————————————样本27x————————————

BE_HC

你好，再见 发表于 2019-1-31 15:01
布吉岛，我的包质量很差的，我只知道WPE PRO是白文件。。。

感觉WPE Pro也不是白文件

www-tekeze

ESET，已开启潜在不安全、潜在不受欢迎，kill 20X 。

莓办法

BE_HC 发表于 2019-1-31 15:23
感觉WPE Pro也不是白文件

我反到在想SaveEditor.exe是不是白文件

你好，再见

BE_HC 发表于 2019-1-31 15:23
感觉WPE Pro也不是白文件

不管不管我不管，反正这个奇葩进了数字的白名单。。。

www-tekeze

你好，再见 发表于 2019-1-31 15:01
布吉岛，我的包质量很差的，我只知道WPE PRO是白文件。。。

WPE PRO 是白文件？？  看32楼，ESET都杀了。。  呵呵，连火绒都杀！

你好，再见

www-tekeze 发表于 2019-1-31 15:27
WPE PRO 是白文件？？  看32楼，ESET都杀了。。  呵呵，连火绒都杀！

@www-tekeze 快看PM~

www-tekeze

你好，再见 发表于 2019-1-31 15:30
@www-tekeze 快看PM~

PM？ 不明觉厉。。

莓办法

www-tekeze 发表于 2019-1-31 15:27
WPE PRO 是白文件？？  看32楼，ESET都杀了。。  呵呵，连火绒都杀！

连火绒都杀


这

Jerry.Lin

TPCMgr  21x


Scan 17x

1. [Scan information]
   
2. 
   
3. Start time:2019-1-31 15:35:34
   
4. Elapsed time:00:00:03
   
5. Scan type:Custom scan
   
6. Antivirus engines:Tencent cloud protection engine    Tencent antivirus engine II    Tencent system repair engine    Bitdefender local antivirus engine   
   
7. Scan status:Scan complete
   
8. 
   
9. 
   
10. [Scan Report]
    
11. 
    
12. Files scanned:27
    
13. Threats detected:17
    
14. Threats processed:17
    
15. 
    
16. 
    
17. ---------------------
    
18. 2019-1-31 15:35:46 MD5:a31ee1b959d804a560738aed872b6068 C:\Users\zhong\Downloads\Compressed\卡饭\集222\unit.exe.exe [Trojan.GenericKD.31597654]  [Delete success]
    
19. 2019-1-31 15:35:47 MD5:c002ee67481147849a269d4267ef4695 C:\Users\zhong\Downloads\Compressed\卡饭\集222\3.exe.exe [Trojan.GenericKD.31598083]  [Delete success]
    
20. 2019-1-31 15:35:47 MD5:c13629942b30c7773b827380a7ffc045 C:\Users\zhong\Downloads\Compressed\卡饭\集222\mxr(17).pdf.exe [Trojan.GenericKD.31578949]  [Delete success]
    
21. 2019-1-31 15:35:47 MD5:b835d07c9bd2eded7d55b867ed3fc876 C:\Users\zhong\Downloads\Compressed\卡饭\集222\vcUnban.exe.exe [Trojan.Generic.791172]  [Delete success]
    
22. 2019-1-31 15:35:47 MD5:d5a5deeacd3f51523092967b7a011804 C:\Users\zhong\Downloads\Compressed\卡饭\集222\4.exe.exe [Trojan.GenericKD.31592550]  [Delete success]
    
23. 2019-1-31 15:35:48 MD5:1e287a45c732a13d06d635e1989b8cb0 C:\Users\zhong\Downloads\Compressed\卡饭\集222\mxr(19).pdf.exe [Trojan.GenericKD.31578416]  [Delete success]
    
24. 2019-1-31 15:35:48 MD5:8bea7b6f60e597dd1624d83c35047447 C:\Users\zhong\Downloads\Compressed\卡饭\集222\virus_gen033a.exe.exe [Gen:Heur.Minggy.2]  [Delete success]
    
25. 2019-1-31 15:35:49 MD5:15a0f73de139f7be76ee6d7f69c4bcab C:\Users\zhong\Downloads\Compressed\卡饭\集222\5.exe.exe [Gen:Variant.Symmi.36218]  [Delete success]
    
26. 2019-1-31 15:35:49 MD5:4878217a1e8783b2e10215d2045ca280 C:\Users\zhong\Downloads\Compressed\卡饭\集222\mxr.pdf.exe [Trojan.GenericKD.31591014]  [Delete success]
    
27. 2019-1-31 15:35:49 MD5:0f8c6e70d2847d8b77e33b67da163170 C:\Users\zhong\Downloads\Compressed\卡饭\集222\1.exe.exe [Trojan.GenericKD.31597861]  [Delete success]
    
28. 2019-1-31 15:35:49 MD5:bdcc7cbce1acdaed9683d687b856e727 C:\Users\zhong\Downloads\Compressed\卡饭\集222\adventuremt2.exe.exe [Gen:Variant.Buzy.1634]  [Delete success]
    
29. 2019-1-31 15:35:50 MD5:dfbc28f92f862c7791f6aab1cb14131f C:\Users\zhong\Downloads\Compressed\卡饭\集222\screenshot.exe.exe [Win32.Generic.30231]  [Delete success]
    
30. 2019-1-31 15:35:50 MD5:4dec13d4647a6c33dae32cfde38a746e C:\Users\zhong\Downloads\Compressed\卡饭\集222\WPE PRO.exe.exe [Gen:Variant.Application.Zusy.Elzob.20396]  [Delete success]
    
31. 2019-1-31 15:35:50 MD5:418efdc825a41afde9759008bf06975c C:\Users\zhong\Downloads\Compressed\卡饭\集222\ah_sa.exe.exe [Adware.Linkury.CZ]  [Delete success]
    
32. 2019-1-31 15:35:50 MD5:9b55299088442ef7a582d5692818bd57 C:\Users\zhong\Downloads\Compressed\卡饭\集222\t.exe.exe [Trojan.GenericKD.31597649]  [Delete success]
    
33. 2019-1-31 15:35:51 MD5:f8e872727bb33a788f84017e11e0ba13 C:\Users\zhong\Downloads\Compressed\卡饭\集222\cod2-keygen.exe.exe [Trojan.Generic.6751150]  [Delete success]
    
34. 2019-1-31 15:35:51 MD5:52b46b6b63314404edc00e2b648bb2a5 C:\Users\zhong\Downloads\Compressed\卡饭\集222\G1CreditScripterV1.0.exe.exe [Trojan.Generic.5528589]  [Delete success]
    
35. ---------------------
    

复制代码

Execute (AppLocker) 4x

1. time:01-31 15:36:37:449
   
2. virus:Win32.Trojan.Spnr.Ajbd
   
3. md5:e7313e050569bb76cb191e89f55e851a
   
4. path:C:\Users\zhong\Downloads\Compressed\卡饭\集222\1255970854_cr-keymaker.exe.exe
   
5. type:Delete
   
6. action:Delete
   
7. 
   
8. time:01-31 15:36:41:262
   
9. virus:Win32.Trojan.Autoit.zgfd
   
10. md5:8880c7e986e3656677855928f86532db
    
11. path:C:\Users\zhong\Downloads\Compressed\卡饭\集222\fishing_beta_0.1.3i.exe.exe
    
12. type:Delete
    
13. action:Delete
    
14. 
    
15. time:01-31 15:36:44:242
    
16. virus:Win32.Trojan.Generic.yujo
    
17. md5:371305ab910fe2804e01a29ffd9ff340
    
18. path:C:\Users\zhong\Downloads\Compressed\卡饭\集222\keymakerez.antivirus.2005.7.0.7.7.exe.exe
    
19. type:Delete
    
20. action:Delete
    
21. 
    
22. time:01-31 15:36:56:660
    
23. virus:Backdoor.Win32.Androm.wcuxt
    
24. md5:cd0fc7f5beab9a1f379e3499b5dfa60a
    
25. path:C:\Users\zhong\Downloads\Compressed\卡饭\集222\trulex.exe.exe
    
26. type:Delete
    
27. action:Delete
    
28. 
    

复制代码

16:31 +3

1. 
   
2. time:01-31 16:30:50:881
   
3. virus:Trojan.GenericKD.31605723
   
4. md5:61c751891a767b1dd73b393205e695f4
   
5. path:C:\Users\zhong\Downloads\Compressed\卡饭\集222\1d.exe.exe
   
6. type:Delete
   
7. action:Delete
   
8. 
   
9. time:01-31 16:30:56:691
   
10. virus:Trojan.GenericKD.31604916
    
11. md5:7188d33887e2df93cc17a1218085a08c
    
12. path:C:\Users\zhong\Downloads\Compressed\卡饭\集222\ppna.exe.exe
    
13. type:Delete
    
14. action:Delete
    
15. 
    
16. time:01-31 16:30:59:722
    
17. virus:Trojan.GenericKD.31604665
    
18. md5:41097c7195c774eeaf4172c78367a74f
    
19. path:C:\Users\zhong\Downloads\Compressed\卡饭\集222\ppne.exe.exe
    
20. type:Delete
    
21. action:Delete

复制代码

21:23 +2

1. 
   
2. time:01-31 21:22:55:554
   
3. virus:Trojan.GenericKD.31606203
   
4. md5:cad93bdcbcf806d7409e6899d1d40d5d
   
5. path:C:\Users\zhong\Downloads\Compressed\卡饭\集222\messg.jpg.exe
   
6. type:Delete
   
7. action:Delete
   
8. 
   
9. time:01-31 21:22:58:683
   
10. virus:Trojan.GenericKD.31603525
    
11. md5:71fd9c7ee223683052a8901abb35c77b
    
12. path:C:\Users\zhong\Downloads\Compressed\卡饭\集222\rne.exe.exe
    
13. type:Delete
    
14. action:Delete
    

复制代码

最终剩余1

1. File: C:\Users\zhong\Downloads\Compressed\卡饭\集222\SaveEditor.exe.exe
   
2. Size: 75264 bytes
   
3. Modified: 2019年1月31日, 14:25:53
   
4. MD5: 9C943F44A53E0CAC9AB68E5B6BD3206D
   
5. SHA1: A0727A323054287F5D85DE3220FC96374A843C4A
   
6. CRC32: F5492089
   
7. 
   

复制代码

www-tekeze

莓办法 发表于 2019-1-31 15:36
连火绒都杀

火绒报HackTool，没错啊。。