#PACKAGE 0604

aboringman

Dr.Web：S【5/22】+M【4/22】=T【9/44】

哈哈哈哈哈

ziyerain2015

AVAST 6-4 21:59
Samples(13/22) + M(13/22) = Total(26/44)

Jerry.Lin

aboringman 发表于 2018-6-4 21:51
Dr.Web：S【5/22】+M【4/22】=T【9/44】

哈哈哈哈哈

……这个检测率

ELOHIM

scep 又增加了三个，懒得更新了。。


21#样本应该有意思：VirTool:Win32/AutInject.SL!bit

aboringman

191196846 发表于 2018-6-4 22:04
……这个检测率

我绝对不会用它测双击的，虽然我刚才试了下，但是最终没兴趣了。。。。。。

挖矿过，其他各种过，17个里面随便挑了个很幸运是注入被DPH杀掉。

总结就是心好累。。。。。。

Jerry.Lin

aboringman 发表于 2018-6-4 22:10
我绝对不会用它测双击的，虽然我刚才试了下，但是最终没兴趣了。。。。。。

挖矿过，其他各种过，17个 ...

淡定

WCMS

AVG 06 04 22:57
19:05毒库
样本（14/22）+ M（14 / 22）=合计（28/44）双击新增2x

bbs2811125

ESET 23:23 占位
Samples(21/22) + M(18/22) = Total(39/44)

1. Log
   
2. Scan Log
   
3. Version of detection engine: 17497P (20180604)
   
4. Date: 2018/6/4  Time: 23:23:59
   
5. Scanned disks, folders and files: C:\Users\Administrator\Desktop\PACKAGE 0604
   
6. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(11).exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.DGN trojan - cleaned by deleting [1]
   
7. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(12).exe - a variant of Win32/Agent.SVO trojan - cleaned by deleting [1]
   
8. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(13).exe - a variant of MSIL/Packed.Babel.C trojan - cleaned by deleting [1]
   
9. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(14).exe - a variant of Win32/Kryptik.GHJZ trojan - cleaned by deleting [1]
   
10. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(15).exe - a variant of Win32/Injector.DYJW trojan - cleaned by deleting [1]
    
11. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(16).exe - a variant of Win32/Spy.KeyLogger.NJK trojan - cleaned by deleting [1]
    
12. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(17).exe - Win32/Spy.Zbot.ADC trojan - cleaned by deleting [1]
    
13. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(18).exe » AUTOIT » script.au3 - Win32/CoinMiner.BHW trojan - cleaned by deleting [1]
    
14. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(18).exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.ANX trojan - cleaned by deleting [1]
    
15. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(19).dll - a variant of Win32/Exploit.CVE-2017-8759.O trojan - cleaned by deleting [1]
    
16. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(2).exe - a variant of Win64/CoinMiner.DC potentially unwanted application - cleaned by deleting [1]
    
17. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(20).msi » MSI » Binary._D7D112F049BA1A655B5D9A1D0702DEE5 - a variant of MSIL/Kryptik.NMB trojan - deleted
    
18. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(21).msi » MSI » Binary._D7D112F049BA1A655B5D9A1D0702DEE5 » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.DCM trojan - deleted
    
19. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(22).scr » WINRARSFX » wjh.mp3 - Win32/Injector.Autoit.CNO trojan - cleaned by deleting [1]
    
20. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(3).exe - a variant of Win32/Injector.DYKL trojan - cleaned by deleting [1]
    
21. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(6).exe - a variant of MSIL/TrojanDropper.Agent.DNB trojan - cleaned by deleting [1]
    
22. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(7).exe - a variant of Win32/Kryptik.GHIX trojan - cleaned by deleting [1]
    
23. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(8).exe - a variant of Win32/Injector.DYJO trojan - cleaned by deleting [1]
    
24. C:\Users\Administrator\Desktop\PACKAGE 0604\Modified Samples\(9).exe » WINRARSFX » qqpcdetector.dll - a variant of Win32/Korplug.FM trojan - cleaned by deleting [1]
    
25. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(1).exe - a variant of Generik.IOBWHPF trojan - cleaned by deleting [1]
    
26. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(10).exe - a variant of Win32/Injector.DHGQ trojan - cleaned by deleting [1]
    
27. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(11).exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.DGN trojan - cleaned by deleting [1]
    
28. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(12).exe - a variant of Win32/Agent.SVO trojan - cleaned by deleting [1]
    
29. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(13).exe - a variant of MSIL/Packed.Babel.C trojan - cleaned by deleting [1]
    
30. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(14).exe - a variant of Win32/Kryptik.GHJZ trojan - cleaned by deleting [1]
    
31. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(15).exe - a variant of Win32/Injector.DYJW trojan - cleaned by deleting [1]
    
32. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(16).exe - a variant of Win32/Spy.KeyLogger.NJK trojan - cleaned by deleting [1]
    
33. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(17).exe - Win32/Spy.Zbot.ADC trojan - cleaned by deleting [1]
    
34. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(18).exe » AUTOIT » script.au3 - Win32/CoinMiner.BHW trojan - cleaned by deleting [1]
    
35. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(18).exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.ANX trojan - cleaned by deleting [1]
    
36. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(19).dll - a variant of Win32/Exploit.CVE-2017-8759.O trojan - cleaned by deleting [1]
    
37. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(2).exe - a variant of Win64/CoinMiner.DC potentially unwanted application - cleaned by deleting [1]
    
38. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(20).msi » MSI » Binary._D7D112F049BA1A655B5D9A1D0702DEE5 - a variant of MSIL/Kryptik.NMB trojan - deleted
    
39. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(21).msi » MSI » Binary._D7D112F049BA1A655B5D9A1D0702DEE5 » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.DCM trojan - deleted
    
40. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(22).scr » WINRARSFX » wjh.mp3 - Win32/Injector.Autoit.CNO trojan - cleaned by deleting [1]
    
41. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(3).exe - a variant of Win32/Injector.DYKL trojan - cleaned by deleting [1]
    
42. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(4).exe - a variant of Generik.HGVVNMV trojan - cleaned by deleting [1]
    
43. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(6).exe - a variant of MSIL/TrojanDropper.Agent.DNB trojan - cleaned by deleting [1]
    
44. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(7).exe - a variant of Win32/Kryptik.GHIX trojan - cleaned by deleting [1]
    
45. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(8).exe - a variant of Win32/Injector.DYJO trojan - cleaned by deleting [1]
    
46. C:\Users\Administrator\Desktop\PACKAGE 0604\Samples\(9).exe » WINRARSFX » qqpcdetector.dll - a variant of Win32/Korplug.FM trojan - cleaned by deleting [1]
    
47. Number of scanned objects: 216
    
48. Number of threats found: 41
    
49. Number of cleaned objects: 41
    
50. Time of completion: 23:25:52  Total scanning time: 113 sec (00:01:53)
    
51. 
    

复制代码

剩余样本SEP清空

欧阳宣

mcafee 23:32

15/22+M5/22 = 20/44

zst470396853

360卫视

Samples(20/22) + M(16/22) = Total(36/44)