EXE样本10X_61

www-tekeze

RT，想双击自己改后缀，风险自负。。



载点：https://www.lanzous.com/i9az9sb     密码：infected

DPT1

早，金山占楼10：46


11:45

12:16

12:45清空剩下的

温馨小屋

卡巴扫描8个



双击miss 1


等了好长时间终于把5号杀了

13.02.2020 10.44.38;已终止 恶意软件;PDM:Trojan.Win32.Generic;C:\Users\hyperkaba\Desktop\EXE样本10X_61\#61 (5).exe;C:\Users\hyperkaba\Desktop\EXE样本10X_61\#61 (5).exe;02/13/2020 10:44:38

温馨小屋

BD，扫描9个

双击，1号直接退出，miss

renyifei

malwarebytes 9/10
双击有反应，谁能说一下10号这个病毒的工作原理？应该是要用指令来下载什么东西，弹完窗自动退出

Nocria

IKARUS - 8/10

1. [13.02.2020 10:55:44] On-demand scan started: "user_defined"
   
2. [13.02.2020 10:55:44] Found, 0.00s, SigName: "Trojan.Win32.Injector", SigId: 291795796, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_61\#61 (2).vir"
   
3. [13.02.2020 10:55:44] Found, 0.15s, SigName: "Trojan.MSIL.Inject", SigId: 3295319, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_61\#61 (3).vir"
   
4. [13.02.2020 10:55:44] Found, 0.172s, SigName: "Trojan-Spy.HawkEye", SigId: 3247622, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_61\#61 (5).vir"
   
5. [13.02.2020 10:55:44] Found, 0.15s, SigName: "Trojan.Win32.Injector", SigId: 291906145, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_61\#61 (7).vir"
   
6. [13.02.2020 10:55:44] Found, 0.172s, SigName: "Trojan.VB.Crypt", SigId: 3686341, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_61\#61 (6).vir"
   
7. [13.02.2020 10:55:44] Found, 0.250s, SigName: "Trojan-Spy.Keylogger.AgentTesla", SigId: 3705380, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_61\#61 (4).vir"
   
8. [13.02.2020 10:55:44] Found, 0.156s, SigName: "Trojan.Inject", SigId: 3750285, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_61\#61 (8).vir"
   
9. [13.02.2020 10:55:44] Found, 0.188s, SigName: "Trojan-Spy.Keylogger.AgentTesla", SigId: 3705380, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本10X_61\#61 (9).vir"
   
10. [13.02.2020 10:55:44] On-demand scan FINISHED: "user_defined"
    
11. [13.02.2020 10:55:44] ----------------------------------------------------
    
12. [13.02.2020 10:55:44] Directories scanned: 1
    
13. [13.02.2020 10:55:44] Files scanned: 10
    
14. [13.02.2020 10:55:44] Virus found: 8
    
15. [13.02.2020 10:55:44] ----------------------------------------------------

复制代码

nicaicaikan

drweb 9X

傲普斯顿

咖啡扫描KILL 9   剩下8号入沙    结果没跑起来就夭折了

LSPD

Norton  扫描9x 双击kill 1x

Nocria

FSIS - 9+1/10