
50.         The pattern of 'TR/Crypt.ZPACK.Gen [trojan]'
    
51.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(5).exe'.
    
52.         Action performed: Delete file
    
53.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
54. 
    
55. 2018/5/31, 21:37:40 [Real-Time Protection] Malware found
    
56.         The pattern of 'HEUR/AGEN.1014677 [heuristic]'
    
57.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(4).exe'.
    
58.         Action performed: Delete file
    
59.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
60. 
    
61. 2018/5/31, 21:37:36 [Real-Time Protection] Malware found
    
62.         The pattern of 'TR/Dropper.VB.f54442 (Cloud) [TR/Dropper.VB.f54442]'
    
63.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(3).exe'.
    
64.         Action performed: Delete file
    
65.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
66. 
    
67. 2018/5/31, 21:37:15 [Real-Time Protection] Malware found
    
68.         The pattern of 'HEUR/AGEN.1014677 [heuristic]'
    
69.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(2).exe'.
    
70.         Action performed: Delete file
    
71.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
72. 
    
73. 2018/5/31, 21:37:12 [Real-Time Protection] Malware found
    
74.         The pattern of 'HEUR/AGEN.1014677 [heuristic]'
    
75.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Modified Samples\M(1).exe'.
    
76.         Action performed: Delete file
    
77.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
78. 
    
79. 2018/5/31, 21:37:06 [Real-Time Protection] Malware found
    
80.         The pattern of 'HEUR/AGEN.1014677 [heuristic]'
    
81.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(13).scr'.
    
82.         Action performed: Delete file
    
83.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
84. 
    
85. 2018/5/31, 21:37:01 [Real-Time Protection] Malware found
    
86.         The pattern of 'HEUR/APC (Cloud) [HEUR/APC]'
    
87.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(12).exe'.
    
88.         Action performed: Delete file
    
89.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
90. 
    
91. 2018/5/31, 21:36:42 [Real-Time Protection] Malware found
    
92.         The pattern of 'TR/Crypt.XPACK.b2839f (Cloud) [TR/Crypt.XPACK.b2839f]'
    
93.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(11).exe'.
    
94.         Action performed: Delete file
    
95.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
96. 
    
97. 2018/5/31, 21:36:36 [Real-Time Protection] Malware found
    
98.         The pattern of 'TR/AD.Inject.Y (Cloud) [TR/AD.Inject.Y]'
    
99.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(10).exe'.
    
100.         Action performed: Delete file
     
101.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
     
102. 
     
103. 2018/5/31, 21:36:30 [Real-Time Protection] Malware found
     
104.         The pattern of 'TR/Dropper.VB.071973 (Cloud) [TR/Dropper.VB.071973]'
     
105.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(9).exe'.
     
106.         Action performed: Delete file
     
107.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
     
108. 
     
109. 2018/5/31, 21:36:26 [Real-Time Protection] Malware found
     
110.         The pattern of 'DR/Delphi.b6d77c (Cloud) [DR/Delphi.b6d77c]'
     
111.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(8).exe'.
     
112.         Action performed: Delete file
     
113.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
     
114. 
     
115. 2018/5/31, 21:36:21 [Real-Time Protection] Malware found
     
116.         The pattern of 'HEUR/APC (Cloud) [HEUR/APC]'
     
117.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(7).exe'.
     
118.         Action performed: Delete file
     
119.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
     
120. 
     
121. 2018/5/31, 21:36:00 [Real-Time Protection] Malware found
     
122.         The pattern of 'TR/Dropper.VB.91357f (Cloud) [TR/Dropper.VB.91357f]'
     
123.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(6).exe'.
     
124.         Action performed: Delete file
     
125.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
     
126. 
     
127. 2018/5/31, 21:35:54 [Real-Time Protection] Malware found
     
128.         The pattern of 'TR/Dropper.VB.1ccd7b (Cloud) [TR/Dropper.VB.1ccd7b]'
     
129.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(5).exe'.
     
130.         Action performed: Delete file
     
131.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
     
132. 
     
133. 2018/5/31, 21:35:50 [Real-Time Protection] Malware found
     
134.         The pattern of 'HEUR/AGEN.1014677 [heuristic]'
     
135.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(4).exe'.
     
136.         Action performed: Delete file
     
137.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
     
138. 
     
139. 2018/5/31, 21:35:45 [Real-Time Protection] Malware found
     
140.         The pattern of 'TR/Dropper.VB.35bb28 (Cloud) [TR/Dropper.VB.35bb28]'
     
141.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(3).exe'.
     
142.         Action performed: Delete file
     
143.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
     
144. 
     
145. 2018/5/31, 21:35:38 [Real-Time Protection] Malware found
     
146.         The pattern of 'HEUR/AGEN.1014677 [heuristic]'
     
147.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(2).exe'.
     
148.         Action performed: Delete file
     
149.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
     
150. 
     
151. 2018/5/31, 21:35:34 [Real-Time Protection] Malware found
     
152.         The pattern of 'HEUR/AGEN.1014677 [heuristic]'
     
153.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\Virus 13x 0531\Samples\(1).exe'.
     
154.         Action performed: Delete file
     
155.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
     
156. 
     

复制代码

x291502676

191196846 发表于 2018-5-31 21:39
AVIRA  05 31 21:41

Samples(13/13) + M(13/13) = Total(26/26)

伞伞这么强   误报咋样？

Dust-;羅錠

191196846 发表于 2018-5-31 21:39
AVIRA  05 31 21:41

Samples(13/13) + M(13/13) = Total(26/26)

可惜了，红伞弄了个启动器，让我断绝了对它的兴趣。我试了一下，即使是企业版也有那个启动器，红伞真是要一条路走到黑。

bambooslip

金山毒霸 05 30  21:50

Samples(1/13) + M(1/13) = Total(2/26)

1. 扫描时间：[2018-05-31 21:50:12]
   
2. 扫描用时：[00:00:04]
   
3. 扫描类型：自定义查杀
   
4. 扫描文件总数：13
   
5. 扫描速度：2文件/秒
   
6. 发现威胁：1个
   
7. 清除威胁：1个
   
8. =============================================
   
9. [2018-05-31 21:51:52]
   
10. 威胁：e:\病毒样本\卡饭\samples\(10).exe
    
11. 类型：win32.heur.kvmh017.a.(kcloud)
    
12. 处理方式：删除
    

复制代码

1. 扫描时间：[2018-05-31 21:52:50]
   
2. 扫描用时：[00:00:06]
   
3. 扫描类型：自定义查杀
   
4. 扫描文件总数：13
   
5. 扫描速度：1文件/秒
   
6. 发现威胁：1个
   
7. 清除威胁：1个
   
8. =============================================
   
9. [2018-05-31 21:53:10]
   
10. 威胁：e:\病毒样本\卡饭\modified samples\m(10).exe
    
11. 类型：win32.heur.kvm100.a
    
12. 处理方式：删除
    
13. 
    

复制代码

ATP_synthase

卡巴  0531 21：55
Samples(12/13) + M(4/13) = Total(16/26)
22:12补杀M9

ELOHIM

谁愿意跟伞伞一战啊！
SCEP SCAN MISS ALL

230f4

BITDEFENDER 2018-05-31-21:58

8/26

诸葛亮

191196846 发表于 2018-5-31 21:39
AVIRA  05 31 21:41

Samples(13/13) + M(13/13) = Total(26/26)

不少HEUR/AGEN报法，看来红伞本地ML引擎还不错

Jerry.Lin

x291502676 发表于 2018-5-31 21:43
伞伞这么强   误报咋样？

误报较少