#PACKAGE 0620

显示全部楼层 · 发表于 2018-6-20 21:24:21

本帖最后由 191196846 于 2018-6-20 21:59 编辑

蓝奏

Total : 27

========================================
These products were tested before package released:

Products                      Pre-execute Advanced block    Miss       Status

Windows Defender          20                      3                      4          Infected
Qihoo 360 SD                   21                      3                      3          Infected

Note: Pre-execute includes On-Access scan or exeute scan before malware is running on memory.
      Advanced block includes behavior block or other techiques that successufully terminate running malware.
      Miss includes situations: no any Alert or warning from AV software.
      Status means if there are any malicious items, including processes, images, drivers, autoruns, regs etc., on the current system, the system is infected; otherwise it is clean.

========================================

#勿传VT
#在样本有效期内（24小时），建议无需手动上报样本至厂商，便于其他人测试行为拦截，响应速度等
#样本序号以收集时间顺序排序，越大代表越接近现在时间

回帖格式建议

杀软名称 + 时间
查杀数量+查杀率

例如：
XXX 20:39
Samples(5/10) 50%

显示全部楼层 · 发表于 2018-6-20 22:10:23

本帖最后由 YU2711 于 2018-6-20 22:49 编辑

Norton Security 22:09
22/27 双击
1C:\Users\User\AppData\Local\Temp\is-5VNV8.tmp里的衍生物机器B杀
11Miss
13SONAR.Heuristic.170
18SONAR.SuspLaunch!g12
20SONAR.Heuristic.170
1双击第2次SONAR.Heuristic.170

显示全部楼层 · 发表于 2018-6-20 22:28:24

本帖最后由 wusiyuanjh 于 2018-6-20 22:33 编辑

卡巴扫描杀14个，双击测试，2号阻止危险网址，4、7、11、13、15、20、24、25号主防杀
22/27

显示全部楼层 · 发表于 2018-6-20 22:44:00

本帖最后由 B100D1E55 于 2018-6-20 23:10 编辑

ESET剩余6，20两个文件，其中20杀vbe衍生物，6被AMS杀injector

显示全部楼层 · 发表于 2018-6-20 23:06:56

迈克菲扫描7/27 2018年6月20日22:54:15

双击
1 不报
2 报Real Protect-LS!049cedad8275
3 报DAC/Suspect.0:0:3eb!24075858b86a
4 报Real Protect-LS!7c631b2c975e
5 不报
6 报DAC/Suspect.0:0:3eb!dbe5b23fcd94
7 报Real Protect-EC!18D497C9F08B
9 报Real Protect-LS!798f646cc38b
10 报Real Protect-LS!3189a6e7f59c
12 报Real Protect-LS!2098632942f0
13 不报
15 报Real Protect-EC!0E5E9AD6B349
17 报Real Protect-LS!954aa2ceb943
18 报Real Protect-LS!c93d77e073de
19 报Real Protect-LS!beb38b76a4ee
20 报Real Protect-EC!35DB5309D751
21 报Real Protect-LS!1988b9cc50f0
22 报Real Protect-LS!01db05781b1e
24 报Real Protect-LS!13b9ed052cc4
25 报Real Protect-LS!75ab4f9f2785
27 报Real Protect-EC!72D63A589DC4

最后成绩 24/27 88％

显示全部楼层 · 发表于 2018-6-20 21:37:29

本帖最后由 ELOHIM 于 2018-6-20 21:46 编辑

SCEP KILL 10 21:38 37%

显示全部楼层 · 发表于 2018-6-20 21:40:18

WD 2018/06/20 21:40
24/27

显示全部楼层 · 发表于 2018-6-20 21:55:29

KIS 19 KSN-off
14/27

瑞星RDM+社区版
8/27

瑞星ML社区版
11/27

显示全部楼层 · 发表于 2018-6-20 22:10:38

瑞星V17 20:39
Samples(4/27)
运行7.exe,瑞星之剑拦截成功

19.exe触发注册表保护，拦截成功

剩下的均运行成功。。。

显示全部楼层 · 发表于 2018-6-20 22:14:49

本帖最后由 191196846 于 2018-6-20 22:18 编辑

22:13

27/27 100%

炒鸡多次出现上传的弹窗……Uploading... Analyzing... Infected!
爽

2018/6/20, 22:12:41 [Real-Time Protection] Malware found
The pattern of 'TR/Injector.vkkla (Cloud) [TR/Injector.vkkla]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(27).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:12:35 [Real-Time Protection] Malware found
The pattern of 'DR/Delphi.47fc88 (Cloud) [DR/Delphi.47fc88]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(26).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:12:30 [Real-Time Protection] Malware found
The pattern of 'TR/Crypt.XPACK.7973cf (Cloud) [TR/Crypt.XPACK.7973cf]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(25).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:12:26 [Real-Time Protection] Malware found
The pattern of 'DR/Delphi.4cc805 (Cloud) [DR/Delphi.4cc805]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(23).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:11:57 [Real-Time Protection] Malware found
The pattern of 'TR/Crypt.XPACK.3379db (Cloud) [TR/Crypt.XPACK.3379db]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(22).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:11:52 [Real-Time Protection] Malware found
The pattern of 'TR/ATRAPS.Gen [trojan]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(21).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:11:49 [Real-Time Protection] Malware found
The pattern of 'HEUR/AGEN.1029336 [heuristic]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(19).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:11:46 [Real-Time Protection] Malware found
The pattern of 'HEUR/AGEN.1019180 [heuristic]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(18).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:11:42 [Real-Time Protection] Malware found
The pattern of 'TR/Dropper.MSIL.ef14de (Cloud) [TR/Dropper.MSIL.ef14de]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(17).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:11:33 [Real-Time Protection] Malware found
The pattern of 'DR/Delphi.Gen (Cloud) [DR/Delphi.Gen]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(16).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:11:13 [Real-Time Protection] Malware found
The pattern of 'TR/Crypt.Agent.9a4333 (Cloud) [TR/Crypt.Agent.9a4333]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(15).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:10:55 [Real-Time Protection] Malware found
The pattern of 'TR/AD.njLogger.Y (Cloud) [TR/AD.njLogger.Y]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(14).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:10:49 [Real-Time Protection] Malware found
The pattern of 'TR/Crypt.EPACK.083369 (Cloud) [TR/Crypt.EPACK.083369]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(13).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:10:43 [Real-Time Protection] Malware found
The pattern of 'TR/Crypt.XPACK.ea3057 (Cloud) [TR/Crypt.XPACK.ea3057]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(12).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:10:37 [Real-Time Protection] Malware found
The pattern of 'TR/AD.Sagonaire.Y (Cloud) [TR/AD.Sagonaire.Y]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(11).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:10:31 [Real-Time Protection] Malware found
The pattern of 'TR/Crypt.XPACK.2f6299 (Cloud) [TR/Crypt.XPACK.2f6299]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(10).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:10:26 [Real-Time Protection] Malware found
The pattern of 'TR/Dropper.MSIL.286650 (Cloud) [TR/Dropper.MSIL.286650]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(9).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:10:09 [Real-Time Protection] Malware found
The pattern of 'TR/Crypt.XPACK.Gen [trojan]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(8).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:09:59 [Real-Time Protection] Malware found
The pattern of 'TR/Kryptik.b8d772 (Cloud) [TR/Kryptik.b8d772]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(7).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:09:40 [Real-Time Protection] Malware found
The pattern of 'TR/Dropper.VB.e5ca91 (Cloud) [TR/Dropper.VB.e5ca91]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(6).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:09:37 [Real-Time Protection] Malware found
The pattern of 'TR/Injector.ba1c9d (Cloud) [TR/Injector.ba1c9d]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(5).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:09:31 [Real-Time Protection] Malware found
The pattern of 'TR/Dropper.VB.eafe26 (Cloud) [TR/Dropper.VB.eafe26]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(3).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:09:15 [Real-Time Protection] Malware found
The pattern of 'TR/Kryptik.19522d (Cloud) [TR/Kryptik.19522d]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(2).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:09:04 [Real-Time Protection] Malware found
The pattern of 'TR/Crypt.Agent.c2a297 (Cloud) [TR/Crypt.Agent.c2a297]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(1).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:07:47 [Real-Time Protection] Malware found
The pattern of 'TR/Kryptik.ncsrs [trojan]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(24).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:07:45 [Real-Time Protection] Malware found
The pattern of 'TR/Kryptik.ncsrs [trojan]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(24).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:07:45 [Real-Time Protection] Malware found
The pattern of 'TR/Bicololo.sfpjv [trojan]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(20).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001
2018/6/20, 22:07:44 [Real-Time Protection] Malware found
The pattern of 'TR/AD.Emotet.kjtmf [trojan]'
detected in file 'C:\Users\zhong\Downloads\Compressed\VIRUS TEST\PACKAGE0620\(4).exe'.
Action performed: Delete file
User SID: S-1-5-21-3774652721-2607747548-2788097174-1001

复制代码

显示全部楼层 · 发表于 2018-6-20 22:34:35

FS纯扫描kill13

[病毒样本] #PACKAGE 0620

评分

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

评分