#Heur.ML.PE.D# X6 2020-7-31

川建国代理人

#Heur.ML.PE.D# X6
蓝奏云：https://www.lanzoux.com/ibWvMf5inne

猥琐大叔

a233

Avast清空

Jerry.Lin

norton

1. 7/30/2020 8:40:43 PM,High,KaFan Heur.ML.PE.D (4).exe (Trojan.Gen.2) detected by Download Insight,Quarantined,Resolved - No Action Required,C:\Users\zhong\Downloads\MalwareTest\Kafan\KaFan Heur.ML.PE.D(2020-7-31)\KaFan Heur.ML.PE.D (4).exe
   
2. 7/30/2020 8:40:16 PM,High,KaFan Heur.ML.PE.D (5).exe (Trojan.Gen.MBT) detected by Download Insight,Quarantined,Resolved - No Action Required,C:\Users\zhong\Downloads\MalwareTest\Kafan\KaFan Heur.ML.PE.D(2020-7-31)\KaFan Heur.ML.PE.D (5).exe
   
3. 7/30/2020 8:40:13 PM,High,KaFan Heur.ML.PE.D (6).exe (Trojan.Gen.MBT) detected by Download Insight,Quarantined,Resolved - No Action Required,C:\Users\zhong\Downloads\MalwareTest\Kafan\KaFan Heur.ML.PE.D(2020-7-31)\KaFan Heur.ML.PE.D (6).exe
   
4. 7/30/2020 8:40:13 PM,High,KaFan Heur.ML.PE.D (3).exe (Trojan.Gen.MBT) detected by Download Insight,Quarantined,Resolved - No Action Required,C:\Users\zhong\Downloads\MalwareTest\Kafan\KaFan Heur.ML.PE.D(2020-7-31)\KaFan Heur.ML.PE.D (3).exe
   
5. 7/30/2020 8:40:13 PM,High,KaFan Heur.ML.PE.D (6).exe (W32.Virut.CF) detected by Download Insight,Quarantined,Resolved - No Action Required,C:\Users\zhong\Downloads\MalwareTest\Kafan\KaFan Heur.ML.PE.D(2020-7-31)\KaFan Heur.ML.PE.D (6).exe
   
6. 7/30/2020 8:40:13 PM,Medium,KaFan Heur.ML.PE.D (2).exe (WS.Reputation.1) detected by Download Insight,Quarantined,Resolved - No Action Required,C:\Users\zhong\Downloads\MalwareTest\Kafan\KaFan Heur.ML.PE.D(2020-7-31)\KaFan Heur.ML.PE.D (2).exe
   
7. 7/30/2020 8:40:12 PM,High,KaFan Heur.ML.PE.D (1).exe (Trojan.Gen.2) detected by Download Insight,Quarantined,Resolved - No Action Required,C:\Users\zhong\Downloads\MalwareTest\Kafan\KaFan Heur.ML.PE.D(2020-7-31)\KaFan Heur.ML.PE.D (1).exe

复制代码

心醉咖啡

毒霸

1. 扫描时间：[2020-07-31 09:50:27]
   
2. 扫描用时：[00:00:04]
   
3. 扫描类型：自定义查杀
   
4. 扫描文件总数：6
   
5. 扫描速度：1文件/秒
   
6. 发现威胁：4个
   
7. 清除威胁：4个
   
8. =============================================
   
9. [2020-07-31 09:50:37]
   
10. 威胁：e:\浏览器下载\kafan heur.ml.pe.d(2020-7-31)\kafan heur.ml.pe.d (1).exe
    
11. 类型：win32.troj.undef.(kcloud)
    
12. 处理方式：删除
    
13. 
    
14. [2020-07-31 09:50:37]
    
15. 威胁：e:\浏览器下载\kafan heur.ml.pe.d(2020-7-31)\kafan heur.ml.pe.d (4).exe
    
16. 类型：win32.troj.undef.(kcloud)
    
17. 处理方式：删除
    
18. 
    
19. [2020-07-31 09:50:37]
    
20. 威胁：e:\浏览器下载\kafan heur.ml.pe.d(2020-7-31)\kafan heur.ml.pe.d (5).exe
    
21. 类型：win32.troj.undef.(kcloud)
    
22. 处理方式：删除
    
23. 
    
24. [2020-07-31 09:50:37]
    
25. 威胁：e:\浏览器下载\kafan heur.ml.pe.d(2020-7-31)\kafan heur.ml.pe.d (6).exe
    
26. 类型：win32.infected.virut.sr.(kcloud)
    
27. 处理方式：修复
    
28. 
    

复制代码

666777a

测试环境：win7x64（VM）
测试产品：卡巴斯基免费版
病毒库版本：2020.7.31
测试项目： 扫描
测试配置： 标准
结果：扫描（ 2 /  6）=33.33%
日志：
截图（可选）：

wangyuhe

趋势 kill

欧阳宣

BEST
Gen:Heur.NoobyProtect.1
Trojan.AgentWDCR.JLO
Gen:Variant.Ursu.794851
Trojan.Agent.ENOG
Gen:Heur.PonyStealer.bmKfqil7OWpi
Gen:Variant.Ursu.794142

也没有说很难杀传统杀软要靠入库啊

sichuanwenxuan

WD清空。

巍巍

https://s.threatbook.cn/report/f ... p1_enx64_office2013
2号样本到底在做什么,我这边也跑不出行为,进程自己崩了?