EXE样本5X_264

QVM360

RT，未改后缀请小心食用，后果自负。。



载点：https://www.lanzous.com/ibknr6h     密码：infected

老格式

Nocria

IKARUS

Original - 2/5

1. [18.04.2020 21:15:58] On-demand scan started: "user_defined"
   
2. [18.04.2020 21:15:59] Found, 0.469s, SigName: "Trojan.Java.Spy", SigId: 3393715, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_264\EXE样本5X_264\Original\1.exe"
   
3. [18.04.2020 21:15:59] Found, 0.390s, SigName: "Virus.Win32.Neshta", SigId: 3609130, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_264\EXE样本5X_264\Original\5.exe"
   
4. [18.04.2020 21:15:59] On-demand scan FINISHED: "user_defined"
   
5. [18.04.2020 21:15:59] ----------------------------------------------------
   
6. [18.04.2020 21:15:59] Directories scanned: 1
   
7. [18.04.2020 21:15:59] Files scanned: 10
   
8. [18.04.2020 21:15:59] Virus found: 2
   
9. [18.04.2020 21:15:59] ----------------------------------------------------

复制代码

MD5 - 2/5

1. [18.04.2020 21:16:49] On-demand scan started: "user_defined"
   
2. [18.04.2020 21:16:49] Found, 0.563s, SigName: "Trojan.Java.Spy", SigId: 3393715, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_264\EXE样本5X_264\MD5\1.exe"
   
3. [18.04.2020 21:16:50] Found, 0.329s, SigName: "Virus.Win32.Neshta", SigId: 3609130, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_264\EXE样本5X_264\MD5\5.exe"
   
4. [18.04.2020 21:16:50] On-demand scan FINISHED: "user_defined"
   
5. [18.04.2020 21:16:50] ----------------------------------------------------
   
6. [18.04.2020 21:16:50] Directories scanned: 1
   
7. [18.04.2020 21:16:50] Files scanned: 10
   
8. [18.04.2020 21:16:50] Virus found: 2
   
9. [18.04.2020 21:16:50] ----------------------------------------------------

复制代码

UPX - 2/3

1. [18.04.2020 21:16:49] On-demand scan started: "user_defined"
   
2. [18.04.2020 21:16:49] Found, 0.563s, SigName: "Trojan.Java.Spy", SigId: 3393715, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_264\EXE样本5X_264\MD5\1.exe"
   
3. [18.04.2020 21:16:50] Found, 0.329s, SigName: "Virus.Win32.Neshta", SigId: 3609130, Type: "VIRUS", File: "C:\Users\promi\Desktop\EXE样本5X_264\EXE样本5X_264\MD5\5.exe"
   
4. [18.04.2020 21:16:50] On-demand scan FINISHED: "user_defined"
   
5. [18.04.2020 21:16:50] ----------------------------------------------------
   
6. [18.04.2020 21:16:50] Directories scanned: 1
   
7. [18.04.2020 21:16:50] Files scanned: 10
   
8. [18.04.2020 21:16:50] Virus found: 2
   
9. [18.04.2020 21:16:50] ----------------------------------------------------

复制代码

Xw1nd极风

Norton
扫描（11/13）=84.61%
双击（2/2）=100%

心醉咖啡

毒霸21.35
Original - 1/5MD5- 2/5


21.50补杀

1. 扫描时间：[2020-04-18 21:50:18]
   
2. 扫描用时：[00:00:12]
   
3. 扫描类型：自定义查杀
   
4. 扫描文件总数：4695
   
5. 扫描速度：361文件/秒
   
6. 发现威胁：8个
   
7. 清除威胁：8个
   
8. =============================================
   
9. [2020-04-18 21:50:38]
   
10. 威胁：e:\浏览器下载\exe样本5x_264\upx\1.exe
    
11. 类型：win32.troj.undef.(kcloud)
    
12. 处理方式：删除
    
13. 
    
14. [2020-04-18 21:50:38]
    
15. 威胁：e:\浏览器下载\exe样本5x_264\original\1.exe
    
16. 类型：win32.troj.undef.(kcloud)
    
17. 处理方式：删除
    
18. 
    
19. [2020-04-18 21:50:38]
    
20. 威胁：e:\浏览器下载\exe样本5x_264\md5\1.exe
    
21. 类型：win32.troj.undef.(kcloud)
    
22. 处理方式：删除
    
23. 
    
24. [2020-04-18 21:50:38]
    
25. 威胁：e:\浏览器下载\exe样本5x_264\upx\5.exe
    
26. 类型：win32.infected.neshta.nl.(kcloud)
    
27. 处理方式：修复
    
28. 
    
29. [2020-04-18 21:50:38]
    
30. 威胁：e:\浏览器下载\exe样本5x_264\original\4.exe
    
31. 类型：win32.heur.kvmh008.a.(kcloud)
    
32. 处理方式：删除
    
33. 
    
34. [2020-04-18 21:50:38]
    
35. 威胁：e:\浏览器下载\exe样本5x_264\md5\2.exe
    
36. 类型：win32.troj.undef.(kcloud)
    
37. 处理方式：删除
    
38. 
    
39. [2020-04-18 21:50:38]
    
40. 威胁：e:\浏览器下载\exe样本5x_264\md5\3.exe
    
41. 类型：win32.troj.undef.(kcloud)
    
42. 处理方式：删除
    
43. 
    
44. [2020-04-18 21:50:38]
    
45. 威胁：e:\浏览器下载\exe样本5x_264\md5\4.exe
    
46. 类型：win32.heur.kvmh008.a.(kcloud)
    
47. 处理方式：删除
    
48. 
    

复制代码

a233

Avast
扫描(10/13) 76.92% 其中修复1X

双击(3/3) 100%
又见IDP云杀

QVM360

心醉咖啡 发表于 2020-4-18 21:35
毒霸21.35

请按格式回复

病毒探索者

Malwarebytes
Scan＋Run：empty

傻猪猪米走鸡

Time;Component;Event;User
2020/4/18 22:01:12;ESET Kernel;File 'C:\Users\Galaxy\Downloads\EXE样本5X_264\5 (2).exe' was sent to ESET Virus Lab for analysis.;SYSTEM
2020/4/18 22:01:18;ESET Kernel;File 'C:\Users\Galaxy\Downloads\EXE样本5X_264\5.exe' was sent to ESET Virus Lab for analysis.;SYSTEM

QVM360

病毒探索者 发表于 2020-4-18 21:59
Malwarebytes
Scan＋Run：empty

扫描和双击各多少个，你这样让我一个一个看很累的。。

QVM360

傻猪猪米走鸡 发表于 2020-4-18 22:01
Time;Component;Event;User
2020/4/18 22:01:12;ESET Kernel;File 'C:%users\Galaxy\Downloads\EX ...

实际上就剩下这两个，写清楚点。。