EXE样本5X_263

QVM360

RT，未改后缀请小心食用，后果自负。。 载点：https://kafanealg.lanzous.com/ibit9ah     密码：infected 请大家不要直接写“XX杀软漏了几个”“XX杀软杀了几个”“全部都漏2号”之类的 谢谢大家 按照以下格式回帖： 扫描 (   /   )≈     % 双击 (   /   )≈     % 日志（可截图）： 注：双击的样本是扫描漏掉的样本，四舍五入到百分位

巍巍

卡巴
扫描:(10/12)=83.33%
其中:
Original:(4/5)=80%
MD5:(4/5)=80%
UPX:(2/2)=100%
Original&MD5剩余5.exe
双击:(2/2)=100%
综合拦截率:(12/12)=100%

ZSsafe

智速安全助手（断网环境）
启发设置：拓展模式
扫描 (  12 / 12  )≈    100 %

a233

Avast
扫描(12/12) 100%

Xw1nd极风

Norton
扫描(7/12) 58.33%
MD5 1 4
Original 1
UPX 2 4
双击（12/12）100%

杀软小白鼠

Panda Dome
扫描3/12=25%
双击5/9≈55.56%

CHURP

eset扫描（12/12）100%

1. 正在扫描日志
   
2. 检测引擎的版本: 21179 (20200417)
   
3. 日期: 2020/4/17  时间: 17:54:39
   
4. 已扫描的磁盘、文件夹和文件: D:\样本\EXE样本5X_263
   
5. D:\样本\EXE样本5X_263\MD5\1.exe - MSIL/PSW.CoinStealer.CZ 特洛伊木马 的变种 - 通过删除清除 [1]
   
6. D:\样本\EXE样本5X_263\MD5\2.exe - MSIL/Autorun.Spy.Agent.DF 蠕虫 - 通过删除清除 [1]
   
7. D:\样本\EXE样本5X_263\MD5\3.exe - MSIL/Kryptik.VMF 特洛伊木马 的变种 - 通过删除清除 [1]
   
8. D:\样本\EXE样本5X_263\MD5\4.exe > WINRARSFX > masiha.msu.exe - MSIL/BadJoke.RC 特洛伊木马 - 通过删除清除 [1]
   
9. D:\样本\EXE样本5X_263\MD5\5.exe - Win32/VB.OPR 特洛伊木马 的变种 - 通过删除清除 [1]
   
10. D:\样本\EXE样本5X_263\Original\1.exe - MSIL/PSW.CoinStealer.CZ 特洛伊木马 的变种 - 通过删除清除 [1]
    
11. D:\样本\EXE样本5X_263\Original\2.exe - MSIL/Autorun.Spy.Agent.DF 蠕虫 - 通过删除清除 [1]
    
12. D:\样本\EXE样本5X_263\Original\3.exe - MSIL/Kryptik.VMF 特洛伊木马 的变种 - 通过删除清除 [1]
    
13. D:\样本\EXE样本5X_263\Original\4.exe > WINRARSFX > masiha.msu.exe - MSIL/BadJoke.RC 特洛伊木马 - 通过删除清除 [1]
    
14. D:\样本\EXE样本5X_263\Original\5.exe - Win32/VB.OPR 特洛伊木马 的变种 - 通过删除清除 [1]
    
15. D:\样本\EXE样本5X_263\UPX\2.exe - MSIL/Autorun.Spy.Agent.DF 蠕虫 - 通过删除清除 [1]
    
16. D:\样本\EXE样本5X_263\UPX\4.exe > UPX v13_m8 > WINRARSFX > masiha.msu.exe - MSIL/BadJoke.RC 特洛伊木马 - 通过删除清除 [1]
    
17. 已扫描的对象数: 16
    
18. 检测数: 12
    
19. 已清除对象数: 12
    
20. 完成时间: 17:55:24  总扫描时间: 45 秒 (00:00:45)
    
21. 
    
22. 备注:
    
23. [1] 由于对象中仅包含病毒主体，因此已被删除。
    

复制代码

杀软小白鼠

FortiClient
扫描12/12＝100%
EXE样本5X_263\MD5\1.exe, virus found: MSIL/Tasker.CZ!tr, action: Remove/quarantine
EXE样本5X_263\MD5\2.exe, virus found: AutoIt/Agent.AAJ!tr, action: Remove/quarantine
EXE样本5X_263\MD5\3.exe, virus found: MSIL/Agensla.VMF!tr.pws, action: Remove/quarantine
EXE样本5X_263\MD5\4.exe, virus found: MSIL/BadJoke.RC!tr, action: Remove/quarantine
EXE样本5X_263\MD5\5.exe, virus found: W32/PePatch.OPR!tr, action: Remove/quarantine
EXE样本5X_263\Original\1.exe, virus found: MSIL/Tasker!tr, action: Remove/quarantine
EXE样本5X_263\Original\2.exe, virus found: W32/Androm.VHO!tr.bdr, action: Remove/quarantine
EXE样本5X_263\Original\3.exe, virus found: MSIL/Kryptik.VMF!tr, action: Remove/quarantine
EXE样本5X_263\Original\4.exe, virus found: MSIL/BadJoke.RC!tr, action: Remove/quarantine
EXE样本5X_263\Original\5.exe, virus found: W32/PePatch.OPR!tr, action: Remove/quarantine
EXE样本5X_263\UPX\2.exe, virus found: AutoIt/Agent.AAJ!tr, action: Remove/quarantine
EXE样本5X_263\UPX\4.exe, virus found: MSIL/BadJoke.RC!tr, action: Remove/quarantine

病毒探索者

Malwarebytes
扫描 (  12 / 12  )≈  100   %
日志（可截图）：见图

Nocria

IKARUS
几天没有测试，看到这成绩感觉有点陌生

Original - emptied

1. [17.04.2020 21:17:36] On-demand scan started: "user_defined"
   
2. [17.04.2020 21:17:36] Found, 0.63s, SigName: "Trojan.MSIL.Spy", SigId: 3465870, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\Original\1.exe"
   
3. [17.04.2020 21:17:36] Found, 0.328s, SigName: "Trojan.Autoit", SigId: 3802613, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\Original\2.exe"
   
4. [17.04.2020 21:17:36] Found, 0.297s, SigName: "Trojan.MSIL.Spy", SigId: 3681038, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\Original\3.exe"
   
5. [17.04.2020 21:17:36] Found, 0.78s, SigName: "Trojan.MSIL.BadJoke", SigId: 283195820, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\Original\4.exe"
   
6. [17.04.2020 21:17:36] Found, 0.46s, SigName: "Virus.Win32.Virut", SigId: 3641262, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\Original\5.exe"
   
7. [17.04.2020 21:17:37] On-demand scan FINISHED: "user_defined"
   
8. [17.04.2020 21:17:37] ----------------------------------------------------
   
9. [17.04.2020 21:17:37] Directories scanned: 1
   
10. [17.04.2020 21:17:37] Files scanned: 5
    
11. [17.04.2020 21:17:37] Virus found: 5
    
12. [17.04.2020 21:17:37] ----------------------------------------------------

复制代码

MD5 - emptied

1. [17.04.2020 21:18:26] On-demand scan started: "user_defined"
   
2. [17.04.2020 21:18:26] Found, 0.63s, SigName: "Trojan.MSIL.Spy", SigId: 3465870, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\MD5\1.exe"
   
3. [17.04.2020 21:18:27] Found, 0.344s, SigName: "Trojan.Autoit", SigId: 3802613, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\MD5\2.exe"
   
4. [17.04.2020 21:18:27] Found, 0.312s, SigName: "Trojan.MSIL.Spy", SigId: 3681038, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\MD5\3.exe"
   
5. [17.04.2020 21:18:27] Found, 0.78s, SigName: "Trojan.MSIL.BadJoke", SigId: 283195820, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\MD5\4.exe"
   
6. [17.04.2020 21:18:27] Found, 0.47s, SigName: "Virus.Win32.Virut", SigId: 3641262, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\MD5\5.exe"
   
7. [17.04.2020 21:18:27] On-demand scan FINISHED: "user_defined"
   
8. [17.04.2020 21:18:27] ----------------------------------------------------
   
9. [17.04.2020 21:18:27] Directories scanned: 1
   
10. [17.04.2020 21:18:27] Files scanned: 5
    
11. [17.04.2020 21:18:27] Virus found: 5
    
12. [17.04.2020 21:18:27] ----------------------------------------------------

复制代码

UPX - emptied

1. [17.04.2020 21:19:09] On-demand scan started: "user_defined"
   
2. [17.04.2020 21:19:09] Found, 0.344s, SigName: "Trojan.Autoit", SigId: 3802613, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\UPX\2.exe"
   
3. [17.04.2020 21:19:09] Found, 0.359s, SigName: "Trojan.Click.Agent.UY", SigId: 453068, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_263\EXE样本5X_263\UPX\4.exe"
   
4. [17.04.2020 21:19:09] On-demand scan FINISHED: "user_defined"
   
5. [17.04.2020 21:19:09] ----------------------------------------------------
   
6. [17.04.2020 21:19:09] Directories scanned: 1
   
7. [17.04.2020 21:19:09] Files scanned: 2
   
8. [17.04.2020 21:19:09] Virus found: 2
   
9. [17.04.2020 21:19:09] ----------------------------------------------------

复制代码