敲竹杠来一发，更新第二个！！

显示全部楼层 · 发表于 2014-6-16 17:55:05

McAfee Labs Sample Analysis

ID Number:  9014426 Identified: Generic.TRA

Synopsis:

Thank you for submitting your suspicious file(s) for analysis. Attached is an EXTRA.DAT file for extra detection.
This update will be added to our daily production DATs as soon as possible. Usually this will be within the next 48 hours but may be longer in certain circumstances.

Solution:

The attached EXTRA.DAT file will detect the following submitted files:

Filename          MD5 digest
--------          ----------
{xxxxxxxx}zing sp...231de9a6bc8c74e2f8c76a57f94517de
xxxxxxxxxxxxxxxxx...b4925f9f642faba5db2be9632a51599a

The EXTRA.DAT file should be copied into the directory where the other DAT files reside (the default folder is: C:\Program Files\Common Files\McAfee\Engine).
Additional information, including steps to deploy EXTRA.DAT files, is available in the following location: http://www.mcafee.com/us/threat-center/system-help/extra-dat.aspx

Support:

McAfee Labs accepts file samples for analysis and possible inclusion into AV signature DAT updates.
Additional information for submitting samples to McAfee is available in the following location: https://kc.mcafee.com/corporate/index?page=content&id=KB68030

Product related questions and comments can be addressed via McAfee Technical Support and Customer Services, including:
* Assistance with detection and cleaning or removal of malware
* Product installation and update questions
* Product usage questions

Please use the following links to reach our Technical Support group:
Business Customers: http://www.mcafee.com/us/support.aspx
Home Customers: http://home.mcafee.com/root/support.aspx

Regards,
McAfee Labs: McAfee Labs

McAfee Labs: http://www.mcafee.com/us/threat-center.aspx
McAfee Labs Blog: http://blogs.mcafee.com/mcafee-labs

显示全部楼层 · 发表于 2014-6-16 17:57:37

尘梦幽然发表于 2014-6-16 17:54
云响应很快嘛

第一个：UDS:DangerousObject.Multi.Generic

显示全部楼层 · 发表于 2014-6-16 17:59:24

霄栋发表于 2014-6-16 17:57
第一个：UDS:DangerousObject.Multi.Generic

卡巴斯基邮件回复里应该提到了吧，第一个是Trojan-Ransom.Win32.Agent.icl，在下个版本病毒库中提供检测，第二个在分析

显示全部楼层 · 发表于 2014-6-16 18:00:07

Qutianshang 发表于 2014-6-16 17:54
佩服，就不怕你们学校的机房报废了

一般不会，自带还原卡，虽然脆，总之有用…cpcpcpy大神跟我说学校电脑可测毒，我才坚定了作死之决心…

显示全部楼层 · 发表于 2014-6-16 18:01:49

尘梦幽然发表于 2014-6-16 17:59
卡巴斯基邮件回复里应该提到了吧，第一个是Trojan-Ransom.Win32.Agent.icl，在下个版本病毒库中提供检测 ...

可是我的KES没报第二个啊。KSN只报了第一个~~

显示全部楼层 · 发表于 2014-6-16 18:02:39

霄栋发表于 2014-6-16 18:01
可是我的KES没报第二个啊。KSN只报了第一个~~

没错啊，第二个正在分析，我不是说了么

显示全部楼层 · 发表于 2014-6-16 18:03:55

深山红叶__ 发表于 2014-6-16 18:00
一般不会，自带还原卡，虽然脆，总之有用…cpcpcpy大神跟我说学校电脑可测毒，我才坚定了作死之决心…

还原卡确实可以阻挡绝大部分的病毒了，不过那个也要重启才生效吧，别让病毒带到沟里去了

显示全部楼层 · 发表于 2014-6-16 18:08:24

Qutianshang 发表于 2014-6-16 18:03
还原卡确实可以阻挡绝大部分的病毒了，不过那个也要重启才生效吧，别让病毒带到沟里去了

这玩意儿还是没问题的，无局域网感染、穿还原

显示全部楼层 · 发表于 2014-6-16 18:10:19

深山红叶__ 发表于 2014-6-16 18:08
这玩意儿还是没问题的，无局域网感染、穿还原

听说前几年对付还原卡的病毒不少啊

显示全部楼层 · 发表于 2014-6-16 18:40:58

尘梦幽然发表于 2014-6-16 17:55
McAfee Labs Sample Analysis

ID Number: 9014426 Identified: Generic.TRA

麦克风个人版到底有主防或HIPS没

[病毒样本] 敲竹杠来一发，更新第二个！！