样本集奉上_63 (09.04)

显示全部楼层 · 发表于 2018-9-5 09:36:43

本帖最后由 Llano_心情于 2018-9-5 09:46 编辑

瑞星安全云终端 14X 全部是云，所以是云端进行了解壳分析？

2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(10).vir Malware.Undefined!8.C
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(12).vir Trojan.Dynamer!8.3A0
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(14).vir Trojan.Fuerboos!8.EFC8
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(3).vir Malware.Undefined!8.C
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(19).vir HackTool.VBInject!8.1A0
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(34).vir HackTool.VBInject!8.1A0
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(31).vir Trojan.Fuerboos!8.EFC8
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(38).vir HackTool.VBInject!8.1A0
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(36).vir Trojan.Dynamer!8.3A0
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(41).vir Trojan.Kryptik!8.8
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(49).vir Trojan.Fuerboos!8.EFC8
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(6).vir Trojan.Dynamer!8.3A0
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(50).vir HackTool.VBInject!8.1A0
2018/9/5 9:34 C:\Users\llanoMe\Desktop\VirusSamples_63\Samp(5).vir Trojan.Fuerboos!8.EFC8

复制代码

显示全部楼层 · 发表于 2018-9-5 09:39:53

瑞星社区2.0 RDM+ 50X清空

瑞星反恶软引擎命令行扫描器（社区交流版）
编译于：Sep 22 2017 15:07:50
提示：
- 本工具供社区交流使用，请勿用于其他用途
- 本工具没有恶意软件删除、清除、隔离功能
- 本工具包含开发中的新特性，结果仅供参考
* 命令行中的选项开关：-output-json -log=D:\安全软件\RDM_rdm+\ScanLog_180905093834.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\llanoMe\Desktop\VirusSamples_63
* 加载恶软签名库： D:\安全软件\RDM_rdm+/malware.rmd
* 恶软签名库加载成功，发布序号为 4894
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Wed Sep 05 09:38:40 2018
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(11).vir","infect":{"engine":"rdmk","signature":"cmRtazoJN109h5RkKh7lhL63y/tB","threat":"Malware.Heuristic!ET#97%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(1).vir","infect":{"engine":"rdmk","signature":"cmRtazrkKJQSCnc4q+K30G2JBtAO","threat":"Malware.Heuristic!ET#97%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(15).vir","infect":{"engine":"rdmk","signature":"cmRtazoUWhmUJ1R6psGvMnqZTO/5","threat":"Malware.Heuristic!ET#95%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(10).vir","infect":{"engine":"md5","signature":"bWQ1OlmbJRJH5e28Amxm9ET4128","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(14).vir","infect":{"engine":"md5","signature":"bWQ1Orykl1nNx6eX6o1Q07XhHM0","threat":"Trojan.Fuerboos!8.EFC8"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(12).vir","infect":{"engine":"md5","signature":"bWQ1Ot5iZ1R+aOIhop/SbnlCIAQ","threat":"Trojan.Dynamer!8.3A0"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(16).vir","infect":{"engine":"rdmk","signature":"cmRtazqbuXLTEQ0ABddfg/gn9hsp","threat":"Malware.Heuristic!ET#99%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(13).vir","infect":{"engine":"rdmk","signature":"cmRtazo+O275I3ew74mPSk78JKxF","threat":"Malware.Heuristic!ET#90%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(17).vir","infect":{"engine":"rdmk","signature":"cmRtazq8wTgsILm/iRPc8kOFr3e0","threat":"Malware.Heuristic!ET#97%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(19).vir","infect":{"engine":"md5","signature":"bWQ1OnPQ4NIuSh1VLoIPbN2S6Q0","threat":"HackTool.VBInject!8.1A0"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(21).vir","infect":{"engine":"rdmk","signature":"cmRtazom1FO1ArMrH1WwM9OCmnnx","threat":"Malware.Heuristic!ET#99%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(18).vir","infect":{"engine":"rdmk","signature":"cmRtazoFnAweXjtd2cHth6+T6g8R","threat":"Malware.Heuristic!ET#96%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(22).vir","infect":{"engine":"rdmk","signature":"cmRtazol3Cxh8xCkp6nXNzHlNkp8","threat":"Malware.Heuristic!ET#100%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(20).vir","infect":{"engine":"rdmk","signature":"cmRtazod9gQYBZhuun/iS+l2NHBj","threat":"Malware.Heuristic!ET#93%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(23).vir","infect":{"engine":"tfe","signature":"dGZlOgVCc8DJ+ulJZA","threat":"Stealer.Delf!8.415"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(2).vir","infect":{"engine":"rdmk","signature":"cmRtazoSwFJuUrJ2JCMmBxMqsZV4","threat":"Malware.Heuristic!ET#92%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(24).vir","infect":{"engine":"rdmk","signature":"cmRtazr+lUH9x71Z8DUdPa2fvtum","threat":"Malware.Heuristic!ET#99%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(26).vir","infect":{"engine":"rdmk","signature":"cmRtazpLzaX4ygBzobKGfBffiipE","threat":"Malware.Heuristic!ET#97%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(25).vir","infect":{"engine":"rdmk","signature":"cmRtazqk+ess6kMxqVdnpftbI/Q4","threat":"Malware.Heuristic!ET#99%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(29).vir","infect":{"engine":"rdmk","signature":"cmRtazo4XQWbkHGPzZA+C4JfgYhC","threat":"Malware.Heuristic!ET#97%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(27).vir","infect":{"engine":"rdmk","signature":"cmRtazrDSaAiOgdL5kWrzQZ3DdmS","threat":"Malware.Heuristic!ET#95%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(3).vir","infect":{"engine":"md5","signature":"bWQ1OiGYOo/NimLkxEPxSj8IqAM","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(30).vir","infect":{"engine":"rdmk","signature":"cmRtazr9fbbJcvBHJOX63k+DmT4u","threat":"Malware.Heuristic!ET#95%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(28).vir","infect":{"engine":"rdmk","signature":"cmRtazp+rhMoWYGtNXzaSg2MiyM0","threat":"Malware.Heuristic!ET#95%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(31).vir","infect":{"engine":"md5","signature":"bWQ1OmGHOn2OH297JzInt3EVQ/E","threat":"Trojan.Fuerboos!8.EFC8"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(32).vir","infect":{"engine":"rdmk","signature":"cmRtazr+8hOzhCPVIeHbxT3OSS5B","threat":"Malware.Heuristic!ET#92%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(33).vir","infect":{"engine":"rdmk","signature":"cmRtazreMs/QuuaC2O5QLksLIvfa","threat":"Malware.Heuristic!ET#95%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(36).vir","infect":{"engine":"md5","signature":"bWQ1OpKyK76zA6oWk6WJXzOY7pY","threat":"Trojan.Dynamer!8.3A0"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(35).vir","infect":{"engine":"rdmk","signature":"cmRtazriSdkiPqe2ovxnleovuxbk","threat":"Malware.Heuristic!ET#99%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(34).vir","infect":{"engine":"md5","signature":"bWQ1Orgped08E01xldPCp6M4bxw","threat":"HackTool.VBInject!8.1A0"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(37).vir","infect":{"engine":"rdmk","signature":"cmRtazqjRV754P3VBKTAWQx5NDmB","threat":"Malware.Heuristic!ET#97%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(38).vir","infect":{"engine":"md5","signature":"bWQ1Ok/2w9Q7gDnJulGBs0q4U7g","threat":"HackTool.VBInject!8.1A0"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(39).vir","infect":{"engine":"rdmk","signature":"cmRtazrNXfhtzd8mQh/d1hztjY7H","threat":"Malware.Heuristic!ET#95%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(4).vir","infect":{"engine":"rdmk","signature":"cmRtazr/Hr3NU2c1WC5y6OsbDgSi","threat":"Malware.Heuristic!ET#96%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(41).vir","infect":{"engine":"md5","signature":"bWQ1OkHp3bajJSgbhuO9aCF/BdU","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(40).vir","infect":{"engine":"rdmk","signature":"cmRtazqv+BvzrW3KdwaZfTRA1BZ3","threat":"Malware.Heuristic!ET#98%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(43).vir","infect":{"engine":"rdmk","signature":"cmRtazrmY+4ipuIGwAEMTDA6+qf/","threat":"Malware.Heuristic!ET#100%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(44).vir","infect":{"engine":"rdmk","signature":"cmRtazqwysifukobA36cIKzlPuGO","threat":"Malware.Heuristic!ET#95%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(42).vir","infect":{"engine":"rdmk","signature":"cmRtazrbIRD8wxvTIkA2jZbK+lMj","threat":"Malware.Heuristic!ET#96%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(45).vir","infect":{"engine":"rdmk","signature":"cmRtazr9br03Uwt5TnvI2Rn7aRXg","threat":"Malware.Heuristic!ET#100%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(46).vir","infect":{"engine":"rdmk","signature":"cmRtazrMSTBq+CeExPxdiPmANJd/","threat":"Malware.Heuristic!ET#99%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(47).vir","infect":{"engine":"rdmk","signature":"cmRtazo7g73RusGuMUxjXQcjwf81","threat":"Malware.Heuristic!ET#97%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(48).vir","infect":{"engine":"rdmk","signature":"cmRtazq9QzJNf9yUynmkPJcaK0sQ","threat":"Malware.Heuristic!ET#96%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(49).vir","infect":{"engine":"md5","signature":"bWQ1OvVSnLkSl+PImXnXc+yiVn8","threat":"Trojan.Fuerboos!8.EFC8"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(5).vir","infect":{"engine":"md5","signature":"bWQ1On5QgLFi+J+7qy5rDpAI53o","threat":"Trojan.Fuerboos!8.EFC8"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(50).vir","infect":{"engine":"md5","signature":"bWQ1OgQ/WNDKb9INhzfUEzFJK+4","threat":"HackTool.VBInject!8.1A0"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(7).vir","infect":{"engine":"rdmk","signature":"cmRtazqMAlFKQ1K8UiJbemAr8eMz","threat":"Malware.Heuristic!ET#99%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(6).vir","infect":{"engine":"md5","signature":"bWQ1OlN5irxtD49JE9IgcgpmzeM","threat":"Trojan.Dynamer!8.3A0"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(8).vir","infect":{"engine":"rdmk","signature":"cmRtazo/EeCrNEQ0oTaCCjpEF5TF","threat":"Malware.Heuristic!ET#98%"},"type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(9).vir","infect":{"engine":"rdmk","signature":"cmRtazpAvqwGyx33EYyRUlDx8m90","threat":"Malware.Heuristic!ET#97%"},"type":"scan"}
扫描结束: Wed Sep 05 09:38:41 2018
总扫描耗时: 0:0:646(m:s:ms)
总扫描对象: 50
总扫描文件: 50
总恶意文件: 50
有效检出率: 100.00%

复制代码

显示全部楼层 · 发表于 2018-9-5 09:41:36

瑞星社区3.0 8X

-= | RISING ANTI-MALWARE SCANNER FOR WINDOWS | =-
* Compile time: Aug 6 2018 , 09:59:17
* Options in command-line:-output-json -cloud=1 -enable-asg=1 -enable-tfe=1 -log=D:\安全软件\RDM_tfe3.0\ScanLog_180905094050.log
* Detection target : (1) C:\Users\llanoMe\Desktop\VirusSamples_63
* Using malware-signature database: D:\安全软件\RDM_tfe3.0/malware.rmd
* Version of malwre-signature database : 4894
* Cloud-assisted component initializes failed.
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
Scan started on Wed Sep 05 09:40:51 2018
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(14).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(15).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(16).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(12).vir","infect":{"engine":"tfe","signature":"5:xtkdiwMofAL","threat":"T*o*a*.*y*a*e*!*.*A*"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(11).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(13).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(10).vir","infect":{"engine":"tfe","signature":"2:gjX1R8bqbEK","threat":"M*l*a*e*U*d*f*n*d*8*C"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(1).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(17).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(21).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(20).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(18).vir","infect":{"engine":"tfe","signature":"5:J4jllZyiURF","threat":"B*c*d*o*.*y*l*s*i*8*1*D"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(2).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(19).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(22).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(24).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(23).vir","infect":{"engine":"tfe","signature":"5:Ad7U1t7tzlI","threat":"S*e*l*r*D*l*!*.*1*"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(25).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(26).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(27).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(29).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(28).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(3).vir","infect":{"engine":"tfe","signature":"5:982Uw8HD6C","threat":"M*l*a*e*U*d*f*n*d*8*C"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(30).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(31).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(32).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(34).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(36).vir","infect":{"engine":"tfe","signature":"5:xtkdiwMofAL","threat":"T*o*a*.*y*a*e*!*.*A*"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(33).vir","infect":{"engine":"tfe","signature":"5:J4jllZyiURF","threat":"B*c*d*o*.*y*l*s*i*8*1*D"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(35).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(38).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(37).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(39).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(40).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(4).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(43).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(42).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(44).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(45).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(46).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(47).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(49).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(48).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(5).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(50).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(6).vir","infect":{"engine":"tfe","signature":"5:xtkdiwMofAL","threat":"T*o*a*.*y*a*e*!*.*A*"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(7).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(41).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(9).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(8).vir","show":"MTU","type":"scan"}
Scan ended on Wed Sep 05 09:40:52 2018
Duration : 0:0:587(m:s:ms)
Objects : 8 / 50 = 16.00%
Files : 8 / 50 = 16.00%

复制代码

显示全部楼层 · 发表于 2018-9-5 09:45:10

瑞星社区,ML 45X

-= | RISING ANTI-MALWARE SCANNER FOR WINDOWS | =-
* Compile time: May 8 2018 , 10:36:30
* Options in command-line:-output-json -cloud=1 -enable-asg=1 -enable-tfe=1 -log=D:\安全软件\RDM_ML\ScanLog_180905094231.log
* Detection target : (1) C:\Users\llanoMe\Desktop\VirusSamples_63
* Using malware-signature database: D:\安全软件\RDM_ML/malware.rmd
* Version of malwre-signature database : 0
* Cloud-assisted component initializes failed.
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
* Initializeing engine instance ...
Scan started on Wed Sep 05 09:42:31 2018
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(11).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(90%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(12).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(90%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(13).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(80%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(17).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(14).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(90%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(16).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(91%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(19).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(15).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(91%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(1).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(90%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(2).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(98%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(22).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(10).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(94%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(21).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(92%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(24).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(92%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(26).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(90%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(27).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(29).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(25).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(83%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(18).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(97%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(20).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(98%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(3).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(30).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(92%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(28).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(86%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(23).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(32).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(90%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(31).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(33).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(94%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(37).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(87%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(38).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(35).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(82%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(39).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(87%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(4).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(86%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(40).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(34).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(85%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(41).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(99%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(47).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(97%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(42).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(80%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(44).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(94%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(43).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(87%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(46).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(48).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(36).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(80%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(5).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(82%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(45).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(90%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(50).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(94%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(49).vir","show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(9).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(97%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(7).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(6).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(100%)"},"show":"MTU","type":"scan"}
{"filename":"C:\\Users\\llanoMe\\Desktop\\VirusSamples_63\\Samp(8).vir","infect":{"engine":"rdm-lite","threat":"Malware.Heuristic.MLite(90%)"},"show":"MTU","type":"scan"}
Scan ended on Wed Sep 05 09:42:31 2018
Duration : 0:0:77(m:s:ms)
Objects : 45 / 50 = 90.00%
Files : 45 / 50 = 90.00%

复制代码

综上，实际解壳的少，大部分目测报壳

显示全部楼层 · 发表于 2018-9-5 09:49:06

Pluto爱卡戎发表于 2018-9-4 23:38
Comodo Internet Security 扫描1/50，后缀改成exe文件，虚拟机里Comodo Container中无法运行样本。

XD，前面说过了，不能在虚拟机里双击，得在影子里。。

显示全部楼层 · 发表于 2018-9-5 09:51:56

STCn1000 发表于 2018-9-5 09:12
有人测SEP了我就不测Norton了
估计是一堆的Heur.AdvML.A/B/C

测一下吧，之前加UPX、ASPack，改下MD5这类也基本骗不了NS，不知这次加VMP会怎样？
ESET已经熄火了。。

显示全部楼层 · 发表于 2018-9-5 09:53:28

kfghyuan 发表于 2018-9-5 08:55
谁说qq浏览器打不开蓝奏了，我就能打开。

另一个帖里他说用的QQ浏览器，打不开，但我也相信是其它原因。

显示全部楼层 · 发表于 2018-9-5 09:55:27

WhiteCruel 发表于 2018-9-5 00:22
ESET 中文版扫描 kill X4

ESET让人大失所望，之前我那些用UPX、ASPack加壳的，还有修改MD5的，红伞、E家、WD可是并驾齐驱，而现在。。。

发现个奇怪现象，火绒能识别的刚好也是这4枚，难道两家都走动启提取的都是行为特征码，而这4枚样本的特质刚好就让两家同时命中了？？请B大来看看。。。@B100D1E55

显示全部楼层 · 发表于 2018-9-5 10:00:07

Llano_心情发表于 2018-9-5 09:39
瑞星社区2.0 RDM+ 50X清空

社区2.0真牛掰，我准备换了。。

但也没看出来是不是报壳。。。

显示全部楼层 · 发表于 2018-9-5 10:24:06

www-tekeze 发表于 2018-9-5 09:51
测一下吧，之前加UPX、ASPack，改下MD5这类也基本骗不了NS，不知这次加VMP会怎样？
ESET已经熄火了。。 ...

SEP能秒，Norton security就能秒。。
NS除了防火墙，总体防护能力是比SEP要高出不少的

[病毒样本] 样本集奉上_63 (09.04)

评分

本帖子中包含更多资源