EXE样本10X_50

www-tekeze

RT，想双击自己改后缀，风险自负。。



载点：https://www.lanzous.com/i8ion2f     密码：infected

890

BDTS killed all

Miostartos

ESET all

WeeVee

卡巴全杀了，还是5号的病毒库，懒得更新

心醉咖啡

火绒

1. 病毒库时间：2020-01-06 16:35
   
2. 开始时间：2020-01-07 16:50
   
3. 总计用时：00:00:05
   
4. 扫描对象：91
   
5. 扫描文件：10
   
6. 发现风险：2
   
7. 已处理风险：2
   
8. 病毒详情：
   
9. 风险路径：F:\浏览器下载\EXE样本10X_50\Samp(10).vir >> [NSIS].nsi, 病毒名：Trojan/Injector.mc, 病毒ID：8856696ad226ce1b, 处理结果：已处理，删除文件
   
10. 风险路径：F:\浏览器下载\EXE样本10X_50\Samp(2).vir, 病毒名：Ransom/BTCware.d, 病毒ID：4c80c42ea2ca9ce0, 处理结果：已处理，删除文件
    

复制代码

a233

Dr.Web

Agu

F-Secure - 10X

1. 結果
   
2. 已掃描項目： 12
   
3. 發現的有害項目： 10
   
4. 詳細資料
   
5. Trojan.TR/TerraLoader.iks
   
6. C:\Users\Agu\Downloads\EXE样本10X_50\Samp(1).vir: 已清除
   
7. Trojan.TR/Dropper.Gen
   
8. C:\Users\Agu\Downloads\EXE样本10X_50\Samp(3).vir: 已清除
   
9. Trojan.TR/AD.RansomHeur.sjutw
   
10. C:\Users\Agu\Downloads\EXE样本10X_50\Samp(2).vir: 已清除
    
11. Heuristic.HEUR/AGEN.1044416
    
12. C:\Users\Agu\Downloads\EXE样本10X_50\Samp(4).vir: 已清除
    
13. PUA/CoinMiner
    
14. C:\Users\Agu\Downloads\EXE样本10X_50\Samp(9).vir: 已隔離
    
15. Trojan.TR/AD.TrickBot.djaum
    
16. C:\Users\Agu\Downloads\EXE样本10X_50\Samp(6).vir: 已清除
    
17. Heuristic.HEUR/AGEN.1032942
    
18. C:\Users\Agu\Downloads\EXE样本10X_50\Samp(7).vir: 已清除
    
19. Trojan.TR/Dropper.Gen
    
20. C:\Users\Agu\Downloads\EXE样本10X_50\Samp(5).vir: 已清除
    
21. Heuristic.HEUR/AGEN.1017351
    
22. C:\Users\Agu\Downloads\EXE样本10X_50\Samp(8).vir: 已清除
    
23. TR/Dropper.Gen8
    
24. C:\Users\Agu\Downloads\EXE样本10X_50\Samp(10).vir: 已清除
    
25. 版本資訊
    
26. 掃描引擎：
    
27. 
    
28. F-Secure Capricorn: 18.0.595, 2020-01-07
    
29. F-Secure Hydra: 6.0.95, 2020-01-06
    
30. F-Secure Lynx: 2.3.151
    
31. F-Secure Online: 17.5.1341
    
32. F-Secure USS: 6.0.23, 2019-09-03
    
33. F-Secure Virgo Detection: 17.5.1341

复制代码

GData - 10X


Malwarebytes - 9X

www-tekeze

发帖时：安天报7项实杀6X，无BD管家杀4X 。

FD丶纸鸢

Emsi all


C:\Users\Administrator\Desktop\EXE样本10X_50\Samp(1).exe         发现风险： Trojan.GenericKD.42199438 (B) [krnl.xmd]
C:\Users\Administrator\Desktop\EXE样本10X_50\Samp(3).exe         发现风险： Trojan.GenericKDZ.51307 (B) [krnl.xmd]
C:\Users\Administrator\Desktop\EXE样本10X_50\Samp(2).exe         发现风险： Trojan.GenericKD.42212789 (B) [krnl.xmd]
C:\Users\Administrator\Desktop\EXE样本10X_50\Samp(5).exe         发现风险： Trojan.GenericKDZ.51307 (B) [krnl.xmd]
C:\Users\Administrator\Desktop\EXE样本10X_50\Samp(6).exe         发现风险： Trojan.Agent.EIJV (B) [krnl.xmd]
C:\Users\Administrator\Desktop\EXE样本10X_50\Samp(7).exe         发现风险： Trojan.GenericKDZ.46844 (B) [krnl.xmd]
C:\Users\Administrator\Desktop\EXE样本10X_50\Samp(4).exe         发现风险： Gen:Variant.Adware.Razy.460152 (B) [krnl.xmd]
C:\Users\Administrator\Desktop\EXE样本10X_50\Samp(9).exe         发现风险： Gen:Variant.Razy.560738 (B) [krnl.xmd]
C:\Users\Administrator\Desktop\EXE样本10X_50\Samp(10).exe         发现风险： Gen:Variant.Ursu.726095 (B) [krnl.xmd]
C:\Users\Administrator\Desktop\EXE样本10X_50\Samp(8).exe         发现风险： Gen:Variant.Ursu.131665 (B) [krnl.xmd]

Janus

诺顿扫描all killed

Scan Information:
  Virus Defs Version: 2020.01.09.006
  Virus Defs Seq ID: 204150

Scan Statistics:
  Scan Start:
   Local: 1/9/2020 6:00 PM
   UTC: 1/10/2020 2:00 AM
  Scan Time: 32 seconds
  Scan Targets: C:\Users\Tester\Desktop\Work
  Counts:
   Total items scanned: 11
   - Files & Directories: 11
   - Registry Entries: 0
   - Processes & Startup Items: 0
   - Network & Browser Items: 0
   - Other: 0
   - Trusted Files: 0
   - Skipped Files: 0

   Total security risks detected: 12
   Total items resolved: 12
   Total items that require attention: 0

Resolved Threats:
Heur.AdvML.B
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 Infected File
C:\Users\Tester\Desktop\Work\Samp(3).vir - Deleted
1 Browser Cache



Trojan.Gen.6
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Virus
Status: Fully Resolved
-----------
2 Infected Files
C:\Users\Tester\Desktop\Work\Samp(3).vir - No Action Required
C:\Users\Tester\Desktop\Work\Samp(5).vir - No Action Required
1 Browser Cache



Heur.AdvML.B
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 Infected File
C:\Users\Tester\Desktop\Work\Samp(4).vir - Deleted
1 Browser Cache



Trojan.Gen.MBT
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Virus
Status: Fully Resolved
-----------
5 Infected Files
C:\Users\Tester\Desktop\Work\Samp(4).vir - No Action Required
C:\Users\Tester\Desktop\Work\Samp(7).vir - No Action Required
C:\Users\Tester\Desktop\Work\Samp(1).vir - Deleted
C:\Users\Tester\Desktop\Work\Samp(10).vir - No Action Required
C:\Users\Tester\Desktop\Work\Samp(6).vir - No Action Required
1 Browser Cache



Heur.AdvML.B
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 Infected File
C:\Users\Tester\Desktop\Work\Samp(5).vir - Deleted
1 Browser Cache



Heur.AdvML.B
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 Infected File
C:\Users\Tester\Desktop\Work\Samp(7).vir - Deleted
1 Browser Cache



SMG.Heur!gen
Type: Anomaly
Risk: Low (Low Stealth, Low Removal, Low Performance, Low Privacy)
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
C:\Users\Tester\Desktop\Work\Samp(8).vir - Deleted
1 Browser Cache



Trojan.Gen.2
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Virus
Status: Fully Resolved
-----------
1 Infected File
C:\Users\Tester\Desktop\Work\Samp(9).vir - Deleted
1 Browser Cache



Heur.AdvML.C
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 Infected File
C:\Users\Tester\Desktop\Work\Samp(10).vir - No Action Required
1 Browser Cache



Heur.AdvML.B
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 Infected File
C:\Users\Tester\Desktop\Work\Samp(6).vir - Deleted
1 Browser Cache



Heur.AdvML.B
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Heuristic Virus
Status: Restart Required
-----------
1 Infected File
C:\Users\Tester\Desktop\Work\Samp(2).vir - Restart Required
1 Browser Cache



Downloader
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)
Categories: Virus
Status: Fully Resolved
-----------
1 Infected File
C:\Users\Tester\Desktop\Work\Samp(2).vir - No Action Required
1 Browser Cache





Unresolved Threats:
No unresolved risks