样本x5（12.8）

秋日之殇

rt

心醉咖啡

360

1. 360杀毒扫描日志
   
2. 
   
3. 病毒库版本：
   
4. 扫描时间：2020-12-08 19:35:08
   
5. 扫描用时：00:00:02
   
6. 扫描类型：右键扫描
   
7. 扫描文件总数：5
   
8. 项目总数：3
   
9. 清除项目数：3
   
10. 
    
11. 扫描选项
    
12. ----------------------
    
13. 扫描所有文件：是
    
14. 扫描压缩包：是
    
15. 发现病毒处理方式：由用户选择处理
    
16. 扫描磁盘引导区：是
    
17. 扫描 Rootkit：是
    
18. 使用云查杀引擎：是
    
19. 使用QVM人工智能引擎：是
    
20. 扫描建议修复项：是
    
21. 常规引擎设置：未使用
    
22. 
    
23. 扫描内容
    
24. ----------------------
    
25. E:\浏览器下载\1
    
26. 
    
27. 
    
28. 白名单设置
    
29. ----------------------
    
30. 
    
31. 
    
32. 扫描结果
    
33. ======================
    
34. 高危风险项
    
35. ----------------------
    
36. E:\浏览器下载\1\3.doc        virus.office.qexvmc.1085        已修复
    
37. E:\浏览器下载\1\4.doc        virus.office.qexvmc.1085        已修复
    
38. E:\浏览器下载\1\5.doc        virus.office.qexvmc.1085        已修复
    
39. 
    

复制代码

Ak_model47

毒霸kill 4X

jdsh

Emsisoft Anti-Malware    miss  1.js

3个doc文档运行后提示漏洞攻击

Jerry.Lin

火绒
1/5

1. 风险路径：C:\Users\zhong\Downloads\MalwareTest\Kafan\12\2.js, 病毒名：TrojanDropper/Agent.dy, 病毒ID：dacbbec39f59d167, 处理结果：暂不处理

复制代码

瑞星
1/5

1. C:\Users\zhong\Downloads\MalwareTest\Kafan\12\2.js ...  Trojan.Obfus/JS!1.CD2A (CLOUD)

复制代码

Ikarus
5/5

1. [08.12.2020 05:53:17] On-demand scan started: "user_defined"
   
2. [08.12.2020 05:53:17] Clean, 0.00s, File: "C:\Users\zhong\Downloads\MalwareTest\Kafan\12\3.doc:Zone.Identifier"
   
3. [08.12.2020 05:53:17] Found, 0.16s, SigName: "Trojan-Downloader.VBA.Agent", SigId: 3941783, Type: "VIRUS", File: "C:\Users\zhong\Downloads\MalwareTest\Kafan\12\3.doc"
   
4. [08.12.2020 05:53:17] Clean, 0.00s, File: "C:\Users\zhong\Downloads\MalwareTest\Kafan\12\4.doc:Zone.Identifier"
   
5. [08.12.2020 05:53:17] Found, 0.32s, SigName: "Trojan-Downloader.VBA.Agent", SigId: 3941783, Type: "VIRUS", File: "C:\Users\zhong\Downloads\MalwareTest\Kafan\12\4.doc"
   
6. [08.12.2020 05:53:17] Clean, 0.00s, File: "C:\Users\zhong\Downloads\MalwareTest\Kafan\12\5.doc:Zone.Identifier"
   
7. [08.12.2020 05:53:17] Found, 0.32s, SigName: "Trojan-Downloader.VBA.Agent", SigId: 3941783, Type: "VIRUS", File: "C:\Users\zhong\Downloads\MalwareTest\Kafan\12\5.doc"
   
8. [08.12.2020 05:53:17] Found, 0.32s, SigName: "Trojan-Dropper.WSH-Rat", SigId: 3952494, Type: "VIRUS", File: "C:\Users\zhong\Downloads\MalwareTest\Kafan\12\2.js"
   
9. [08.12.2020 05:53:17] Found, 0.63s, SigName: "Trojan-Dropper.WSH-Rat", SigId: 3952494, Type: "VIRUS", File: "C:\Users\zhong\Downloads\MalwareTest\Kafan\12\1.js"
   
10. [08.12.2020 05:53:17] On-demand scan FINISHED: "user_defined"
    
11. [08.12.2020 05:53:17] ----------------------------------------------------
    
12. [08.12.2020 05:53:17] Directories scanned: 1
    
13. [08.12.2020 05:53:17] Files scanned: 8
    
14. [08.12.2020 05:53:17] Virus found: 5
    
15. [08.12.2020 05:53:17] ----------------------------------------------------

复制代码

泉州晋江

卡巴斯基全杀

Shake2333

eset kill 4x

hsks

楼上有人测360扫描了，那我测miss样本双击
1.js：双击大概1秒后360报毒
2.js：同上miss样本双击测时没入库

rogersg

SEP Miss all

a233

Avast监控1X

剩下全部IDP