样本集奉上_122

jdsh

WD   纯扫描还剩6个

www-tekeze

jdsh 发表于 2019-5-23 21:45
WD   纯扫描还剩6个

加UPX或ASPack对WD和ESET都没用，对红伞、诺顿也基本没用。

静影沉璧

BD

Scan：40+18=58/80

1. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(27)M.vir Gen:Variant.Razy.451879 Deleted
   
2. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(18)M.vir Trojan.GenericKD.40537971 Deleted
   
3. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(17).vir Application.Agent.FWJ Deleted
   
4. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(35).vir Trojan.AgentWDCR.JQL Deleted
   
5. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(8)M.vir Trojan.Agent.DARP Deleted
   
6. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(7)M.vir Gen:Trojan.Heur2.RP.cqWbaiVb@hpb Deleted
   
7. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(20).vir Trojan.Dalexis.Gen.1 Deleted
   
8. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(28)M.vir MemScan:Trojan.Agent.CGHD Deleted
   
9. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(30)M.vir Gen:Variant.Razy.393758 Deleted
   
10. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(39).vir Trojan.GenericKD.40402809 Deleted
    
11. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(4)M.vir Gen:Variant.Razy.378795 Deleted
    
12. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(49).vir Trojan.GenericKD.4335414 Deleted
    
13. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(5)M.vir DeepScan:Generic.Zamg.8.8C3BCFF9 Deleted
    
14. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(25)M.vir DeepScan:Generic.EmotetN.8E8CABE4 Deleted
    
15. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(22)M.vir Trojan.Ransom.Cerber.NV Deleted
    
16. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(21)M.vir MemScan:Trojan.Agent.CCLB Deleted
    
17. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(24)M.vir DeepScan:Generic.EmotetN.E8AF584F Deleted
    
18. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(23)M.vir DeepScan:Generic.BrResMon.1.64DC3BB2 Deleted
    
19. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(14)M.vir Trojan.Trickbot.D Deleted
    
20. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(11)M.vir DeepScan:Generic.Nymaim.E.899276AA Deleted
    
21. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(12).vir Gen:Variant.Graftor.501 Deleted
    
22. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(29)M.vir Gen:Heur.Titirez.1.F Deleted
    
23. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(30).vir Gen:Variant.Sinowal.9 Deleted
    
24. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(9).vir Trojan.GenericKD.2981913 Deleted
    
25. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(20)M.vir Gen:Trojan.Heur.JP.kmKfaq@MCXmi Deleted
    
26. C:\Users\Joseph\Desktop\VirusSamples_122\VirusSamples_122M\Samp(16)M.vir Gen:Trojan.Heur.RP.uuWaayXeiOhi Deleted
    
27. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(7).vir Trojan.GenericKD.40242403 Deleted
    
28. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(6).vir Trojan.GenericKD.31407152 Deleted
    
29. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(8).vir Trojan.GenericKD.40858164 Deleted
    
30. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(47).vir Gen:Heur.PonyStealer.3 Deleted
    
31. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(28).vir Gen:Variant.Graftor.519537 Deleted
    
32. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(46).vir Trojan.Agent.CGHD Deleted
    
33. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(26).vir Gen:Variant.Razy.161052 Deleted
    
34. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(44).vir Trojan.GenericKD.31295138 Deleted
    
35. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(48).vir Trojan.GenericKD.4980399 Deleted
    
36. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(24).vir Trojan.GenericKD.31271991 Deleted
    
37. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(42).vir Trojan.GenericKD.40314226 Deleted
    
38. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(25).vir Gen:Variant.Strictor.2420 Deleted
    
39. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(43).vir Trojan.Generic.23173413 Deleted
    
40. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(23).vir Trojan.Trickbot.D Deleted
    
41. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(41).vir Trojan.GenericKD.31100308 Deleted
    
42. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(45).vir Trojan.GenericKD.40124109 Deleted
    
43. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(5).vir Gen:Variant.Razy.479165 Deleted
    
44. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(22).vir Gen:Variant.Zegost.19 Deleted
    
45. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(40).vir Gen:Variant.Trojan.Rovnix.1 Deleted
    
46. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(19).vir Trojan.Autoruns.GenericKDS.31225985 Deleted
    
47. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(37).vir Trojan.GenericKD.31023635 Deleted
    
48. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(38).vir Trojan.Ransom.Cerber.NV Deleted
    
49. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(15).vir Trojan.GenericKD.31020137 Deleted
    
50. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(33).vir Trojan.GenericKD.40536598 Deleted
    
51. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(31).vir Trojan.GenericKD.40764775 Deleted
    
52. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(3).vir Gen:Variant.Razy.131406 Deleted
    
53. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(18).vir Gen:Heur.MSIL.Bladabindi.1 Deleted
    
54. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(36).vir Trojan.Agent.CCLB Deleted
    
55. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(16).vir Trojan.GenericKD.40797120 Deleted
    
56. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(11).vir Application.KeyLogger.QRC Deleted
    
57. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(21).vir Trojan.GenericKD.40819815 Deleted
    
58. C:\Users\Joseph\Desktop\VirusSamples_122\Samp(14).vir Trojan.GenericKD.40434394 Deleted
    

复制代码

Nocria

二次扫描
37/50+20/30=57/80

petr0vic

瑞星RDM+社区版
S：(42/50)，M：(30/30)，T：(72/80)，90%

1. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(12).vir","infect":{"engine":"rdmk","signature":"cmRtazqQf0TwWq60BYlmG3LKELfb","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
   
2. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(11).vir","type":"scan"}
   
3. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(16).vir","infect":{"engine":"md5","signature":"bWQ1Oh6BsCpnEcz2WWxRxmGoZL0","threat":"Downloader.Geral!8.72A"},"type":"scan"}
   
4. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(15).vir","infect":{"engine":"md5","signature":"bWQ1OqnbpN0rwiEDyIzDqoRNJNA","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
   
5. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(10).vir","type":"scan"}
   
6. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(1).vir","type":"scan"}
   
7. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(19).vir","infect":{"engine":"md5","signature":"bWQ1OrHwS0ZxFbNmqNi3b9TabMc","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
   
8. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(18).vir","infect":{"engine":"rdmk","signature":"cmRtazo1X5D/wJBN8gsJwjezaZcl","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
   
9. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(20).vir","infect":{"engine":"md5","signature":"bWQ1OkOMgPw3bA49M3n/7Fo7zXQ","threat":"Dropper.Evotob!8.73F"},"type":"scan"}
   
10. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(21).vir","infect":{"engine":"md5","signature":"bWQ1Ol7b+cHfJfhxExNPxlafhn0","threat":"Downloader.Geral!8.72A"},"type":"scan"}
    
11. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(22).vir","infect":{"engine":"rdmk","signature":"cmRtazrTGaQKWUsY5m2iy2ZqJIJ/","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
12. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(23).vir","infect":{"engine":"md5","signature":"bWQ1OhzmoMrBuOD77SrhAw/2x+A","threat":"Trojan.Kryptik!1.ABE8"},"type":"scan"}
    
13. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(17).vir","infect":{"engine":"rdmk","signature":"cmRtazqWaCMKW0fUj8166vDr4cpS","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
14. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(26).vir","infect":{"engine":"c64","signature":"YzY0Oi23EBIXyIBo","threat":"Malware.Generic.3!tfe"},"type":"scan"}
    
15. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(27).vir","infect":{"engine":"rdmk","signature":"cmRtazqqJUgbAI+qQ09T6hpv1xTF","threat":"Malware.Heuristic!ET#80%"},"type":"scan"}
    
16. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(28).vir","infect":{"engine":"rdmk","signature":"cmRtazoe31doHtmflUgc/NFRlcmk","threat":"Malware.Heuristic!ET#79%"},"type":"scan"}
    
17. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(3).vir","infect":{"engine":"md5","signature":"bWQ1Okdc0kImB5rOYqQoPPpVJmQ","threat":"Ransom.Locky!8.1CD4"},"type":"scan"}
    
18. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(2).vir","type":"scan"}
    
19. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(29).vir","type":"scan"}
    
20. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(24).vir","infect":{"engine":"md5","signature":"bWQ1Othrgtn7tWGOOy8W9TfNmnA","threat":"Trojan.TrickBot!8.E313"},"type":"scan"}
    
21. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(30).vir","infect":{"engine":"rdmk","signature":"cmRtazr/YGQIyygLvBJkpaECbER8","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
22. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(33).vir","infect":{"engine":"md5","signature":"bWQ1OvOTlUHv7HpuJYekuHNSfW8","threat":"Spyware.Zbot!8.16B"},"type":"scan"}
    
23. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(35).vir","infect":{"engine":"c64","signature":"YzY0OkrSDP2YrLyT","threat":"Backdoor.Androm!8.113"},"type":"scan"}
    
24. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(25).vir","type":"scan"}
    
25. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(31).vir","infect":{"engine":"md5","signature":"bWQ1OvN3kUpmoLYUub5nC6KLwJI","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
    
26. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(38).vir","infect":{"engine":"c64","signature":"YzY0Op/3K1ifcqmz","threat":"Ransom.Zerber!8.518C"},"type":"scan"}
    
27. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(39).vir","infect":{"engine":"md5","signature":"bWQ1OpM1cXiiYKbCb6Z2KYsQ+6E","threat":"Trojan.Kryptik!1.B5F8"},"type":"scan"}
    
28. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(13).vir","infect":{"engine":"rdmk","signature":"cmRtazo0m0nw1pYXCIQnmmnl4HQn","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
29. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(14).vir","infect":{"engine":"rdmk","signature":"cmRtazoi1mLJKXoKTkwCeYs2bO6Q","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
30. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(36).vir","infect":{"engine":"md5","signature":"bWQ1OszsvJmum8cRM8qlaHdjW60","threat":"Spyware.Zbot!8.16B"},"type":"scan"}
    
31. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(4).vir","infect":{"engine":"rdmk","signature":"cmRtazqRSC8tNWT0GVYt+0ENz7BL","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
32. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(41).vir","infect":{"engine":"md5","signature":"bWQ1OnlKho0WgWAACrOJZVljfxo","threat":"Trojan.Emotet!8.B95"},"type":"scan"}
    
33. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(43).vir","infect":{"engine":"md5","signature":"bWQ1OmEZ6JddVI01Djo4j4hLRq0","threat":"Trojan.Zpevdo!8.F912"},"type":"scan"}
    
34. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(44).vir","infect":{"engine":"md5","signature":"bWQ1Ot9t8WK2wt1Sl6LaB8BJ0Xc","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
    
35. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(37).vir","infect":{"engine":"md5","signature":"bWQ1OpEP4L/RFnsV4XneCNt1J0U","threat":"Downloader.Agent!8.B23"},"type":"scan"}
    
36. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(32).vir","type":"scan"}
    
37. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(46).vir","infect":{"engine":"md5","signature":"bWQ1Ok6c4OalZaX0quf0M0z+Op4","threat":"Ransom.Tovicrypt!8.9F4B"},"type":"scan"}
    
38. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(47).vir","infect":{"engine":"rdmk","signature":"cmRtazqy7a+2kIoUg7XBrl4+i5X1","threat":"Malware.Heuristic!ET#97%"},"type":"scan"}
    
39. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(48).vir","infect":{"engine":"c64","signature":"YzY0Olqf3fKnsoLg","threat":"Ransom.Purgen!8.E539"},"type":"scan"}
    
40. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(40).vir","infect":{"engine":"tfe","signature":"dGZlOgTDZzSq/gtHUQ","threat":"Trojan.Generic!8.C3"},"type":"scan"}
    
41. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(6).vir","infect":{"engine":"md5","signature":"bWQ1OuFZMWoRXkKvvmvyFpDBFO8","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
    
42. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(7).vir","infect":{"engine":"md5","signature":"bWQ1On1R3IEgTPW66pEwTYzyDBY","threat":"Spyware.Zbot!8.16B"},"type":"scan"}
    
43. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(50).vir","infect":{"engine":"rdmk","signature":"cmRtazrqbPrPRMXGEcWNlTczKEPq","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
44. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(34).vir","infect":{"engine":"rdmk","signature":"cmRtazrz3mbfRIcbwqZfRkzdXfR5","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
45. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(10)M.vir","infect":{"engine":"rdmk","signature":"cmRtazpYDsHFzDNd8TIj1flCpkwL","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
46. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(8).vir","infect":{"engine":"md5","signature":"bWQ1OooUlcjyfTYWXgHPpURo80s","threat":"Malware.Obscure/Heur!1.A89E"},"type":"scan"}
    
47. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(11)M.vir","infect":{"engine":"rdmk","signature":"cmRtazqA+NPO9DJ59ix/ftqlcUZo","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
48. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(49).vir","type":"scan"}
    
49. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(9).vir","infect":{"engine":"md5","signature":"bWQ1Or8GGokcDk5d1vARZyN4f+4","threat":"Trojan.Spy.Win32.Crowti.hg"},"type":"scan"}
    
50. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(12)M.vir","infect":{"engine":"rdmk","signature":"cmRtazqWhuYWc/IDfv+mCJ8l14ZG","threat":"Malware.Heuristic!ET#89%"},"type":"scan"}
    
51. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(14)M.vir","infect":{"engine":"rdmk","signature":"cmRtazoUnTSKrQinBuuVhvg6Av2T","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
52. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(42).vir","infect":{"engine":"md5","signature":"bWQ1Ov0TMp+9Jj202fUAj9BYSuw","threat":"Trojan.Emotet!8.B95"},"type":"scan"}
    
53. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(15)M.vir","infect":{"engine":"rdmk","signature":"cmRtazpA+kf8jIxVQBnToaeImx7Q","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
54. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(45).vir","infect":{"engine":"md5","signature":"bWQ1OkRaFmOt+nevsyUmEX8mOGk","threat":"Trojan.Crypto!8.364"},"type":"scan"}
    
55. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(1)M.vir","infect":{"engine":"rdmk","signature":"cmRtazqIpPpw3PkCnbwN5RDmJCQM","threat":"Malware.Heuristic!ET#88%"},"type":"scan"}
    
56. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(17)M.vir","infect":{"engine":"rdmk","signature":"cmRtazri5KREwmm3jDZFnb+Xm9Bv","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
57. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(18)M.vir","infect":{"engine":"md5","signature":"bWQ1OswpchPjm333TDpIOem8WWc","threat":"Spyware.Zbot!8.16B"},"type":"scan"}
    
58. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(19)M.vir","infect":{"engine":"rdmk","signature":"cmRtazool11X/gOgseTHMd9wkbPp","threat":"Malware.Heuristic!ET#93%"},"type":"scan"}
    
59. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(2)M.vir","infect":{"engine":"rdmk","signature":"cmRtazoj1v+XTEbrcdUpgqrUevsK","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
60. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(20)M.vir","infect":{"engine":"rdmk","signature":"cmRtazrj8YTUq03O2FeW/opTN2Pk","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
61. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(21)M.vir","infect":{"engine":"rdmk","signature":"cmRtazrmulAJUoL6BrRhKybkpDjm","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
62. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(25)M.vir","infect":{"engine":"rdmk","signature":"cmRtazq0uRXeDIobRa0Ugf1zitkA","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
63. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\Samp(5).vir","infect":{"engine":"md5","signature":"bWQ1Oh09/wPbtzk9upCSkV9H92Q","threat":"Downloader.Geral!8.72A"},"type":"scan"}
    
64. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(26)M.vir","infect":{"engine":"rdmk","signature":"cmRtazqFUmaEJr+IjqHCQPwCdydN","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
65. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(22)M.vir","infect":{"engine":"rdmk","signature":"cmRtazp9mM58/SFsJx3wEVnH9NZJ","threat":"Malware.Heuristic!ET#85%"},"type":"scan"}
    
66. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(27)M.vir","infect":{"engine":"rdmk","signature":"cmRtazoToZN+pAQZFcXx7KRbPGa1","threat":"Malware.Heuristic!ET#88%"},"type":"scan"}
    
67. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(28)M.vir","infect":{"engine":"rdmk","signature":"cmRtazqMEKf8A2hg5UjSpy2CAN19","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
68. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(16)M.vir","infect":{"engine":"rdmk","signature":"cmRtazqPqY72DiKxRMEf89m/nYFJ","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
69. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(23)M.vir","infect":{"engine":"rdmk","signature":"cmRtazroTG6o7R7718o5eRBsLM/q","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
70. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(29)M.vir","infect":{"engine":"rdmk","signature":"cmRtazokvXz3BCzYGjC1blQcfDR7","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
71. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(30)M.vir","infect":{"engine":"rdmk","signature":"cmRtazpSEbgQjGGGMuVZfhcyg6T9","threat":"Malware.Heuristic!ET#89%"},"type":"scan"}
    
72. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(5)M.vir","infect":{"engine":"rdmk","signature":"cmRtazoUKcOitk67V8bTb5hb/2ih","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
73. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(4)M.vir","infect":{"engine":"rdmk","signature":"cmRtazq2dk09w/44N/++9GeRX5Xu","threat":"Malware.Heuristic!ET#92%"},"type":"scan"}
    
74. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(6)M.vir","infect":{"engine":"rdmk","signature":"cmRtazo0ql+miQI55kZLjoeSvctg","threat":"Malware.Heuristic!ET#83%"},"type":"scan"}
    
75. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(7)M.vir","infect":{"engine":"rdmk","signature":"cmRtazrJ6lIq5Q9JhuoF0E48qpkY","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
76. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(8)M.vir","infect":{"engine":"rdmk","signature":"cmRtazrSwn8rHEmyd8HfE8nLZJY6","threat":"Malware.Heuristic!ET#93%"},"type":"scan"}
    
77. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(9)M.vir","infect":{"engine":"rdmk","signature":"cmRtazpWp9g2Zc0E6QcdKpn1dWjo","threat":"Malware.Heuristic!ET#94%"},"type":"scan"}
    
78. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(13)M.vir","infect":{"engine":"rdmk","signature":"cmRtazqcYbydLZGasg/U0k0gLNC4","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
79. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(24)M.vir","infect":{"engine":"rdmk","signature":"cmRtazqTrQTgOL1klXEq5BBNL/S+","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
    
80. {"filename":"C:\\Users\\User\\Desktop\\VirusSamples_122\\VirusSamples_122M\\Samp(3)M.vir","infect":{"engine":"rdmk","signature":"cmRtazpg56cXO7mz/rEmgoQ3dDo5","threat":"Malware.Heuristic!ET#86%"},"type":"scan"}

复制代码

www-tekeze

petr0vic 发表于 2019-5-23 22:33
瑞星RDM+社区版
S：(42/50)，M：(30/30)，T：(72/80)，90%

M的全歼，这个RDM+是厉害。。

a233

双击(不测试火绒)无法运行的有 Samp(2) Samp(10) Samp(29) Samp(32)
双击总共杀了15个

扫描48x+双击15x=总共63/80 78.75%

小Q机器人

www-tekeze 发表于 2019-5-23 22:39
M的全歼，这个RDM+是厉害。。

RDM比   瑞星杀毒强很多，但是也超级高

jiaobaoyun51

Avira kill 70x
二扫APC又KILL 1X 合计71X

StarlitFuture

360卫士12
扫描
S: 42/50 M: 30/30 Total: 72/80
双击

1. 时间        操作        说明        次数
   
2. 2019-05-23 23:10:09        [已阻止]          进程创建        防护 1 次
   
3. 详细描述：
   
4. 进程：C:\Windows\explorer.exe
   
5. 动作：进程创建
   
6. 路径：C:\Users\TEST\Desktop\S\Samp(27).exe
   
7. 风险文件：C:\Users\TEST\Desktop\S\Samp(27).exe
   
8. 
   
9. 时间    操作    说明    次数
   
10. 2019-05-23 23:10:31    [已阻止]      远程线程注入    防护 1 次
    
11. 详细描述：
    
12. 进程：C:\Users\TEST\Desktop\S\Samp(36).exe
    
13. 动作：远程线程注入
    
14. 路径：C:\Windows\explorer.exe
    
15. 风险文件：C:\Users\TEST\Desktop\S\Samp(36).exe
    

复制代码

Samp(13).exe无可疑行为
剩余样本无法运行