——————————————样本36x————————————

你好，再见

https://c-t.work/s/56d8b3f4a5ba4a

另：“诸葛亮智能学习引擎”如无截图，请勿回帖

huang1111

卡巴 扫描kill x33
剩余样本截图：
日志：

a233

火绒Kill 19X 剩17个

a233

Avast Kill 32X(以实际杀的数量为准) 剩4个

温馨小屋

卡巴33个，剩下的双击，一个福昕的安装程序报错，另外两个闪退

huang1111

huang1111 发表于 2019-6-1 21:19
卡巴 扫描kill x33
剩余样本截图：
日志：

补充：
上传卡巴斯基反病毒实验室，反馈如下：
在以下文件中找到已被使用 KSN 技术的 Kaspersky Lab 产品检测到的恶意代码：
45.MSI - UDS:DangerousObject.Multi.Generic

在防病毒数据库中未找到有关指定文件的信息：
Def.exe
oMFc3FlE.exe

岂曰无衣

360  33

a233

a233 发表于 2019-6-1 21:31
Avast Kill 32X(以实际杀的数量为准) 剩4个

双击剩下的4个样本Tini_Projec.exe 双击后等一会停止工作了
SWKL.exe 双击后小a拦截了一个网址，后面就没有行为了
Rastreamen.MSI和45.MSI都安装不了，自己退出了

裂空我爱杰

小红伞扫描到45.MSI的时候卡死了。。。。放弃了。。。

Nocria

1. Scan Log
   
2. Version of detection engine: 19452P (20190601)
   
3. Date:  1. 6.2019  Time: 22:30:33
   
4. Scanned disks, folders and files: /Users/sergioramos/Desktop/Vir;
   
5. /Users/sergioramos/Desktop/Vir/080h_9325.exe - a variant of Win32/Kryptik.GSYO trojan
   
6. /Users/sergioramos/Desktop/Vir/1(01).exe - Win32/Filecoder.Shade.A trojan
   
7. /Users/sergioramos/Desktop/Vir/1(02).exe - Win32/Filecoder.Shade.B trojan
   
8. /Users/sergioramos/Desktop/Vir/11.exe - a variant of Win32/GenKryptik.DJQE trojan
   
9. /Users/sergioramos/Desktop/Vir/1c.exe - Win32/Filecoder.Shade.A trojan
   
10. /Users/sergioramos/Desktop/Vir/3th.msi » MSI » Binary._D7D112F049BA1A655B5D9A1D0702DEE5 - a variant of Win32/GenKryptik.DJPH trojan
    
11. /Users/sergioramos/Desktop/Vir/44.exe - a variant of Win32/Kryptik.GTOC trojan
    
12. /Users/sergioramos/Desktop/Vir/45.MSI » MSI » Binary.NTKernel.exe - a variant of Win32/TrojanDownloader.Delf.CRQ trojan
    
13. /Users/sergioramos/Desktop/Vir/55.exe - a variant of Win32/GenKryptik.DJQE trojan
    
14. /Users/sergioramos/Desktop/Vir/6o2pfxd_6.exe - a variant of Win32/Kryptik.GQEV trojan
    
15. /Users/sergioramos/Desktop/Vir/7sk.exe - a variant of Win32/Kryptik.GSYO trojan
    
16. /Users/sergioramos/Desktop/Vir/8g4.exe - Win32/Dridex.P trojan
    
17. /Users/sergioramos/Desktop/Vir/Paris-nude-video.exe - Win32/TrojanDropper.Small.NHU trojan
    
18. /Users/sergioramos/Desktop/Vir/Rastreamen.MSI » MSI » Binary.NTKernel.exe - a variant of Win32/TrojanDownloader.Delf.CRQ trojan
    
19. /Users/sergioramos/Desktop/Vir/SWKL.exe - Suspicious Object
    
20. /Users/sergioramos/Desktop/Vir/Tini_Projec.exe - Suspicious Object
    
21. /Users/sergioramos/Desktop/Vir/Web-.exe - Win32/TrojanDownloader.Zurgop.BI trojan
    
22. /Users/sergioramos/Desktop/Vir/a3.exe - a variant of Generik.KYZQPPI trojan
    
23. /Users/sergioramos/Desktop/Vir/doc(01).exe - a variant of Win32/Kryptik.FYHF trojan
    
24. /Users/sergioramos/Desktop/Vir/doc(02).exe - a variant of Win32/Injector.EFTJ trojan
    
25. /Users/sergioramos/Desktop/Vir/dsfaf_619.exe - a variant of Win32/Kryptik.GSYO trojan
    
26. /Users/sergioramos/Desktop/Vir/fi(01).exe - a variant of MSIL/Kryptik.RUC trojan
    
27. /Users/sergioramos/Desktop/Vir/fi(02).exe - a variant of MSIL/Kryptik.RSI trojan
    
28. /Users/sergioramos/Desktop/Vir/hfkwijz.exe - a variant of Win32/Kryptik.GSYO trojan
    
29. /Users/sergioramos/Desktop/Vir/hid.exe - a variant of MSIL/Kryptik.RVF trojan
    
30. /Users/sergioramos/Desktop/Vir/ic.exe - a variant of MSIL/Kryptik.EAN trojan
    
31. /Users/sergioramos/Desktop/Vir/kj.msi » MSI » Binary._D7D112F049BA1A655B5D9A1D0702DEE5 » UPX v13_m8 » AUTOIT » script.bin - a variant of Win32/Autoit.DB trojan
    
32. /Users/sergioramos/Desktop/Vir/m6.exe - a variant of Win32/Kryptik.GSYO trojan
    
33. /Users/sergioramos/Desktop/Vir/mala.exe - Win32/TrojanDownloader.Zurgop.DA trojan
    
34. /Users/sergioramos/Desktop/Vir/nib.exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.DZP trojan
    
35. /Users/sergioramos/Desktop/Vir/nijb0b6_65.exe - a variant of Win32/Kryptik.GSYO trojan
    
36. /Users/sergioramos/Desktop/Vir/sabo.exe - a variant of Win32/Kryptik.GTOE trojan
    
37. /Users/sergioramos/Desktop/Vir/tas.exe - MSIL/Spy.Agent.AES trojan
    
38. /Users/sergioramos/Desktop/Vir/tin.exe - a variant of Win32/GenKryptik.DJPG trojan
    
39. Number of scanned objects: 197
    
40. Number of detections: 34
    
41. Number of cleaned objects: 0
    
42. Time of completion: 22:30:41  Total scanning time: 8 sec (00:00:08)
    

复制代码