EXE样本5X_190

QVM360

RT，未改后缀请小心使用，后果自负。。



载点：https://www.lanzous.com/ia8owih     密码：infected

liu237

12:24

双击拦截4的两个衍生物

a233

Avast 6X

1.upx.exe Miss

QVM360

E家全灭

a233

a233 发表于 2020-3-14 12:29
Avast 6X

1.upx.exe Miss

可以，很快

巍巍

BD扫描剩下两个upx,双击杀1.upx,双击5.upxBD无反应,智量杀,智量信任后双击,智量杀衍生物,没其他行为(其实4也被BD杀了,但没移到隔离区)

LSPD

Kaspersky 扫描 kill 5x miss 2x
                 双击 kill all

YorkWaugh

火绒最近表现不佳啊（实机不双击）

QVM360

YorkWaugh 发表于 2020-3-14 12:54
火绒最近表现不佳啊（实机不双击）

算好的了

Nocria

IKARUS - 4/7

1. [14.03.2020 13:02:15] On-demand scan started: "user_defined"
   
2. [14.03.2020 13:02:15] Found, 0.00s, SigName: "Trojan.MSIL.Crypt", SigId: 294281195, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_190\EXE样本5X_190\2.exe"
   
3. [14.03.2020 13:02:15] Found, 0.16s, SigName: "Trojan.Win32.Krypt", SigId: 294305723, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_190\EXE样本5X_190\1.exe"
   
4. [14.03.2020 13:02:15] Found, 0.31s, SigName: "Trojan.MSIL.Spy", SigId: 2916829, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_190\EXE样本5X_190\3.exe"
   
5. [14.03.2020 13:02:15] Found, 0.109s, SigName: "Trojan.Win32.Themida", SigId: 3766064, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_190\EXE样本5X_190\4.exe"
   
6. [14.03.2020 13:02:15] On-demand scan FINISHED: "user_defined"
   
7. [14.03.2020 13:02:15] ----------------------------------------------------
   
8. [14.03.2020 13:02:15] Directories scanned: 2
   
9. [14.03.2020 13:02:15] Files scanned: 7
   
10. [14.03.2020 13:02:15] Virus found: 4
    
11. [14.03.2020 13:02:15] ----------------------------------------------------

复制代码