#3（18.06.06）

petr0vic

modifed hash

https://my.mixtape.moe/ablkuf.7z

infected

2605276004x

Kaspersky miss all

Jerry.Lin

AVIRA KILL ALL

1. 2018/6/6, 17:44:05 [Real-Time Protection] Malware found
   
2.         The pattern of 'HEUR/APC (Cloud) [HEUR/APC]'
   
3.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\ablkuf\3.exe'.
   
4.         Action performed: Delete file
   
5.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
   
6. 
   
7. 2018/6/6, 17:43:37 [Real-Time Protection] Malware found
   
8.         The pattern of 'HEUR/APC (Cloud) [HEUR/APC]'
   
9.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\ablkuf\2.exe'.
   
10.         Action performed: Delete file
    
11.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
12. 
    
13. 2018/6/6, 17:43:14 [Real-Time Protection] Malware found
    
14.         The pattern of 'TR/Dropper.Gen [trojan]'
    
15.         detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\ablkuf\1.exe'.
    
16.         Action performed: Delete file
    
17.         User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
    
18. 
    

复制代码

Jerry.Lin

2605276004x 发表于 2018-6-6 17:32
Kaspersky miss all

UDS没响应吗

ATP_synthase

191196846 发表于 2018-6-6 17:44
KILL ALL

红伞这么可怕的吗，卡巴全miss

Jerry.Lin

wusiyuanjh 发表于 2018-6-6 17:46
红伞这么可怕的吗，卡巴全miss

Modified Hash

当然MISS 啦

怀念以前的UDS: Dangerous Pattern

Jerry.Lin

wusiyuanjh 发表于 2018-6-6 17:46
红伞这么可怕的吗，卡巴全miss

改MD5过不了红伞云

测试过非常多次了

ATP_synthase

191196846 发表于 2018-6-6 17:48
改MD5过不了红伞云

测试过非常多次了

想用红伞了，但是那启动器受不了

Jerry.Lin

wusiyuanjh 发表于 2018-6-6 17:49
想用红伞了，但是那启动器受不了

给Launcher 文件夹设权限就可以了

全部选拒绝

我现在就是这样用的

ATP_synthase

191196846 发表于 2018-6-6 17:51
给Launcher 文件夹设权限就可以了

全部选拒绝

可是红伞只有avpro价格合适，没有便宜的is啊，少个防火墙心里不安全