——————————————样本71x————————————

huang1111

分流地址：https://www.lanzous.com/i3rzcre

c/mm

Dr.Web miss  26X kill 45x

skystars

诸葛亮杀毒kill all
纯启发报一个ttr.exe.exe
优化启发之后报code cf.exe.exe为Heur/Shutdown.a
报hp (5).gf.exe为Heur/Unknown.c
ttr.exe.exe为Heur/MouseKey.a

你好，再见

skystars 发表于 2019-4-14 18:47
诸葛亮杀毒kill all
纯启发报一个ttr.exe.exe
优化启发之后报code cf.exe.exe为Heur/Shutdown.a

哇，有一个误报唉。极宝70x，完美避开白文件。。。

skystars

你好，再见 发表于 2019-4-14 19:00
哇，有一个误报唉。极宝70x，完美避开白文件。。。

是360报的啊，你的也会报。
我扫了一下，现在你的也会报了

Jerry.Lin

1. Emsisoft Commandline Scanner - Version 2018.6
   
2. Last update: 2019/4/14 19:03:19
   
3. 
   
4. Scan settings:
   
5. 
   
6. Scan type:                             Custom Scan
   
7. Objects:                               C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled
   
8. 
   
9. Detect Potentially Unwanted Programs:  On
   
10. Scan archives:                         On
    
11. Scan mail archives:                    Off
    
12. ADS Scan:                              On
    
13. File extensions:                       Off
    
14. Direct disk access:                    Off
    
15. 
    
16. Scan start:                            2019/4/14 19:03:19
    
17. 
    
18. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\po.msi -> (Embedded EXE)         detected: Trojan.GenericKD.41193458 (B)
    
19. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\22.exe.exe         detected: Trojan.Generic.17941596 (B)
    
20. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\4.exe.exe         detected: Trojan.GenericKD.31859765 (B)
    
21. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\a.exe.exe         detected: Gen:Variant.Midie.62546 (B)
    
22. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\3.exe.exe         detected: DeepScan:Generic.Malware.SWYd.6F310890 (B)
    
23. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\ale7.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
24. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\2.exe.exe         detected: Gen:Variant.Mikey.94869 (B)
    
25. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\BnDEtRoItFaQ.exe.exe         detected: Gen:Variant.Midie.62440 (B)
    
26. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\ari7.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
27. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\bi7.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
28. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\ati7.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
29. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\CGl_m.exe.exe         detected: Trojan.Agent.DVEL (B)
    
30. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\calc.exe.exe         detected: Gen:Variant.Razy.491633 (B)
    
31. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\buy.exe.exe         detected: Gen:Variant.Razy.491069 (B)
    
32. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\chinap.exe.exe         detected: Trojan.GenericKD.41192454 (B)
    
33. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\code cf.exe.exe         detected: Trojan.GenericKD.5298671 (B)
    
34. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\code lol .exe.exe         detected: Gen:Variant.MSILDrop.8 (B)
    
35. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\eaid.exe.exe         detected: Gen:Variant.Razy.491101 (B)
    
36. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\elb7.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
37. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\cl.exe.exe         detected: Gen:Variant.Razy.348484 (B)
    
38. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\Exo.exe.exe         detected: Generic.MSIL.PasswordStealerA.DE7C7252 (B)
    
39. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\eme7.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
40. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\fnb.exe.exe         detected: Gen:Variant.Razy.491069 (B)
    
41. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\frn7.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
42. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\gabwoo-guest.exe.exe         detected: Trojan.GenericKD.41139835 (B)
    
43. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\frnn.exe.exe         detected: Gen:Variant.Razy.491069 (B)
    
44. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\i.exe.exe         detected: Generic.MSIL.Bladabindi.6A45F1D6 (B)
    
45. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\joefil.exe.exe         detected: Trojan.Agent.DUZZ (B)
    
46. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\hp (5).gf.exe         detected: Trojan.GenericKD.41149944 (B)
    
47. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\hp.gf.exe         detected: Trojan.GenericKD.41154829 (B)
    
48. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\kg.exe.exe         detected: Trojan.GenericKD.40320029 (B)
    
49. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\m.html.exe         detected: Trojan-Ransom.JoeGo (A)
    
50. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\lav.exe.exe         detected: Gen:Variant.Razy.491069 (B)
    
51. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\lav7.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
52. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\mol6.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
53. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\nokill.exe.exe         detected: Generic.MSIL.PasswordStealerA.CBA3D0A0 (B)
    
54. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\noo7.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
55. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\obed.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
56. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\obed8.exe.exe         detected: Gen:Variant.Razy.491069 (B)
    
57. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\obig.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
58. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\obil.exe.exe         detected: Gen:Variant.Razy.491069 (B)
    
59. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\obo.exe.exe         detected: Gen:Variant.Razy.491069 (B)
    
60. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\ochi.exe.exe         detected: Gen:Variant.Razy.491069 (B)
    
61. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\Or_kn.exe.exe         detected: Trojan.Agent.DVEG (B)
    
62. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\oo.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
63. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\p1.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
64. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\RedirC.exe.exe         detected: Gen:Trojan.Heur.JP.huW@ayz5Qbni (B)
    
65. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\NXy5i0ZtI65.exe.exe         detected: Gen:Variant.Cerbu.31576 (B)
    
66. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\nguyentroi.exe.exe         detected: Gen:Variant.Graftor.Elzob.1064 (B)
    
67. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\ScanCopy03-25.exe.exe         detected: Trojan.GenericKD.31823507 (B)
    
68. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\server.exe.exe         detected: Backdoor.Zegost.BA (B)
    
69. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\Runhost.exe.exe         detected: Gen:Variant.Razy.85264 (B)
    
70. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\sureboy.exe.exe         detected: Trojan.Spy.Formbook.A (B)
    
71. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\sv.exe.exe         detected: Generic.MSIL.Bladabindi.CC004AB3 (B)
    
72. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\so.exe.exe         detected: Gen:Variant.Razy.491069 (B)
    
73. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\searcindexer.exe.exe         detected: Trojan.GenericKD.5426015 (B)
    
74. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\taskmgr.exe.exe         detected: Trojan.GenericKD.4987924 (B)
    
75. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\VinaCF.exe.exe         detected: Trojan.GenericKD.40222989 (B)
    
76. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\slim.exe.exe         detected: Gen:Trojan.Heur.FU.keX@aujQ9df (B)
    
77. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\ttr.exe.exe         detected: Trojan.GenericKD.31883109 (B)
    
78. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\whe7.exe.exe         detected: Gen:Variant.Razy.487799 (B)
    
79. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\win22.exe.exe         detected: Trojan.GenericKD.3313410 (B)
    
80. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\Win3.exe.exe         detected: Gen:Variant.MSILPerseus.36523 (B)
    
81. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\winlogon.exe.exe         detected: Gen:Variant.Razy.76712 (B)
    
82. C:\Users\zhong\Downloads\Compressed\卡饭\Untitled(1)\Untitled\winboxls-0225-2.exe.exe         detected: Trojan.GenericKD.31758859 (B)
    
83. 
    
84. Scanned           71
    
85. Found             65
    
86. Removed           65
    
87. 
    
88. 
    
89. Scan end:         2019/4/14 19:03:31
    
90. Scan time:        0:00:11
    

复制代码

YU2711

YU2711 发表于 2019-4-14 17:23
Trend Micro 16  

41/71

Trend Micro 15
62/71

你好，再见

skystars 发表于 2019-4-14 18:47
诸葛亮杀毒kill all
纯启发报一个ttr.exe.exe
优化启发之后报code cf.exe.exe为Heur/Shutdown.a

极宝纯启发24x~

kaba666

怎么没人双击呢？你们这么测，有什么意思

你好，再见

kaba666 发表于 2019-4-14 19:14
怎么没人双击呢？你们这么测，有什么意思

双击这么耗时间，本来扫描病毒就是一项没有意义的事情，不是每个人都爱折腾，有那份闲心。