【开放测试】卡饭病毒样本包 20241107 第185期

ongarabazanade

Avast扫描+双击21X丨剩余3X

Nocria

IKARUS - 21/24

1. [07.11.2024 19:05:31] On-demand scan started: "TemporaryScan"
   
2. [07.11.2024 19:05:31] Found, 0.00s, SigName: "Trojan.LNK.Agent", SigId: 516193393, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\1fe661a6f1371bfd4b4c2fdc0e835f8ca8bbdc2d25b00b5b89846fc4cdeea2f1.lnk"
   
3. [07.11.2024 19:05:31] Found, 0.00s, SigName: "Trojan.Win32.Themida", SigId: 516271732, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\1baa1cbce4187a8e9f1d71ed8ff9b400690cd11911817ccebc77edad64acad63.exe"
   
4. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan.PSW.Fareit", SigId: 516271414, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\3e2b0853a60dbe619179aca70b5c560cc81bb1bff1fb9eb18c92442ffb5f7646.exe"
   
5. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan-Spy.MSIL.Redline", SigId: 5002524, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\24a6ec3c24612efc1f4e87b736ea07c4120eafbcd95e8c6e64b83b67349718ce.exe"
   
6. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan.Win32.Themida", SigId: 516271731, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\4149dded7fd91b0eca160fff8d1e48d81bd206ef719bd54d1d5f86bc023eb4f9.exe"
   
7. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan.MSIL.Crypt", SigId: 516271727, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\54718ab7a93e2a2a00e355a58dfa1d4700ec08e925703bb72d7a25dd01973e9a.exe"
   
8. [07.11.2024 19:05:31] Found, 0.00s, SigName: "Trojan.Win32.Themida", SigId: 516273600, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\70dff1225c6b572e8fedd62f2e0f5c9c8b40f16c3fb9086fa05f3b103627b4cd.exe"
   
9. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan.Crypt", SigId: 5275398, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\4e303abd8571b9a4619b7603aafe1878d64e0e8eeabf27bc71168f119e7a0c0a.exe"
   
10. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan-Spy.MSIL.Whitesnake", SigId: 5476303, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\7cba781d569196e89a86f10cee7d69918fe05df1461d1f0ed3426ccb2046002e.exe"
    
11. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan.Win32.Themida", SigId: 516273597, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\89003d7b5b3e53f0c5a907f54fb5041f74823c6221ed7d1881b2df0c1c839878.exe"
    
12. [07.11.2024 19:05:31] Found, 0.00s, SigName: "Trojan.BAT.Agent", SigId: 4938891, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\ad5825d42e2c3260a914a3902b324940a7d36a4af8a02c06ad5eddfad577750b.bat"
    
13. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan.MSIL.Inject", SigId: 5671932, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\87600ddc2aad3a016b4594fb63f7e9179f85aa07e8dd318438485afb4976cb85.exe"
    
14. [07.11.2024 19:05:31] Found, 0.00s, SigName: "Trojan.VBS.GuLoader", SigId: 5671173, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\bec952140d46bb6b997483d3f1aba4228d80a943c1a956568754231ff3e668ee.vbs"
    
15. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan.Win32.Themida", SigId: 516271733, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\ba62e9e2f8ace5672fbc814db0b5fbd5a2d0a5d2d8ef55fd359e91ac756b4bbc.exe"
    
16. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan.Crypt", SigId: 5275398, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\a9f670416324be30fb1ebf3aceb1d7874624461fd3cd7fb094bf8ec917a9720f.exe"
    
17. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan.Win32.Themida", SigId: 516271729, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\bfcf6c46d64eb87be63df45a15ff9c2a89bd66af62942756ec4dbd45cdfe6ebd.exe"
    
18. [07.11.2024 19:05:31] Found, 0.01s, SigName: "Trojan.Win32.Themida", SigId: 516273595, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\c589795f1265a4042dc50040c70f65a69cd4bbba569edae1bb1a8b62ca937c41.exe"
    
19. [07.11.2024 19:05:31] Found, 0.02s, SigName: "Trojan.Win32.Krypt", SigId: 516276163, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\dd21cbc4aa28e774a926f19d1f6a1b384edcd6a902e368e76b953814ecc95963.exe"
    
20. [07.11.2024 19:05:31] Found, 0.02s, SigName: "Trojan.Win32.Themida", SigId: 516271730, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\d3ea3d360b4e4c6bc1da5adbd8c8bbe689b0541166e2a77dac821517be81de98.exe"
    
21. [07.11.2024 19:05:32] Found, 0.04s, SigName: "Trojan-Downloader.MSIL.Agent", SigId: 4095078, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\bf7e9cf27cac0d8eb54b86f28bf4c06507bd185bb1e3932de1f5f86166a45778.exe"
    
22. [07.11.2024 19:05:32] Found, 0.09s, SigName: "Trojan.Autoit", SigId: 5671871, Type: "VIRUS", File: "C:\Users\promi\Desktop\infected20241107\fe52f83b773b2e800d58b85134b7015c9be3c0a24042d2432e54de1938ff588b.exe"
    
23. [07.11.2024 19:05:32] On-demand scan FINISHED: "TemporaryScan"
    
24. [07.11.2024 19:05:32] ----------------------------------------------------
    
25. [07.11.2024 19:05:32] Directories scanned: 1
    
26. [07.11.2024 19:05:32] Files scanned: 24
    
27. [07.11.2024 19:05:32] Virus found: 21
    
28. [07.11.2024 19:05:32] ----------------------------------------------------

复制代码

xmt12

自制 21x

1. XAS扫描日志---------------
   
2. 扫描开始时间:2024/11/7 19:32:39
   
3. 
   
4. 
   
5. 危险文件:
   
6. ---------
   
7. 
   
8. D:/用户文件/2/桌面/infected20241107\1baa1cbce4187a8e9f1d71ed8ff9b400690cd11911817ccebc77edad64acad63.exe[XAS特征引擎][Trojan.Generic!id=BFE4957E]
   
9. D:/用户文件/2/桌面/infected20241107\24a6ec3c24612efc1f4e87b736ea07c4120eafbcd95e8c6e64b83b67349718ce.exe[XAS特征引擎][Trojan.Generic!id=92849837]
   
10. D:/用户文件/2/桌面/infected20241107\3e2b0853a60dbe619179aca70b5c560cc81bb1bff1fb9eb18c92442ffb5f7646.exe[XAS特征引擎][Trojan.Generic!id=92849837]
    
11. D:/用户文件/2/桌面/infected20241107\4149dded7fd91b0eca160fff8d1e48d81bd206ef719bd54d1d5f86bc023eb4f9.exe[XAS特征引擎][Trojan.Generic!id=BFE4957E]
    
12. D:/用户文件/2/桌面/infected20241107\4e303abd8571b9a4619b7603aafe1878d64e0e8eeabf27bc71168f119e7a0c0a.exe[XAS特征引擎][Trojan.Generic!id=BFE4957E]
    
13. D:/用户文件/2/桌面/infected20241107\54718ab7a93e2a2a00e355a58dfa1d4700ec08e925703bb72d7a25dd01973e9a.exe[XAS特征引擎][Trojan.Generic!id=92849837]
    
14. D:/用户文件/2/桌面/infected20241107\70dff1225c6b572e8fedd62f2e0f5c9c8b40f16c3fb9086fa05f3b103627b4cd.exe[XAS特征引擎][Trojan.Generic!id=BFE4957E]
    
15. D:/用户文件/2/桌面/infected20241107\7cba781d569196e89a86f10cee7d69918fe05df1461d1f0ed3426ccb2046002e.exe[XAS特征引擎][Trojan.Generic!id=92849837]
    
16. D:/用户文件/2/桌面/infected20241107\8159ee66e3e20d8830737e19c544448a76acc01d2ff80e7b16490b30ee022be7.exe[ANK云引擎][Trojan(0.9948)]
    
17. D:/用户文件/2/桌面/infected20241107\89003d7b5b3e53f0c5a907f54fb5041f74823c6221ed7d1881b2df0c1c839878.exe[XAS特征引擎][Trojan.Generic!id=BFE4957E]
    
18. D:/用户文件/2/桌面/infected20241107\a9f670416324be30fb1ebf3aceb1d7874624461fd3cd7fb094bf8ec917a9720f.exe[XAS特征引擎][Trojan.Generic!id=BFE4957E]
    
19. D:/用户文件/2/桌面/infected20241107\ad5825d42e2c3260a914a3902b324940a7d36a4af8a02c06ad5eddfad577750b.bat[文档查杀引擎][virus.9]
    
20. D:/用户文件/2/桌面/infected20241107\ba62e9e2f8ace5672fbc814db0b5fbd5a2d0a5d2d8ef55fd359e91ac756b4bbc.exe[XAS特征引擎][Trojan.Generic!id=BFE4957E]
    
21. D:/用户文件/2/桌面/infected20241107\bec952140d46bb6b997483d3f1aba4228d80a943c1a956568754231ff3e668ee.vbs[文档查杀引擎][virus.4]
    
22. D:/用户文件/2/桌面/infected20241107\bf7e9cf27cac0d8eb54b86f28bf4c06507bd185bb1e3932de1f5f86166a45778.exe[XAS特征引擎][Trojan.Generic!id=92849837]
    
23. D:/用户文件/2/桌面/infected20241107\bfcf6c46d64eb87be63df45a15ff9c2a89bd66af62942756ec4dbd45cdfe6ebd.exe[XAS特征引擎][Trojan.Generic!id=BFE4957E]
    
24. D:/用户文件/2/桌面/infected20241107\c589795f1265a4042dc50040c70f65a69cd4bbba569edae1bb1a8b62ca937c41.exe[XAS特征引擎][Trojan.Generic!id=BFE4957E]
    
25. D:/用户文件/2/桌面/infected20241107\d3ea3d360b4e4c6bc1da5adbd8c8bbe689b0541166e2a77dac821517be81de98.exe[XAS特征引擎][Trojan.Generic!id=BFE4957E]
    
26. D:/用户文件/2/桌面/infected20241107\dd21cbc4aa28e774a926f19d1f6a1b384edcd6a902e368e76b953814ecc95963.exe[ANK云引擎][Trojan(0.9966)]
    
27. D:/用户文件/2/桌面/infected20241107\f2ecabc649b7db40d38a85bbdb8e4491adb613d242bbda3be3677975820d7268.exe[XAS启发引擎][HEUR/Suspicious(score=270)]
    
28. D:/用户文件/2/桌面/infected20241107\fe52f83b773b2e800d58b85134b7015c9be3c0a24042d2432e54de1938ff588b.exe[XAS特征引擎][Trojan.Generic!id=7A6BCC09]
    
29. 
    
30. 总文件数:24
    
31. 病毒文件个数:21
    
32. 查杀率:87.5%
    
33. 扫描结束时间:2024/11/7 19:32:47

复制代码

EIS 22x

1. 扫描日志
   
2. 检测引擎的版本: 30180 (20241106)
   
3. 日期: 2024/11/7  时间: 19:59:40
   
4. 已扫描的磁盘、文件夹和文件: D:\用户文件\2\桌面\infected20241107
   
5. 用户: DESKTOP-L19RJQU\x
   
6. D:\用户文件\2\桌面\infected20241107\c589795f1265a4042dc50040c70f65a69cd4bbba569edae1bb1a8b62ca937c41.exe - Win32/Packed.Themida.HZB 特洛伊木马 的变量 - 已保留
   
7. D:\用户文件\2\桌面\infected20241107\1baa1cbce4187a8e9f1d71ed8ff9b400690cd11911817ccebc77edad64acad63.exe - Win32/Packed.Themida.HZB 特洛伊木马 的变量 - 已保留
   
8. D:\用户文件\2\桌面\infected20241107\1fe661a6f1371bfd4b4c2fdc0e835f8ca8bbdc2d25b00b5b89846fc4cdeea2f1.lnk - LNK/Agent.DK 特洛伊木马 - 已保留
   
9. D:\用户文件\2\桌面\infected20241107\24a6ec3c24612efc1f4e87b736ea07c4120eafbcd95e8c6e64b83b67349718ce.exe - MSIL/Spy.RedLine.I 特洛伊木马 的变量 - 已保留
   
10. D:\用户文件\2\桌面\infected20241107\d3ea3d360b4e4c6bc1da5adbd8c8bbe689b0541166e2a77dac821517be81de98.exe - Win32/Packed.Themida.HZB 特洛伊木马 的变量 - 已保留
    
11. D:\用户文件\2\桌面\infected20241107\3e2b0853a60dbe619179aca70b5c560cc81bb1bff1fb9eb18c92442ffb5f7646.exe - Suspicious Object - 已保留
    
12. D:\用户文件\2\桌面\infected20241107\dd21cbc4aa28e774a926f19d1f6a1b384edcd6a902e368e76b953814ecc95963.exe - Win32/GenKryptik.HDNY 特洛伊木马 的变量 - 已保留
    
13. D:\用户文件\2\桌面\infected20241107\4149dded7fd91b0eca160fff8d1e48d81bd206ef719bd54d1d5f86bc023eb4f9.exe - Win32/Packed.Themida.HZB 特洛伊木马 的变量 - 已保留
    
14. D:\用户文件\2\桌面\infected20241107\4e303abd8571b9a4619b7603aafe1878d64e0e8eeabf27bc71168f119e7a0c0a.exe - Win32/Packed.Themida.HZB 特洛伊木马 的变量 - 已保留
    
15. D:\用户文件\2\桌面\infected20241107\54718ab7a93e2a2a00e355a58dfa1d4700ec08e925703bb72d7a25dd01973e9a.exe - MSIL/Kryptik.AMPJ 特洛伊木马 的变量 - 已保留
    
16. D:\用户文件\2\桌面\infected20241107\70dff1225c6b572e8fedd62f2e0f5c9c8b40f16c3fb9086fa05f3b103627b4cd.exe - Win32/Packed.Themida.HZB 特洛伊木马 的变量 - 已保留
    
17. D:\用户文件\2\桌面\infected20241107\7cba781d569196e89a86f10cee7d69918fe05df1461d1f0ed3426ccb2046002e.exe - MSIL/Spy.WhiteSnake.C 特洛伊木马 的变量 - 已保留
    
18. D:\用户文件\2\桌面\infected20241107\fe52f83b773b2e800d58b85134b7015c9be3c0a24042d2432e54de1938ff588b.exe - Generik.GLUBFXY 特洛伊木马 的变量 - 已保留
    
19. D:\用户文件\2\桌面\infected20241107\8159ee66e3e20d8830737e19c544448a76acc01d2ff80e7b16490b30ee022be7.exe - Win32/GenKryptik.GPMU 特洛伊木马 的变量 - 已保留
    
20. D:\用户文件\2\桌面\infected20241107\87600ddc2aad3a016b4594fb63f7e9179f85aa07e8dd318438485afb4976cb85.exe - MSIL/Kryptik.AMPU 特洛伊木马 的变量 - 已保留
    
21. D:\用户文件\2\桌面\infected20241107\89003d7b5b3e53f0c5a907f54fb5041f74823c6221ed7d1881b2df0c1c839878.exe - Win32/Packed.Themida.HZB 特洛伊木马 的变量 - 已保留
    
22. D:\用户文件\2\桌面\infected20241107\a9f670416324be30fb1ebf3aceb1d7874624461fd3cd7fb094bf8ec917a9720f.exe - Win32/Packed.Themida.HZB 特洛伊木马 的变量 - 已保留
    
23. D:\用户文件\2\桌面\infected20241107\ad5825d42e2c3260a914a3902b324940a7d36a4af8a02c06ad5eddfad577750b.bat - BAT/Agent.NBQ 蠕虫 - 已保留
    
24. D:\用户文件\2\桌面\infected20241107\ba62e9e2f8ace5672fbc814db0b5fbd5a2d0a5d2d8ef55fd359e91ac756b4bbc.exe - Win32/Packed.Themida.HZB 特洛伊木马 的变量 - 已保留
    
25. D:\用户文件\2\桌面\infected20241107\bec952140d46bb6b997483d3f1aba4228d80a943c1a956568754231ff3e668ee.vbs - Generik.KYJXRFW 特洛伊木马 的变量 - 已保留
    
26. D:\用户文件\2\桌面\infected20241107\bf7e9cf27cac0d8eb54b86f28bf4c06507bd185bb1e3932de1f5f86166a45778.exe - Suspicious Object - 已保留
    
27. D:\用户文件\2\桌面\infected20241107\bfcf6c46d64eb87be63df45a15ff9c2a89bd66af62942756ec4dbd45cdfe6ebd.exe - Win32/Packed.Themida.HZB 特洛伊木马 的变量 - 已保留
    
28. 已扫描的对象数: 101
    
29. 检测数: 22
    
30. 已清除的对象数: 0
    
31. 完成时间: 19:59:46  总扫描时间: 6 秒 (00:00:06)
    

复制代码

360 23xQAX 2x（why

Luna_ovo

avast高级版：
高灵敏度

Nocria

EMSISOFT - (17+5)/24

心醉咖啡

金山毒霸

biue

腾讯电脑管家 24X

ninjagaocc

卡巴斯基

剩余一个