【开放测试】卡饭病毒样本包 20241102 第182期

全身发抖

自制 15/30卡巴 24/30
双击 84fe7略.xls miss
4f02b略.bat miss,未捕捉下载
84944略.exe 无法运行
49161略.vbs 双击杀
34c76略.vbs 双击杀

Loyisa

天守扫描16x


双击漏的太狠了 不想测了怎么办

---

Avast环节
扫描30x 实际28x

剩余2x

双击2x 共计30x
4f02b6efab9a261cfbb6d5c6abff8b3e5e4bcd9cb8e72e2c60e32b9e63660130.bat
恶意url

49761948995eb54234f6fa179ddaf3646656a1d7545865740eba8965bf5b6cc4.vbs
web防

jijianan2007

With Secure  解压剩6

jijianan2007

360TS解压+右键扫描，剩4

Nocria

ZoneAlarm - 23/30




IKARUS - 20/30

1. <font _mstmutation="1">[02.11.2024 20:17:35] On-demand scan started: "TemporaryScan"
   
2. [02.11.2024 20:17:36] Found, 0.17s, SigName: "Trojan.Crypt", SigId: 5275398, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\121a6d059a18dfd2bac2951c946386991d3ed86e70af8ba0c02dd45d5d3accf2.exe"
   
3. [02.11.2024 20:17:36] Found, 0.19s, SigName: "Backdoor.Remcos", SigId: 5456222, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\0f07f7b65b4b5209646c6972d6d92d6a162d33f38cb7ceb0280598da1085670e.exe"
   
4. [02.11.2024 20:17:36] Found, 0.20s, SigName: "Trojan.MSIL.Inject", SigId: 515522920, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\1eef3c00ea6fe6b3e757e7ee213f2cf19a76cb290ceb108b5dc63fe7eb86012c.exe"
   
5. [02.11.2024 20:17:36] Found, 0.05s, SigName: "Trojan-Downloader.JS.Agent", SigId: 5609462, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\328dd1421f88400b17b07ada590fcc983678771451230374d971f4448fecfb77.vbs"
   
6. [02.11.2024 20:17:36] Found, 0.03s, SigName: "Backdoor.Remcos", SigId: 5456222, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\37b6e75e7fb8b5579c4130bcb6bffbc57df0d7aa1891153055e46bb039ad19e5.exe"
   
7. [02.11.2024 20:17:36] Found, 0.68s, SigName: "Trojan.Win32.Autoit", SigId: 5616529, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\0d4675e241b3768cd9fb7b24c9afcf1dcbd73b6545e067c7e68081f6691ce64e.exe"
   
8. [02.11.2024 20:17:36] Found, 0.05s, SigName: "Exploit.CVE-2017-11882", SigId: 3454888, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\61d3e5183fd1a0ef9c6d5c3f923fdbb1558c1b3ebcdc7f3e960a7dae1709e592.doc"
   
9. [02.11.2024 20:17:36] Found, 0.03s, SigName: "Trojan.MSIL.Injector", SigId: 5011543, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\74a741bc82a1dfd63433d64999ea159987b848183b89a6aac3c4ff10a6d26885.exe"
   
10. [02.11.2024 20:17:36] Found, 0.55s, SigName: "Trojan.WinGo.Agent", SigId: 5596396, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\3b7f04fe55274c470cd14152726284774f1c74bf493f71953c8ba0fdca38d8f5.exe"
    
11. [02.11.2024 20:17:36] Found, 0.04s, SigName: "Trojan.Inject", SigId: 5014641, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\7640b2f27d7eb5c7b72b5cd20de0da99414d6a379199e6993de22ebf37c2eff5.exe"
    
12. [02.11.2024 20:17:36] Found, 0.06s, SigName: "Backdoor.AsyncRat", SigId: 5243770, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\849449888a06457b1b32409f78f4efe1299432124767e086c3462a01a7902e07.exe"
    
13. [02.11.2024 20:17:36] Found, 0.04s, SigName: "Trojan-Downloader.VBA.Agent", SigId: 4783272, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\84fe78eebf9d3e4a7d5ea36ac0dca3ea926026764390bcbff9b3de4dc81fa9f8.xls"
    
14. [02.11.2024 20:17:36] Found, 0.21s, SigName: "Trojan-Dropper.MSIL.Agent", SigId: 2753339, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\aba29f8c9d7f90b528a89de40f418a2af1896e8535974876a3439758318dba45.exe"
    
15. [02.11.2024 20:17:36] Found, 0.25s, SigName: "Trojan.Win32.Themida", SigId: 515742368, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\b3b9fc1a54440c8a9d02971827805cb1e8fab4bcc57c7fadc85e79d5fecac83a.exe"
    
16. [02.11.2024 20:17:37] Found, 0.02s, SigName: "Trojan.LNK.Agent", SigId: 513291889, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\c421b03615ccd6202043a6ec0e799f007565b0d3ca46bd6a4465fede661ba9ab.lnk"
    
17. [02.11.2024 20:17:37] Found, 0.08s, SigName: "Trojan.Crypt", SigId: 5275398, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\dc08ba89834b24f1be58ec803792e17a9c45c7875ce1473746f8396d9a259067.exe"
    
18. [02.11.2024 20:17:37] Found, 0.06s, SigName: "Win32.SuspectCrc", SigId: 515697498, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\e29b86ad063e26d4f88cc123f784983f542357cf922f296813b615c3d0d80a00.lnk"
    
19. [02.11.2024 20:17:37] Found, 0.12s, SigName: "Trojan.Win32.Autoit", SigId: 5616529, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\e9b1fbd796431f4d67189e35457eb9f26aa80cccca57b218f757669bb8e24a75.exe"
    
20. [02.11.2024 20:17:37] Found, 0.18s, SigName: "Trojan.Crypter", SigId: 4686920, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\eacc39dac1d60cdb6d602775a25cd954bf52c3379d1c2b588a2692705db84004.exe"
    
21. [02.11.2024 20:17:37] Found, 0.08s, SigName: "Trojan.JS.Cryxos", SigId: 5611491, Type: "VIRUS", File: "C:\Users\promi\Downloads\infected20241102\f217b35ad57b5931ecaf9859d35bdc522e71de4457a8218c7cd8e869cce524a3.js"
    
22. [02.11.2024 20:17:38] On-demand scan FINISHED: "TemporaryScan"
    
23. [02.11.2024 20:17:38] ----------------------------------------------------
    
24. [02.11.2024 20:17:38] Directories scanned: 1
    
25. [02.11.2024 20:17:38] Files scanned: 60
    
26. [02.11.2024 20:17:38] Virus found: 20
    
27. [02.11.2024 20:17:38] ----------------------------------------------------</font>
    

复制代码

心醉咖啡

金山毒霸

1. 扫描时间：[2024-11-02 17:48:31]
   
2. 扫描用时：[00:00:10]
   
3. 扫描类型：自定义查杀
   
4. 扫描文件总数：36
   
5. 扫描速度：3文件/秒
   
6. 发现威胁：22个
   
7. 清除威胁：22个
   
8. =============================================
   
9. [2024-11-02 17:49:30]
   
10. 威胁：e:\浏览器下载\infected20241102\0d4675e241b3768cd9fb7b24c9afcf1dcbd73b6545e067c7e68081f6691ce64e.exe
    
11. 类型：win32.trojan.strab.4095426
    
12. 处理方式：需要处理
    
13. 
    
14. [2024-11-02 17:49:30]
    
15. 威胁：e:\浏览器下载\infected20241102\84fe78eebf9d3e4a7d5ea36ac0dca3ea926026764390bcbff9b3de4dc81fa9f8.xls
    
16. 类型：win32.troj.undef.a.(kcloud)
    
17. 处理方式：修复
    
18. 
    
19. [2024-11-02 17:49:30]
    
20. 威胁：e:\浏览器下载\infected20241102\e9b1fbd796431f4d67189e35457eb9f26aa80cccca57b218f757669bb8e24a75.exe
    
21. 类型：win32.trojan.strab.4095426
    
22. 处理方式：需要处理
    
23. 
    
24. [2024-11-02 17:49:30]
    
25. 威胁：e:\浏览器下载\infected20241102\0f07f7b65b4b5209646c6972d6d92d6a162d33f38cb7ceb0280598da1085670e.exe
    
26. 类型：win32.troj.remcos.5001892
    
27. 处理方式：需要处理
    
28. 
    
29. [2024-11-02 17:49:30]
    
30. 威胁：e:\浏览器下载\infected20241102\121a6d059a18dfd2bac2951c946386991d3ed86e70af8ba0c02dd45d5d3accf2.exe
    
31. 类型：win32.heurc.kvmh008.a.(kcloud)
    
32. 处理方式：删除
    
33. 
    
34. [2024-11-02 17:49:30]
    
35. 威胁：e:\浏览器下载\infected20241102\1eef3c00ea6fe6b3e757e7ee213f2cf19a76cb290ceb108b5dc63fe7eb86012c.exe
    
36. 类型：msil.trojan-spy.noon.gen.(kcloud)
    
37. 处理方式：删除
    
38. 
    
39. [2024-11-02 17:49:30]
    
40. 威胁：e:\浏览器下载\infected20241102\37b6e75e7fb8b5579c4130bcb6bffbc57df0d7aa1891153055e46bb039ad19e5.exe
    
41. 类型：win32.hack.remcos.gen.(kcloud)
    
42. 处理方式：删除
    
43. 
    
44. [2024-11-02 17:49:30]
    
45. 威胁：e:\浏览器下载\infected20241102\49761948995eb54234f6fa179ddaf3646656a1d7545865740eba8965bf5b6cc4.vbs
    
46. 类型：win32.infected.autoinfector.a.(kcloud)
    
47. 处理方式：删除
    
48. 
    
49. [2024-11-02 17:49:30]
    
50. 威胁：e:\浏览器下载\infected20241102\4ab71f5d38f2223abb935f9993aab0e5a7a2ca49ba8e8ed89701ffbbf4dd3d66.exe
    
51. 类型：win32.heur.infect.a
    
52. 处理方式：需要处理
    
53. 
    
54. [2024-11-02 17:49:30]
    
55. 威胁：e:\浏览器下载\infected20241102\61d3e5183fd1a0ef9c6d5c3f923fdbb1558c1b3ebcdc7f3e960a7dae1709e592.doc
    
56. 类型：win32.infected.autoinfector.a.(kcloud)
    
57. 处理方式：删除
    
58. 
    
59. [2024-11-02 17:49:30]
    
60. 威胁：e:\浏览器下载\infected20241102\74a741bc82a1dfd63433d64999ea159987b848183b89a6aac3c4ff10a6d26885.exe
    
61. 类型：msil.backdoor.xworm.gen.(kcloud)
    
62. 处理方式：删除
    
63. 
    
64. [2024-11-02 17:49:30]
    
65. 威胁：e:\浏览器下载\infected20241102\7640b2f27d7eb5c7b72b5cd20de0da99414d6a379199e6993de22ebf37c2eff5.exe
    
66. 类型：win32.trojan.generic.4099720
    
67. 处理方式：需要处理
    
68. 
    
69. [2024-11-02 17:49:30]
    
70. 威胁：e:\浏览器下载\infected20241102\9428acfc31a1bd917b6c19f0b67feb8425acf0f4074bf6ce4b4db947d64cfe22.exe
    
71. 类型：win32.heurc.kvmh008.a.(kcloud)
    
72. 处理方式：删除
    
73. 
    
74. [2024-11-02 17:49:30]
    
75. 威胁：e:\浏览器下载\infected20241102\aba29f8c9d7f90b528a89de40f418a2af1896e8535974876a3439758318dba45.exe
    
76. 类型：win64.troj.generic.2000759
    
77. 处理方式：需要处理
    
78. 
    
79. [2024-11-02 17:49:30]
    
80. 威胁：e:\浏览器下载\infected20241102\b3b9fc1a54440c8a9d02971827805cb1e8fab4bcc57c7fadc85e79d5fecac83a.exe
    
81. 类型：win32.heurc.kvmh008.a.(kcloud)
    
82. 处理方式：删除
    
83. 
    
84. [2024-11-02 17:49:30]
    
85. 威胁：e:\浏览器下载\infected20241102\b4a622d3535bbc64dab4626bf93482a2983a63f77acd0ae9b6386f51f736376c.exe
    
86. 类型：win32.troj.unknown.a.(kcloud)
    
87. 处理方式：删除
    
88. 
    
89. [2024-11-02 17:49:30]
    
90. 威胁：e:\浏览器下载\infected20241102\bb33cfadd7bfc13899d4955532e7e3594b39083d83c3774688f98455ed4da3be.exe
    
91. 类型：malware.kb.a.993
    
92. 处理方式：需要处理
    
93. 
    
94. [2024-11-02 17:49:30]
    
95. 威胁：e:\浏览器下载\infected20241102\cb84c6f6529d74fb8285e19ebf945837f5590ab46527a16a97d7f3ad3ef79c41.exe
    
96. 类型：win32.troj.agent.4109204
    
97. 处理方式：需要处理
    
98. 
    
99. [2024-11-02 17:49:30]
    
100. 威胁：e:\浏览器下载\infected20241102\dc08ba89834b24f1be58ec803792e17a9c45c7875ce1473746f8396d9a259067.exe
     
101. 类型：win32.heurc.kvmh008.a.(kcloud)
     
102. 处理方式：删除
     
103. 
     
104. [2024-11-02 17:49:30]
     
105. 威胁：e:\浏览器下载\infected20241102\e29b86ad063e26d4f88cc123f784983f542357cf922f296813b615c3d0d80a00.lnk
     
106. 类型：script.troj.cmdlnk.22143
     
107. 处理方式：需要处理
     
108. 
     
109. [2024-11-02 17:49:30]
     
110. 威胁：e:\浏览器下载\infected20241102\eacc39dac1d60cdb6d602775a25cd954bf52c3379d1c2b588a2692705db84004.exe
     
111. 类型：win32.heur.iconhash.a
     
112. 处理方式：需要处理
     
113. 
     
114. [2024-11-02 17:49:30]
     
115. 威胁：e:\浏览器下载\infected20241102\fe3e25e07d0c6d9d56cb067571e4dbb7a994c90cf1d7689ee75d83b44e4a8e39.exe
     
116. 类型：malware.kb.b.994
     
117. 处理方式：需要处理
     
118. 
     

复制代码

jijianan2007

MD剩7

tony099

火绒 26X

jijianan2007

Cylance 18X

jijianan2007

360杀毒 27X（实际26X），剩4