样本 3X

显示全部楼层 · 发表于 2022-1-1 16:45:30

[color=rgba(0, 0, 0, 0.85)]链接:https://www.123pan.com/s/xaeA-S7lvH

显示全部楼层 · 发表于 2022-1-1 16:49:49

三个都报：UDS:Trojan.Win32.SchoolBoy.mxa

显示全部楼层 · 发表于 2022-1-1 16:51:37

诺顿2个

剩余WbBiHrBtD

显示全部楼层 · 发表于 2022-1-1 16:52:55

下载链接被实体机上的BDTS拦截

Online Threat Prevention

We blocked this dangerous page for your protection:
https://download.123pan.cn/
Accessed by: vmnat.exe
Dangerous pages attempt to install software that can harm the device, gather personal information or operate without your consent.

显示全部楼层 · 发表于 2022-1-1 16:52:57

ESSP kill all
WbBiHrBtD;Win64/Agent.NL
ym938590.dat;Win32/Packed.VMProtect.AB
DSFYW.DLL;Win32/Packed.VMProtect.AB

生如夏花之绚烂，死如秋叶之静美
2022/1/1 下午5:52:52
bye
From The Amazing Artifact：Netscape

显示全部楼层 · 发表于 2022-1-1 16:55:29

MS Defender：清空

显示全部楼层 · 发表于 2022-1-1 16:56:51

Total virus records: 12596748
Key file: e:\GitHub\drwebwcl\drweb32u.key
License key number: 0010001862
License key activates on: 2000-05-25
License key expires on: unlimited
z:\VM\home\kafan\Downloads\test\3x\ym938590.dat infected with Trojan.MulDrop17.58009
z:\VM\home\kafan\Downloads\test\3x\WbBiHrBtD\data001 infected with Trojan.MulDrop17.58009
z:\VM\home\kafan\Downloads\test\3x\WbBiHrBtD - archive contains infected objects
z:\VM\home\kafan\Downloads\test\3x\DSFYW.DLL infected with Trojan.MulDrop17.58009
Scan report for "z:\VM\home\kafan\Downloads\test\3x\*.*":
      Scanned:       8/2                Cured: 0
Infected found:       3/1                Deleted: 0
  Modifications:       0/0                Renamed: 0
   Suspicious:       0/0                Moved: 0
      Adware:       0/0                Ignored: 0
      Dialers:       0/0
      Jokes:       0/0             Scan time: 0:00:04
   Riskware:       0/0             Scan speed: 2011 Kb/s
   Hacktools:       0/0             Scan ended: 16:56:01

大蜘蛛

显示全部楼层 · 发表于 2022-1-1 17:00:50

显示全部楼层 · 发表于 2022-1-1 17:24:41

360：3

被上报：WbBiHrBtD

2022-01-01 17:18:59 感染型病毒(Win32/Trojan.Generic.HggASfsA)MD5:d5bc3dcd0d6ab696ee66dd579a9176c1已删除此文件，如果您发现误删，可从隔离区恢复此文件。 d:\360安全浏览器下载\dsfyw.dll
D:\360安全浏览器下载\ym938590.dat 感染型病毒(Win32/Worm.Generic.HxQBKmoA) 已删除
D:\360安全浏览器下载\WbBiHrBtD 感染型病毒(Win32/Trojan.Generic.HggASjEA) 已删除

复制代码

显示全部楼层 · 发表于 2022-1-1 18:14:31

avast kill all

[病毒样本] 样本 3X

本帖子中包含更多资源