【开放测试】卡饭病毒样本包 第十八期 20181120

松竹承茂

测试环境：Windows 10 1809
测试产品：腾讯电脑管家
病毒库版本：20181120
测试项目：扫描+执行
结果：扫描（15/23） + 执行（0/23）= 总计 （15/23）
[Scan information]

Start time:2018-11-20 20:41:47
Elapsed time:00:00:06
Scan type:Custom scan
Antivirus engines:Tencent cloud protection engine    Tencent antivirus engine II    Tencent system repair engine    Bitdefender local antivirus engine   
Scan status:Scan complete


[Scan Report]

Files scanned:23
Threats detected:15
Threats processed:15


---------------------
2018-11-20 20:45:30 MD5:88e8376d99faf50c91286483a9f1b2e7 C:\新建文件夹 (2)\Kafan_Sample_5aa96db9610bf092123d6109c3b45576d2ac29f188c2fbce2c1182bc10aeb8f7.exe [Gen:Variant.MSIL.Krypt.37]  [Delete success]
2018-11-20 20:45:30 MD5:3e832e994918c821dc00e461fb370098 C:\新建文件夹 (2)\Kafan_Sample_b7fa8051b43bb8a1acca168434f7eb8452df60954930bc7b40e1d5563e41a7a1.exe [Trojan.Agent.DJEI]  [Delete success]
2018-11-20 20:45:30 MD5:501b7ba0f17dcf1243037a9221d561a7 C:\新建文件夹 (2)\Kafan_Sample_d5ff76c19fccba3edce848f7a440688800c0439080ed13418b17034ab17bb3b3.exe [Trojan.GenericKD.40771535]  [Delete success]
2018-11-20 20:45:30 MD5:a10d4c18e36b0461907067e8ea39b8c5 C:\新建文件夹 (2)\Kafan_Sample_7ae75e14e0393642051c034b48dc7b4439d4b592dd0a0c637065b92763d41d1e.exe [Trojan.GenericKD.40768231]  [Delete success]
2018-11-20 20:45:30 MD5:25c42f07bb6b799219df64a5548d0fdf C:\新建文件夹 (2)\Kafan_Sample_351dbb525dfc73dafeb7ed451015d09c70c206424335844c71fb8766aade179a.exe [Trojan.GenericKD.40770475]  [Delete success]
2018-11-20 20:45:31 MD5:352d5699cd83a7847423e6de90e37613 C:\新建文件夹 (2)\Kafan_Sample_e14baff489e3a44a62ba0de622aa7a86defb07acad4ab03dd92609298dcf9ce3.exe [Gen:Variant.Ursu.319022]  [Delete success]
2018-11-20 20:45:31 MD5:7f424fb68362380623fbc2807b3a20c0 C:\新建文件夹 (2)\Kafan_Sample_7b3d7cc261e3c3389b3e5b1cbfa1836922ca31d23b6207740b3a9ea09f426d20.exe [Trojan.GenericKD.40767764]  [Delete success]
2018-11-20 20:45:31 MD5:4a7623d7bacb243af91a2386c2f1fb0f C:\新建文件夹 (2)\Kafan_Sample_441ac05eeb68b22ecce4a348a94def51d4d82e015917c5302b979f600ca06738.exe [Trojan.GenericKD.40772264]  [Delete success]
2018-11-20 20:45:31 MD5:a073761885f4b2d1db50db86cb4bb179 C:\新建文件夹 (2)\Kafan_Sample_60ac44a0a60667fcc4b5f64bfaeb0353390e196c41ff1f8a558898dae0f07e6c.exe [Trojan.GenericKD.40772075]  [Delete success]
2018-11-20 20:45:31 MD5:88b8f7c03ae0d0cdba24adbafd807727 C:\新建文件夹 (2)\Kafan_Sample_501318bc1ac43bbefa39dc8447e51691863e1b18de7577c62dd946424492eada.exe [Gen:Variant.Razy.427626]  [Delete success]
2018-11-20 20:45:32 MD5:e2168a9d570765425de5e7c2385d8f94 C:\新建文件夹 (2)\Kafan_Sample_77dc92185b1156c74b85d9f72735110b91ec119c32c7c71b77e802b4bdc485b1.exe [Gen:Variant.Strictor.177877]  [Delete success]
2018-11-20 20:45:32 MD5:e98738541b07ceb03a1fbdb9fc44b640 C:\新建文件夹 (2)\Kafan_Sample_17ed9d70120804aaaacc35360b70ed1d538acd80ac7e886f6556bcf4ecfcb361.exe [Trojan.GenericKD.40769711]  [Delete success]
2018-11-20 20:45:33 MD5:6c281a6953c739cb4b955f27fefd1db1 C:\新建文件夹 (2)\Kafan_Sample_e067cd75a91abb973956e9e1434d9dfb1d9052f59a7fcea653b319e5a8b9471e.exe [Trojan.Agent.DJDK]  [Delete success]
2018-11-20 20:45:33 MD5:77e99cfb82ed9a8b3162eaae578862ed C:\新建文件夹 (2)\Kafan_Sample_b6ff4f210fcad8d78f78afaa93876ec179c177e78c636cb616a590789544de15.exe [Trojan.GenericKD.40770873]  [Delete success]
2018-11-20 20:45:33 MD5:ed936a94bb58a9102ee03471d53e1a85 C:\新建文件夹 (2)\Kafan_Sample_3df5e52ba422c3462ce74661ebc190ecfbff004a0fe66fa9792b8162a78f1382.exe [Trojan.GenericKD.40772418]  [Delete success]
---------------------

ELOHIM

测试环境：Windows 7 SP1 X64
测试产品：SCEP
毒库版本：470
测试项目：扫描
测试结果：12/23=52.1%


余孽如下：

2018/11/20  19:29         1,087,400 Kafan_Sample_501318bc1ac43bbefa39dc8447e51691863e1b18de7577c62dd946424492eada.exe
2018/11/20  19:28           533,881 Kafan_Sample_5aa96db9610bf092123d6109c3b45576d2ac29f188c2fbce2c1182bc10aeb8f7.exe
2018/11/20  08:29            78,848 Kafan_Sample_60ac44a0a60667fcc4b5f64bfaeb0353390e196c41ff1f8a558898dae0f07e6c.exe
2018/11/20  19:22           863,232 Kafan_Sample_88bb5f92b0c4aeb7a6ef54e16f943cb968dbfca46b2b5e8418e6429d5d7e6f19.exe
2018/11/20  17:11           594,264 Kafan_Sample_a4c79d5769f843ccfba9f0f960676e316e01630f526c3a0b8e624b30b942b962.exe
2018/11/20  19:23           590,168 Kafan_Sample_b7fa8051b43bb8a1acca168434f7eb8452df60954930bc7b40e1d5563e41a7a1.exe
2018/11/20  18:25         2,727,936 Kafan_Sample_c82dc12a10662622861ac5e42db3c5ebb47fb19d4a8561f59587246fa32a96f3.exe
2018/11/20  16:43           436,152 Kafan_Sample_cd1985c2b21ff85066fcdfbedb656bc125f53796bd819ea512a2153ea08d6936.exe
2018/11/20  19:23           139,264 Kafan_Sample_db5794255ef6c3f576d39fc8b69ec3af020a1a30dcacfbc25c6fa176fe40445e.exe
2018/11/20  18:52           358,912 Kafan_Sample_e067cd75a91abb973956e9e1434d9dfb1d9052f59a7fcea653b319e5a8b9471e.exe
2018/11/20  19:29         1,712,128 Kafan_Sample_e14baff489e3a44a62ba0de622aa7a86defb07acad4ab03dd92609298dcf9ce3.exe

松竹承茂

测试环境：WIN10 1809
测试产品：360杀毒
病毒库版本：20181120
测试项目：扫描（21/23）
360杀毒扫描日志

病毒库版本：2018-11-16 14:29
扫描时间：2018-11-20 21:06:47
扫描用时：00:01:14
扫描类型：右键扫描
扫描文件总数：23
项目总数：21
清除项目数：21

扫描选项
----------------------
扫描所有文件：否
扫描压缩包：否
发现病毒处理方式：由用户选择处理
扫描磁盘引导区：是
扫描 Rootkit：否
使用云查杀引擎：是
使用QVM人工智能引擎：是
扫描建议修复项：是
常规引擎设置：Avira(小红伞)

扫描内容
----------------------
C:\新建文件夹 (3)\Kafan_Sample_441ac05eeb68b22ecce4a348a94def51d4d82e015917c5302b979f600ca06738.exe
C:\新建文件夹 (3)\Kafan_Sample_501318bc1ac43bbefa39dc8447e51691863e1b18de7577c62dd946424492eada.exe
C:\新建文件夹 (3)\Kafan_Sample_a4c79d5769f843ccfba9f0f960676e316e01630f526c3a0b8e624b30b942b962.exe
C:\新建文件夹 (3)\Kafan_Sample_b6ff4f210fcad8d78f78afaa93876ec179c177e78c636cb616a590789544de15.exe
C:\新建文件夹 (3)\Kafan_Sample_b7fa8051b43bb8a1acca168434f7eb8452df60954930bc7b40e1d5563e41a7a1.exe
C:\新建文件夹 (3)\Kafan_Sample_c82dc12a10662622861ac5e42db3c5ebb47fb19d4a8561f59587246fa32a96f3.exe
C:\新建文件夹 (3)\Kafan_Sample_cd1985c2b21ff85066fcdfbedb656bc125f53796bd819ea512a2153ea08d6936.exe
C:\新建文件夹 (3)\Kafan_Sample_d5ff76c19fccba3edce848f7a440688800c0439080ed13418b17034ab17bb3b3.exe
C:\新建文件夹 (3)\Kafan_Sample_db5794255ef6c3f576d39fc8b69ec3af020a1a30dcacfbc25c6fa176fe40445e.exe
C:\新建文件夹 (3)\Kafan_Sample_e14baff489e3a44a62ba0de622aa7a86defb07acad4ab03dd92609298dcf9ce3.exe
C:\新建文件夹 (3)\Kafan_Sample_e067cd75a91abb973956e9e1434d9dfb1d9052f59a7fcea653b319e5a8b9471e.exe
C:\新建文件夹 (3)\Kafan_Sample_f2d49f63ac01129cef3f9b903bbb6b177229119f18fa9c18c8c08a172f7c6089.exe
C:\新建文件夹 (3)\Kafan_Sample_0adaee617daf9a32795c31e6651440be0f1da08b1262bd139e3262ddf530cb70.exe
C:\新建文件夹 (3)\Kafan_Sample_3df5e52ba422c3462ce74661ebc190ecfbff004a0fe66fa9792b8162a78f1382.exe
C:\新建文件夹 (3)\Kafan_Sample_5aa96db9610bf092123d6109c3b45576d2ac29f188c2fbce2c1182bc10aeb8f7.exe
C:\新建文件夹 (3)\Kafan_Sample_7ae75e14e0393642051c034b48dc7b4439d4b592dd0a0c637065b92763d41d1e.exe
C:\新建文件夹 (3)\Kafan_Sample_7b3d7cc261e3c3389b3e5b1cbfa1836922ca31d23b6207740b3a9ea09f426d20.exe
C:\新建文件夹 (3)\Kafan_Sample_8b90b602d6d8f58e21896a62a86aefcb94470e3a2e4dbb603c24e1a50e6cbd67.dll
C:\新建文件夹 (3)\Kafan_Sample_17ed9d70120804aaaacc35360b70ed1d538acd80ac7e886f6556bcf4ecfcb361.exe
C:\新建文件夹 (3)\Kafan_Sample_60ac44a0a60667fcc4b5f64bfaeb0353390e196c41ff1f8a558898dae0f07e6c.exe
C:\新建文件夹 (3)\Kafan_Sample_77dc92185b1156c74b85d9f72735110b91ec119c32c7c71b77e802b4bdc485b1.exe
C:\新建文件夹 (3)\Kafan_Sample_88bb5f92b0c4aeb7a6ef54e16f943cb968dbfca46b2b5e8418e6429d5d7e6f19.exe
C:\新建文件夹 (3)\Kafan_Sample_351dbb525dfc73dafeb7ed451015d09c70c206424335844c71fb8766aade179a.exe


白名单设置
----------------------


扫描结果
======================
高危风险项
----------------------
C:\新建文件夹 (3)\Kafan_Sample_441ac05eeb68b22ecce4a348a94def51d4d82e015917c5302b979f600ca06738.exe        感染型病毒(Win32/Trojan.Multi.c78)        已删除
C:\新建文件夹 (3)\Kafan_Sample_501318bc1ac43bbefa39dc8447e51691863e1b18de7577c62dd946424492eada.exe        HEUR/QVM03.0.5210.Malware.Gen        已删除
C:\新建文件夹 (3)\Kafan_Sample_a4c79d5769f843ccfba9f0f960676e316e01630f526c3a0b8e624b30b942b962.exe        HEUR/QVM03.0.553A.Malware.Gen        已删除
C:\新建文件夹 (3)\Kafan_Sample_b6ff4f210fcad8d78f78afaa93876ec179c177e78c636cb616a590789544de15.exe        感染型病毒(Win32/Backdoor.650)        已删除
C:\新建文件夹 (3)\Kafan_Sample_c82dc12a10662622861ac5e42db3c5ebb47fb19d4a8561f59587246fa32a96f3.exe        HEUR/QVM03.0.5210.Malware.Gen        已删除
C:\新建文件夹 (3)\Kafan_Sample_cd1985c2b21ff85066fcdfbedb656bc125f53796bd819ea512a2153ea08d6936.exe        感染型病毒(Win32/Trojan.Spy.faf)        已删除
C:\新建文件夹 (3)\Kafan_Sample_d5ff76c19fccba3edce848f7a440688800c0439080ed13418b17034ab17bb3b3.exe        感染型病毒(Win32/Trojan.3fe)        已删除
C:\新建文件夹 (3)\Kafan_Sample_db5794255ef6c3f576d39fc8b69ec3af020a1a30dcacfbc25c6fa176fe40445e.exe        HEUR/QVM20.1.53F0.Malware.Gen        已删除
C:\新建文件夹 (3)\Kafan_Sample_e067cd75a91abb973956e9e1434d9dfb1d9052f59a7fcea653b319e5a8b9471e.exe        感染型病毒(Win32/Trojan.cd2)        已删除
C:\新建文件夹 (3)\Kafan_Sample_e14baff489e3a44a62ba0de622aa7a86defb07acad4ab03dd92609298dcf9ce3.exe        感染型病毒(Win32/Trojan.cf6)        已删除
C:\新建文件夹 (3)\Kafan_Sample_3df5e52ba422c3462ce74661ebc190ecfbff004a0fe66fa9792b8162a78f1382.exe        感染型病毒(Win32/Trojan.1e5)        已删除
C:\新建文件夹 (3)\Kafan_Sample_5aa96db9610bf092123d6109c3b45576d2ac29f188c2fbce2c1182bc10aeb8f7.exe        感染型病毒(Win32/Trojan.e85)        已删除
C:\新建文件夹 (3)\Kafan_Sample_7ae75e14e0393642051c034b48dc7b4439d4b592dd0a0c637065b92763d41d1e.exe        感染型病毒(Win32/Trojan.130)        已删除
C:\新建文件夹 (3)\Kafan_Sample_7b3d7cc261e3c3389b3e5b1cbfa1836922ca31d23b6207740b3a9ea09f426d20.exe        感染型病毒(Win32/Trojan.PSW.431)        已删除
C:\新建文件夹 (3)\Kafan_Sample_17ed9d70120804aaaacc35360b70ed1d538acd80ac7e886f6556bcf4ecfcb361.exe        感染型病毒(Win32/Trojan.Dropper.911)        已删除
C:\新建文件夹 (3)\Kafan_Sample_60ac44a0a60667fcc4b5f64bfaeb0353390e196c41ff1f8a558898dae0f07e6c.exe        感染型病毒(Win32/Trojan.d9f)        已删除
C:\新建文件夹 (3)\Kafan_Sample_77dc92185b1156c74b85d9f72735110b91ec119c32c7c71b77e802b4bdc485b1.exe        感染型病毒(Win32/Trojan.469)        已删除
C:\新建文件夹 (3)\Kafan_Sample_88bb5f92b0c4aeb7a6ef54e16f943cb968dbfca46b2b5e8418e6429d5d7e6f19.exe        感染型病毒(Win32/Backdoor.9cf)        已删除
C:\新建文件夹 (3)\Kafan_Sample_351dbb525dfc73dafeb7ed451015d09c70c206424335844c71fb8766aade179a.exe        感染型病毒(Win32/Trojan.92d)        已删除
C:\新建文件夹 (3)\Kafan_Sample_0adaee617daf9a32795c31e6651440be0f1da08b1262bd139e3262ddf530cb70.exe        感染型病毒(Win32/Trojan.Spy.f25)        已删除
C:\新建文件夹 (3)\Kafan_Sample_f2d49f63ac01129cef3f9b903bbb6b177229119f18fa9c18c8c08a172f7c6089.exe        感染型病毒(Win32/Virus.PSW.0e0)        已删除

Eset小粉絲

测试环境：Windows 10 Version 1803 OS Build 17134.407
测试产品：卡巴斯基 Kaspersky 2019
病毒库版本：20181120 7:10pm
测试项目：Context menu scan + Real time protection
测试配置：Recommended + Disabled KSN (Pure Database Detection)
结果： 16/23

dsb2466

下载试试看呢

StarlitFuture

测试环境：WIN10 1809  LTSC 64 实机
测试产品：360卫士
病毒库版本：20181120
测试项目：扫描
测试配置：标准

结果：扫描（23/23）= 总计 （23/23）

lpy5511241

测试环境：WIN10 实机
测试产品：火绒/智量
病毒库版本：2018.11.20
测试项目：扫描
测试配置：标准
结果：火绒：6/23=26%   智量23/23=100%截图：

松竹承茂

测试环境：Windows 10 1809
测试产品：火绒
病毒库版本：20181120
测试项目：扫描（6/23）+执行（1/23）=（7/23）

心痛的伤不起

卡巴22/23 95.6 余Kafan_Sample_8b90b602d6d8f58e21896a62a86aefcb94470e3a2e4dbb603c24e1a50e6cbd67.dll
wd22/23 95.6余Kafan_Sample_60ac44a0a60667fcc4b5f64bfaeb0353390e196c41ff1f8a558898dae0f07e6c。exe

petr0vic

测试环境：WIN10 1703  64 实机
测试产品：DrWeb 12
测试项目：扫描
结果：5/23