【6/21】 anyrun搬运 样本6X

OVS

eset  5X

anthonyqian

诺顿扫描杀3，双击：test.vbs sonar拦截；nw.exe 防火墙拦截；contract.53923.xls脚本拦截

heavencc

智量清空

欧阳宣

BEST 3x

剩余vbs和xls双击拦截vbs: Heur.BZC.Boxter.151.76BD1CF9
xls:Heur.BZC.Linx.51.068F5547

Nocria

二连，编辑掉

Nocria

IKARUS - 3/6

1. [21.06.2020 12:42:47] On-demand scan started: "user_defined"
   
2. [21.06.2020 12:42:47] Found, 0.62s, SigName: "Trojan.SuspectCRC", SigId: 304504620, Type: "VIRUS", File: "C:\Users\promi\Desktop\6.21 Sample 6X\contract.53923.xls"
   
3. [21.06.2020 12:42:47] Found, 0.31s, SigName: "Virus.Win32.Neshta", SigId: 3609130, Type: "VIRUS", File: "C:\Users\promi\Desktop\6.21 Sample 6X\Minecraft by poordev.exe"
   
4. [21.06.2020 12:42:47] Found, 0.78s, SigName: "Virus.Win32.Neshta", SigId: 3609130, Type: "VIRUS", File: "C:\Users\promi\Desktop\6.21 Sample 6X\Mortadha.bin"
   
5. [21.06.2020 12:42:47] On-demand scan FINISHED: "user_defined"
   
6. [21.06.2020 12:42:47] ----------------------------------------------------
   
7. [21.06.2020 12:42:47] Directories scanned: 1
   
8. [21.06.2020 12:42:47] Files scanned: 6
   
9. [21.06.2020 12:42:47] Virus found: 3
   
10. [21.06.2020 12:42:47] ----------------------------------------------------
    

复制代码

QVM360

川建国代理人 发表于 2020-6-21 10:33
管家killX2  
360kill X4 :
火绒清空

火绒清空？测试造假可是要打屁股的哦，发个日志看看

川建国代理人

QVM360 发表于 2020-6-21 14:54
火绒清空？测试造假可是要打屁股的哦，发个日志看看

哦哦，打错了，已更正
我这里截图太多了，看走眼了
火绒kill X2

QVM360

川建国代理人 发表于 2020-6-21 15:04
哦哦，打错了，已更正
我这里截图太多了，看走眼了

有日志啊

川建国代理人

QVM360 发表于 2020-6-21 15:27
有日志啊

7楼我已经改了 18楼的是我前几天截的图，都是6个样本，误看成本次测试的截图了 实际killX2