本帖最后由 rogersg 于 2020-7-29 22:31 编辑
测试环境:WIN10 X64 2004 实机
测试产品:Kaspersky Internet Security 2021
病毒库版本:2020/7/29 16:36
测试项目:扫描
测试配置:标准
结果:扫描(320/339)+双击(4/9)=(324/339)95.58%(虚拟机没装office无法双击的和双击错误的排除)
日志:
Kafan_Sample_3ef781d62c1d2c6aab1f44ea337439553d249ff98a4b70ded2b21ce1cb39bba4.exe双击,主防拦截 PDM:Trojan.Win32.Generic Kafan_Sample_9ba6343e794c0e415adb118885c33aa18446c746dd30ec59b4fda2724b2f08d7.exe双击,主防拦截 PDM:Trojan.Win32.Generic Kafan_Sample_28ea5f3c757973759e967f2a489b85cfad60f620156887145759443b4d673ddf.exe双击提示缺少组件,无法启动 Kafan_Sample_32b610438ea7259b4688df0a367985e9c4dfd136f58f22dc204964e5e1f858cb.exe双击 拦截下载 29.07.2020 21.53.08;检测到的对象( AMSI 流 );uid://amsi_stream_6;GitSetup;uid://amsi_stream_6;07/29/2020 21:53:08;UDS:Trojan.Multi.GenericML.xnet;添加到排除项 Kafan_Sample_49fe6c1cce117dc28884b4713f1583af943af16dd936f760c46b1aedfdad75ca.exe双击,杀衍生物 29.07.2020 21.53.48;检测到的对象 ( 文件 ) 已删除;C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\always.jse;C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\always.jse;C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\always.jse;07/29/202021:53:48;UDS:Trojan-Downloader.JS.SLoad Kafan_Sample_090c4ff20568f647c80d5ae386bf5aedd9d8b066066a465b5300f8bd42ff1282.exe双击MISS Kafan_Sample_121ac4d9f9b6e16936b715d6d7a38c0f062e3f4984f33efccf0f53936837c2cd.exe双击MISS Kafan_Sample_717c5cb1406d8e04f9853709c6e0d3e08c27c2349e3fd63e7269946b1424b2c3.xlsm未安装office,跳过 Kafan_Sample_6829cb62da82005be89a9f27b85c50a40f9a7a74424bf96500d420e077b8b666.dll提示动态链初始化错误 Kafan_Sample_9486d93dedcb4e1eabc7ab1c778b01459f8afc13aba9d3017e20003c22476100.exe双击提示找不到d3dx9_43.dll,运行错误 Kafan_Sample_108212fda535826b198f5b57b0fa04ce9de4fdd9e9e01b815cb1aaad525b5e25.doc跳过 Kafan_Sample_a979468a630cd6363538edb3060e347367a00d5258ffe50d93c698764a48553d.xlsm跳过 Kafan_Sample_beb59218a17324f3ce10a4416a5d4a8f9a2ba649f0ba36d6d4f6de610bd2262d.exe双击,提示无法在此电脑上运行 Kafan_Sample_c77845f6b361b20a24d3c99ac9b7754c93ed51906c08ef9a04e3bebf68e8d861.dll运行错误,提示已加载,但找不到入口点 Kafan_Sample_d1e93111e5845433248ecdb5a01c621aa6508fe9feff4e50f733743dacad4bed.exe双击MISS Kafan_Sample_d2eb3673cff0d4842a5282e28730892ce137f5477428da579073c99324482fa1.ps1双击,运行错误 Kafan_Sample_daca967edea399a394a8fc24d5ee647d95dc6dadd9dd21e2945ae7a742b3aed8.exe双击MISS
一个个双击累死了
|