样本集奉上_64 (09.05)

显示全部楼层 · 发表于 2018-9-6 08:49:06

ccboxes 发表于 2018-9-6 00:06
找不到新样本就不要发，宁缺毋滥，就非要每天50个？

且不说你的样本质量一向低，用的还是不能运行的盗版 ...

期待阁下高质量的样本早点发出来~ 双击双击~ PS：有人每天不辞辛苦发样本让大家使用就很好了~ 何必吹毛求疵呢~ 大气谦和~互助分享~

显示全部楼层 · 发表于 2018-9-6 08:53:01

www-tekeze 发表于 2018-9-5 22:44
样本自身是64位的，但你虚拟机既然是x64系统，怎么提示这种错误，应该是unregistered啊。

PS：我虚 ...

大佬~ 2天都没有双击的目标了~ 实体机资料多不敢弄啊~ 金坷垃都翻出来拿着双击了.....

显示全部楼层 · 发表于 2018-9-6 08:59:02

咖啡mes扫描脱壳半小时，只剩一个没杀。eset，腾管，费尔扫描一个没报

显示全部楼层 · 发表于 2018-9-6 09:04:19

很奇怪，
整体解压，45号是恶意的。
单独解压不报。。

显示全部楼层 · 发表于 2018-9-6 09:32:22

瑞星安全云终端  X2
社区2.0 rdm+ X3
社区3.0          X0
ML                X0

等下试试蜘蛛的扫描器

显示全部楼层 · 发表于 2018-9-6 09:48:14

www-tekeze 发表于 2018-9-6 00:37
49楼咖啡只报1X，你的怎么是49，设置不同？

49樓是電腦管家

显示全部楼层 · 发表于 2018-9-6 09:57:08

本帖最后由 Llano_心情于 2018-9-6 10:13 编辑

蜘蛛扫描器

>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(10).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(11).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(12).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(14).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(16).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(17).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(11).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(13).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(18).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(15).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(2).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(19).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(10).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(20).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(14).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(1).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(22).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(19).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(16).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(24).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(23).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(21).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(2).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(20).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(15).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(26).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(28).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(27).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(29).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(25).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(3).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(24).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(22).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(30).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(31).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(23).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(32).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(28).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(17).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(29).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(18).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(35).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(36).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(12).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(33).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(34).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(38).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(3).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(39).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(30).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(32).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(4).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(40).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(31).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(37).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(41).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(26).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(35).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(43).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(38).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(44).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(39).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(4).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(40).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(46).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(41).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(47).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(48).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(45).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(43).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(49).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(42).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(46).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(50).vir - packed by PESTUB
>>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(45).vir - packed by FLY-CODE
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(47).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(5).vir - packed by PESTUB
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(6).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(48).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(7).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(49).vir - Ok
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(8).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(37).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(34).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(44).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(50).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(7).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(5).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(36).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(6).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(8).vir - Ok
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(9).vir - Ok
>>>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(45).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(45).vir - Ok
Total 46124032 bytes in 50 files scanned
Total 50 files are clean
There are no infected objects detected
Scan time is 00:00:01.595

复制代码

确定都是一个壳？

而且。。。我也不清楚蜘蛛报壳后有没有解壳，反正每个报壳的样本会出现两次，如：
>C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(50).vir - packed by PESTUB
C:\Users\llanoMe\Desktop\VirusSamples_64\Samp(50).vir - Ok

显示全部楼层 · 发表于 2018-9-6 10:05:19

本帖最后由 STCn1000 于 2018-9-6 10:19 编辑

NS脱了10分钟壳就干掉了45.然后A杀还和fakeav一起来了

显示全部楼层 · 发表于 2018-9-6 11:15:34

lkjx21 发表于 2018-9-6 08:49
期待阁下高质量的样本早点发出来~ 双击双击~ PS：有人每天不辞辛苦发样本让大家使用就很好了 ...

哈哈，无所谓。。。原来就说过了，发这些包除了测试下，最主要是给大家找点乐趣吧，毕竟现实当中，用电脑习惯也好的话，哪有那么多毒，比如在办公室也好或邻里之间，谁会去扎堆讨论杀软的，别自己吓自己。。。但我们作为杀软爱好者，到了卡饭却没点样本玩，那不是多乏味？ So，喜欢的就进来玩玩，不喜欢就算。。。

显示全部楼层 · 发表于 2018-9-6 11:15:52

www-tekeze 发表于 2018-9-6 00:27
嗯嗯。。

另外 APC 只是红伞云的一个简称。然而 APC下还有其他主件

[病毒样本] 样本集奉上_64 (09.05)

本帖子中包含更多资源