exe样本 x4

zghnsy127

我只双击了一个2.exe  然并卵。。。。。。。

暗_黑

A20清空

驭龙

zghnsy127 发表于 2019-8-30 10:16
我只双击了一个2.exe  然并卵。。。。。。。

你的蜘蛛杀几个？
我这里才杀X2
2019.8.30 10:18 SpIDer Guard Threat detected Object: putty.exe Threat: Trojan.PWS.Siggen2.23789 Action: Moved Path: D:\12345\infected\putty.exe
2019.8.30 10:18 SpIDer Guard Threat detected Object: 3.exe Threat: Trojan.Encoder.12544 Action: Moved Path: D:\12345\infected\3.exe

暗_黑

智速清空，都是靠360的云?

暗_黑

。。。极宝清空，没意思

pre

ESET清空

zghnsy127

驭龙 发表于 2019-8-30 10:20
你的蜘蛛杀几个？
我这里才杀X2
2019.8.30 10:18 SpIDer Guard Threat detected Object: putty.exe Thr ...

putty.exeTrojan.PWS.Siggen2.237892019/8/30星期五上午10.
3.exeTrojan.Encoder.125442019/8/30星期五上午10：

驭龙

zghnsy127 发表于 2019-8-30 10:47
putty.exeTrojan.PWS.Siggen2.237892019/8/30星期五上午10.
3.exeTrojan.Encoder.125442019/8 ...

看来没区别，12.5只是优化性能，VFE 12.0.2实际上还是VFE 7.0.XX的优化版本啊

zghnsy127

驭龙 发表于 2019-8-30 10:58
看来没区别，12.5只是优化性能，VFE 12.0.2实际上还是VFE 7.0.XX的优化版本啊

文件说明   Dr.Web Anti-virus for Windows
类       型   应用程序
文件版本   12.0.1.8270
产品名称    Dr.Web Anti-virus for Windows
产品版本   12.0.1.08270版权©Doctor Web，1992-2019

驭龙

zghnsy127 发表于 2019-8-30 11:01
文件说明   Dr.Web Anti-virus for Windows
类       型   应用程序
文件版本   12.0.1.8270

我是最新的12.5测试版，特征库和VFE都是12系

Program modules
Dr.Web Security Space
Dr.Web Security Space (12.0)
Dr.Web Virus-Finding Engine
drweb32.dll (12.00.2.08260)
Dr.Web Scanning Engine
dwengine.exe (12.5.0.08140)
Dr.Web Anti-Rootkit Server
dwarkdaemon.exe (12.5.0.08140)
Dr.Web Anti-rootkit API
dwarkapi.dll (12.5.0.201908280)
Dr.Web Thunderstorm Cloud Client SDK
ccsdk.dll (12.0.6.07180)
Dr.Web Scanning Watcher
dwwatcher.exe (12.5.0.08140)
Dr.Web Control Service
dwservice.exe (12.5.0.08260)
Dr.Web Action Center Control
dwsewsc.exe (12.5.0.08260)
Dr.Web Updater
drwupsrv.exe (12.0.14.08220)
Dr.Web antimalware boot driver
dwelam.sys (12.0.0.03130)
SpIDer Agent for Windows
spideragent.exe (12.0.8.07261)
SpIDer Agent admin-mode module for Windows
spideragent_adm.exe (12.0.8.07261)
Dr.Web Scanner SE
dwscanner.exe (12.0.6.08190)
Dr.Web Console Scanner
dwscancl.exe (12.5.0.08140)
Dr.Web File System Monitor
spiderg3.sys (12.5.0.06270)
Dr.Web Protection for Windows
dwprot.sys (12.5.0.08270)
Dr.Web Shellguard anti-exploit module
dwsguard32.dll (11.5.4.01140)
Dr.Web Shellguard anti-exploit module
dwsguard64.dll (11.5.4.01140)
Dr.Web device Guard for Windows
dwdg.sys (12.0.2.03120)
Net filtering service
dwnetfilter.exe (12.0.5.07080)
Dr.Web Firewall for Windows service
frwl_svc.exe (12.00.01.01170)
Dr.Web Firewall for Windows driver
drweblwf.sys (12.0.4.08120)
Dr.Web Shell Extension
drwsxtn.dll (12.0.4.04040)
Dr.Web Shell Extension
drwsxtn64.dll (12.0.4.04040)
Dr.Web SysInfo
dwsysinfo.exe (12.5.0.201908220)
Dr.Web SysInfo library
dwsysinfo.dll (12.5.0.201908220)
Dr.Web AMSI
drwamsi32.dll (12.0.3.06040)
Dr.Web AMSI
drwamsi64.dll (12.0.3.06040)
Dr.Web Security Space setup
win-space-setup.exe (12.5.0.08151)
Dr.Web Upgrade Tool
upgrade.exe (12.0.0.10090)
Dr.Web Upgrade Tool
upgrade.exe (12.0.0.10090)
Virus databases
drwtoday.vdb
    1906 virus records Date: 2019.8.30 9:06
dwf12000.vdb
    8393 virus records Date: 2019.3.26 22:05
drwdaily.vdb
    46808 virus records Date: 2019.8.30 4:57
drw12000.vdb
    775839 virus records Date: 2019.3.7 13:29
drw12001.vdb
    881419 virus records Date: 2019.3.7 13:29
drw12002.vdb
    489634 virus records Date: 2019.3.7 13:29
drw12003.vdb
    335991 virus records Date: 2019.3.7 13:29
drw12004.vdb
    939809 virus records Date: 2019.3.7 13:30
drw12005.vdb
    687696 virus records Date: 2019.3.7 13:30
drw12006.vdb
    1901162 virus records Date: 2019.3.7 13:30
drw12007.vdb
    315940 virus records Date: 2019.7.8 14:50
drw12008.vdb
    46164 virus records Date: 2019.7.22 14:17
drw12009.vdb
    53553 virus records Date: 2019.8.5 14:12
drw12010.vdb
    53280 virus records Date: 2019.8.19 14:17
drwebase.vdb
    955597 virus records Date: 2019.3.26 22:03
dwmtoday.vdb
    2544 virus records Date: 2019.8.30 9:07
dwm12000.vdb
    178403 virus records Date: 2019.3.7 13:31
dwm12001.vdb
    9280 virus records Date: 2019.7.18 3:33
dwm12002.vdb
    3842 virus records Date: 2019.8.6 21:40
dwrtoday.vdb
    2609 virus records Date: 2019.8.30 9:07
drwrisky.vdb
    48006 virus records Date: 2019.3.26 22:03
dwr12000.vdb
    16207 virus records Date: 2019.3.7 13:31
dwntoday.vdb
    5933 virus records Date: 2019.8.30 9:07
drwnasty.vdb
    128549 virus records Date: 2019.3.26 22:03
dwn12000.vdb
    71181 virus records Date: 2019.3.7 13:31
dwp12000.vdb
    518 virus records Date: 2019.3.7 13:31
dwp12000.vdb
    518 virus records Date: 2019.3.7 13:31