Go_Bypass免杀，几乎过主流杀软（卡巴已杀）

显示全部楼层 · 发表于 2022-1-4 08:40:59

毒霸扫描MISS

显示全部楼层 · 发表于 2022-1-4 08:49:00

大蜘蛛miss

Engine 12.06.8.12260/7.00.52.08270 (2.2), 10751818 records, 2022/01/04 03:52
Last updated 2022/01/04 03:52
This is Windows XP Professional x86 (Build 2600), Service Pack 3
The user is INTEL\Administrator:INTEL\None [url=home.php?mod=space&uid=340]@[/url] INTEL
Using "E:\GitHub\drweb\dwscancl\drweb32.key" as Dr.Web Key file
This Dr.Web Key is for 1 computer (Beta Dr.Web)
WARNING! System has not been scanned for rootkits.
Scan files using 2 engines and "" mask
The mask was translated to "" filter
WARNING! Restore points directories have not been scanned
Total 2.4 Mbytes in 1 file scanned
Total 1 file are clean
There are no infected objects detected
Scan time is 00:00:01, 2543KB/sec
Anti-Virus Dr.Web 12.6.8.12260 - Finished
Engine 12.06.8.12260/7.00.52.08270 (2.2), 10751818 records, 2022/01/04 03:52
Scan time: 00:00 / 00:00 Done: 1 / 1 Speed: 2.4MB/S
Completed: 1 file, 2.4 MBytes

复制代码

显示全部楼层 · 发表于 2022-1-4 11:27:37

我这kes没反应啊。

显示全部楼层 · 发表于 2022-1-4 11:54:59

avast miss,楼主你发错样本了吗？双击也没反应。

显示全部楼层 · 发表于 2022-1-4 12:11:32

秋日之殇发表于 2022-1-3 23:36
双击跑不出行为？

又是之前的那个自制勒索，他那个勒索本身就有很大问题，跑不出来行为

显示全部楼层 · 发表于 2022-1-4 14:21:37

crowdstrike kill

显示全部楼层 · 发表于 2022-1-4 19:20:10

火绒更新：

显示全部楼层 · 发表于 2022-1-4 20:20:54

FSS

显示全部楼层 · 发表于 2022-1-5 05:47:31

只会加密同目录下的文件，我测试过，上个样本是正常的，同目录下所有文件在无防护情况下可加密，能跑出行为来

显示全部楼层 · 发表于 2022-1-5 13:40:39

AVG加强模式拦截
咖啡RP杀

[病毒样本] Go_Bypass免杀，几乎过主流杀软（卡巴已杀）