EXE样本10X_48

sichuanwenxuan

WD扫描杀8个。

双击4

没有进行安装。未见异常。双击10出错。

sichuanwenxuan

FSCS13扫描余下2个文件。准备改1号后缀被杀。4号成功运行如楼上。

岚Azure

瑞星8、卡巴9、EEK9

傲普斯顿

kaspersky kill 8

话说为啥卡巴清毒这么慢   等半天才清完
我终于知道为什么这么多人不爱用卡巴在样本区了

傻猪猪米走鸡

Log
Scan Log
Version of detection engine: 20611P (20200103)
Date: 2020/1/3  Time: 18:51:47
Scanned disks, folders and files: C:\Users\Galaxy\Desktop\EXE样本10X_48
C:\Users\Galaxy\Desktop\EXE样本10X_48\Samp(1).vir - a variant of Win64/CoinMiner.PR potentially unwanted application - action selection postponed until scan completion
C:\Users\Galaxy\Desktop\EXE样本10X_48\Samp(3).vir - Win32/Spy.Banker.WGA trojan - cleaned by deleting [1]
C:\Users\Galaxy\Desktop\EXE样本10X_48\Samp(5).vir - a variant of MSIL/Ribaj.D virus - action selection postponed until scan completion
C:\Users\Galaxy\Desktop\EXE样本10X_48\Samp(6).vir » INNO » {app}\labore\Tenetur.exe - a variant of Win32/Kryptik.GZPM trojan - cleaned by deleting [1]
C:\Users\Galaxy\Desktop\EXE样本10X_48\Samp(7).vir - a variant of Win64/CoinMiner.PQ potentially unwanted application - action selection postponed until scan completion
C:\Users\Galaxy\Desktop\EXE样本10X_48\Samp(8).vir - a variant of Win64/CoinMiner.SY trojan - cleaned by deleting [1]
C:\Users\Galaxy\Desktop\EXE样本10X_48\Samp(9).vir - a variant of Win64/CoinMiner.SY trojan - cleaned by deleting [1]
C:\Users\Galaxy\Desktop\EXE样本10X_48\Samp(1).vir - a variant of Win64/CoinMiner.PR potentially unwanted application - cleaned by deleting [1]
C:\Users\Galaxy\Desktop\EXE样本10X_48\Samp(5).vir - a variant of MSIL/Ribaj.D virus - deleted
C:\Users\Galaxy\Desktop\EXE样本10X_48\Samp(7).vir - a variant of Win64/CoinMiner.PQ potentially unwanted application - cleaned by deleting [1]
Number of scanned objects: 27
Number of detections: 7
Number of cleaned objects: 7
Time of completion: 18:53:19  Total scanning time: 92 sec (00:01:32)

Notes:
[1] Object has been deleted as it only contained the virus body.

wow999

ESET Kill 7 留下2 4 8

651332725

裸机试了下，没什么异常

QVM360

ESET INTERNET SECURITYMISSED 2,4,10实体机双击剩余文件

samp2火绒监控杀！
samp4白文件
samp10，缺少dll，无法运行
samp2是易语言，samp4和samp10的文件信誉如下：

a233

Dr.Web

岚Azure

傲普斯顿 发表于 2020-1-3 18:09
kaspersky kill 8

话说为啥卡巴清毒这么慢   等半天才清完

因为不是简单的删除，要搜索有没有残留，如果有残留，它会让你消除并重启。如果没有残留，直接消除或删除