VineMEMZ

显示全部楼层 · 发表于 2018-9-13 22:30:53

www-tekeze 发表于 2018-9-13 22:27
为了看行为，都得放行，阻止的话后面行为不完整，结束进程的话就over了，截点图给大家多了解下这个样本 ...

看行为用pro monitor啊

显示全部楼层 · 发表于 2018-9-13 22:31:20

www-tekeze 发表于 2018-9-13 22:29
问度娘。。

大佬，度娘是谁？

她知道个啥？！

显示全部楼层 · 发表于 2018-9-13 22:34:17

金山浴霸废了，曾经的金山啊

显示全部楼层 · 发表于 2018-9-13 22:39:27

ELOHIM 发表于 2018-9-13 22:30
看行为用pro monitor啊

大佬，度娘是谁？
她知道个啥？！

太专业了。。。那就问必应和谷歌。。

显示全部楼层 · 发表于 2018-9-13 22:44:23

本帖最后由 c/mm 于 2018-9-13 22:57 编辑

我记得运行这东西之前微软拦截2次一次是SmartScreen蓝色阻止对话框，如果点继续运行会弹出微软UAC 拦截个人觉得如果小白或者普通用户不是绝对的信任应该别好奇心往下了。。

已经上报给蜘蛛了.

显示全部楼层 · 发表于 2018-9-13 22:47:26

管家防御成功

显示全部楼层 · 发表于 2018-9-13 22:56:29

瑞星失败，和金山一样了

显示全部楼层 · 发表于 2018-9-13 23:58:48

360扫描 MISS

显示全部楼层 · 发表于 2018-9-14 00:00:43

ESET Log
Scan Log
Version of detection engine: 18045P (20180913)
Date: 2018/9/13 Time: 23:59:46
Scanned disks, folders and files: D:\下载\VineMemz.exe
D:\下载\VineMemz.exe » 7ZSD » data/14.bin - a variant of Win32/XmasAds.A potentially unwanted application - action selection postponed until scan completion
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » uninst.exe » NSIS - is OK
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGENTCTL.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGENTDP2.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGENTDPV.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGENTMPX.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » MSLWVTTS.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGENTANM.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGENTSR.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGT0409.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGENTPSH.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGENTSVR.EXE - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGT0409.HLP - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGTCTL15.TLB - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGTEULA.TXT - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGTINST.INF - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » AGT20.INF - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » ADVPACK.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » W95INF32.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » MSAGENT.EXE » CAB » W95INF16.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » tv_enua.exe » CAB » tvenuax.dll - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » tv_enua.exe » CAB » tv_enua.dll - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » tv_enua.exe » CAB » tv_enua.hlp - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » tv_enua.exe » CAB » tv_enua.inf - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » tv_enua.exe » CAB » andmoipa.ttf - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » tv_enua.exe » CAB » Msvcp50.dll - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » tv_enua.exe » CAB » Msvcirt.dll - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » tv_enua.exe » CAB » ADVPACK.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » tv_enua.exe » CAB » W95INF32.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » tv_enua.exe » CAB » W95INF16.DLL - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » run.vbs - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » Bonzi.acs - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » Peedy.acs - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » nsExec.dll - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » UAC.dll - archive damaged - the file could not be extracted.
D:\下载\VineMemz.exe » 7ZSD » data/3.bin » NSIS » UserInfo.dll - archive damaged - the file could not be extracted.
Number of scanned objects: 103
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 0:00:07 Total scanning time: 21 sec (00:00:21)

显示全部楼层 · 发表于 2018-9-14 08:30:25

y3312068 发表于 2018-9-13 22:47
管家防御成功

不得了

[病毒样本] VineMEMZ

本帖子中包含更多资源

本帖子中包含更多资源

评分

本帖子中包含更多资源