病毒样本测试 7x

东南大学

小红伞SAVAPI扫描：

1. Global information:
   
2. -------------------
   
3. date: Sun, 26 Mar 2023 19:13:05 +0800
   
4. product version: 4.13.0.253
   
5. engine version: 8.3.66.62
   
6. VDF version: 8.19.37.86
   
7. VDF signature count: 4949584
   
8. license expire: 2030-08-01
   
9. 
   
10. Scan results:
    
11. -------------
    
12. alert_name=TR/Dldr.Agent.iaijz type=trojan description=Is the Trojan horse TR/Dldr.Agent.iaijz file=c:\Downloads\missed\2a789f9aaa874f00dc6a17acbc84e4b7.exe
    
13. alert_name=HEUR/APC type=APC/MALWARE description=Detected by Avira APC file=c:\Downloads\missed\2ecb8a22e5831fafcbaf0392b5b617c3.exe
    
14. alert_name=HEUR/AGEN.1317118 type=heuristic description=Contains suspicious code HEUR/AGEN.1317118 file=c:\Downloads\missed\bfb2b1a419fc22bb84032c2cf17f96a4.exe
    
15. alert_name=carLambo/x.class <<< EXP/JAVA.Banload.VPDH.Gen type=exploit description=Contains detection pattern of the exploits EXP/JAVA.Banload.VPDH.Gen file=c:\Downloads\missed\ec5e12b3ea2318692c2d2b74c33dfbda.jar
    
16. alert_name=carLambo/G.class <<< EXP/JAVA.Banload.VPT.Gen type=exploit description=Contains detection pattern of the exploits EXP/JAVA.Banload.VPT.Gen file=c:\Downloads\missed\ec5e12b3ea2318692c2d2b74c33dfbda.jar
    
17. alert_name=carLambo/X.class <<< EXP/JAVA.Banload.VPDK.Gen type=exploit description=Contains detection pattern of the exploits EXP/JAVA.Banload.VPDK.Gen file=c:\Downloads\missed\ec5e12b3ea2318692c2d2b74c33dfbda.jar
    
18. 
    
19. Summary:
    
20. --------
    
21. total: 7
    
22. clean: 3
    
23. infected: 6
    
24. repairable: 0
    
25. not scanned: 0
    
26. 请按任意键继续. . .

复制代码

UNknownOoo

火绒
扫描：ALL(特征4x 拉黑3x

GreatMOLA

Norton all

扫描 3x


执行 4x

三月份提成表_xh.exe执行后防火墙拦截

ouveoxxwkv.js执行后杀

Shipping_Details.js执行后SONAR拦截，杀衍生物ouveoxxwkv.js

oktgfixz.jar执行杀class文件

post88

AVAST 清空扫描

mozhiwei

金山毒霸kill 3x

chjs

大蜘蛛扫描4x，双击剩余3x，都没反应