样本8X

显示全部楼层 · 发表于 2019-12-25 11:41:13

RT，来试试你的杀软咋样。。

载点：https://www.lanzous.com/i897twf 密码：infected

显示全部楼层 · 发表于 2019-12-25 11:48:27

显示全部楼层 · 发表于 2019-12-25 11:50:22

卡巴剩下两个DLL不知道怎么运行，无法测试

显示全部楼层 · 发表于 2019-12-25 12:18:34

360杀3个

显示全部楼层 · 发表于 2019-12-25 12:23:42

显示全部楼层 · 发表于 2019-12-25 12:31:01

火绒杀一个

显示全部楼层 · 发表于 2019-12-25 12:34:25

诺顿只杀了2个，分别是1和8

显示全部楼层 · 发表于 2019-12-25 13:21:57

卡巴斯基6/8

显示全部楼层 · 发表于 2019-12-25 13:36:07

hawkdai 发表于 2019-12-25 12:31
火绒杀一个

蛋定。。。不放心就搭配个智量，看我的签名。。

显示全部楼层 · 发表于 2019-12-25 23:45:05

本帖最后由傻猪猪米走鸡于 2019-12-25 23:59 编辑

eset

Log
Scan Log
Version of detection engine: 20566P (20191225)
Date: 2019/12/25 Time: 23:43:49
Scanned disks, folders and files: C:\Users\Galaxy\Desktop\样本8X
C:\Users\Galaxy\Desktop\样本8X\Samp(5).dll - a variant of Generik.INHMWJU trojan - cleaned by deleting [1]
Number of scanned objects: 42
Number of detections: 1
Number of cleaned objects: 1
Time of completion: 23:43:52 Total scanning time: 3 sec (00:00:03)

Notes:
[1] Object has been deleted as it only contained the virus body.
Time;Scanner;Object type;Object;Detection;Action;User;Information;Hash;First seen here
2019/12/25 23:49:41;Advanced memory scanner;file;Operating memory » rundll32.exe(5384);a variant of Win32/Spy.Ursnif.AV trojan;cleaned (after the next restart) - contained infected files;;;68E6924409D81CFEDD270F1374BF92918AAF8F3B;
2019/12/25 23:50:59;Real-time file system protection;file;C:\Users\Galaxy\Desktop\样本8X\Samp(1).exe;JS/TrojanDownloader.Agent.PIC trojan;cleaned by deleting;Galaxy-PC\Galaxy;Event occurred during an attempt to access the file by the application: C:\Windows\explorer.exe (1643E6D0265EB60B0753CDC9C283D843B988E1D5).;509E1926A73E69F778B79A9C8BC06CD7F72C62DF;2019/12/25 23:43:40
2019/12/25 23:52:39;Real-time file system protection;file;C:\Users\Galaxy\AppData\Local\Temp\xjlzbe.dll;a variant of Generik.INHMWJU trojan;cleaned by deleting (after the next restart);NT AUTHORITY\SYSTEM;Event occurred during an attempt to access the file by the application: C:\Windows\System32\svchost.exe (4AF001B3C3816B860660CF2DE2C0FD3C1DFB4878).;4DB179A046CCAD2D4D8AA81873B62043E12A350C;2019/12/25 23:48:10
2019/12/25 23:53:40;Real-time file system protection;file;C:\Users\Galaxy\AppData\Local\Temp\xjlzbe.dll;a variant of Generik.INHMWJU trojan;cleaned by deleting;Galaxy-PC\Galaxy;Event occurred during an attempt to access the file by the application: C:\Windows\System32\rundll32.exe (892503B20247B341CFD20DDA5FDACFA41527A087).;4DB179A046CCAD2D4D8AA81873B62043E12A350C;2019/12/25 23:48:10

[病毒样本] 样本8X

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源

评分