样本 100X

显示全部楼层 · 发表于 2022-7-12 09:27:51

xiaobao233 发表于 2022-7-12 09:26
我觉得这压根就不是毒包(((、
就那么几个毒

我想问问楼主这个包从哪里拿来的（（（

主要是感觉确实不太正常（

@RustFirst

显示全部楼层 · 发表于 2022-7-12 10:27:42

貌似是一些小众软件的安装包
一些带有捆绑

显示全部楼层 · 发表于 2022-7-12 14:16:02

BD 3x

Item path Threat Name Action taken
E:\infected\smp\2ffee7d73dbd9aefe6e12efed295c53511dc2409546ea9d62499af69ab554a66 Trojan.GenericKD.45389403 Deleted
E:\infected\smp\2d3bf6e987d1945a9e587decf9034b44b17320864ae2d3151f06f96213019a1e Trojan.GenericKDZ.71198 Deleted
E:\infected\smp\1ebfbb4f3b547c11f80a074945fa0ad0305fccc28c520dc92a26a0820a93451d Trojan.GenericKD.45389403 Deleted

复制代码

有3个有密码保护

:\infected\smp\1d9bb08018966e4cd74739c15025a234d671c528a96ec5a6599efd5270d03d18=>(ZIP Sfx o)=>AutoPlay=>autorun.cdd=>_proj.dat Password-protected Not scanned(file was password-protected)
E:\infected\smp\1d9bb08018966e4cd74739c15025a234d671c528a96ec5a6599efd5270d03d18=>(ZIP Sfx o)=>AutoPlay=>autorun.cdd=>_detect.dat Password-protected Not scanned(file was password-protected)
E:\infected\smp\1d9bb08018966e4cd74739c15025a234d671c528a96ec5a6599efd5270d03d18=>(ZIP Sfx o)=>AutoPlay=>autorun.cdd=>_fonts.dat Password-protected Not scanned(file was password-protected)

复制代码

显示全部楼层 · 发表于 2022-7-12 19:58:35

奇安信7个

显示全部楼层 · 发表于 2022-7-15 20:55:35

智量kill 16X
火绒kill 5X

显示全部楼层 · 发表于 2022-7-15 22:09:20

hiduwHUE 发表于 2022-7-12 06:12
压缩包密码多少，kis扫包要密码

如果楼主没有特殊说明样本密码，常规密码infected

显示全部楼层 · 发表于 2022-7-18 22:24:50

金山毒霸，估计有几个误报，去掉了

[病毒样本] 样本 100X