2014-07-12 #33

显示全部楼层 · 发表于 2014-7-13 00:03:10

http://www.400gb.com/file/68360977 / http://kuai.xunlei.com/d/XLDoFDFikVrBUwQA5e4 / http://rghost.net/private/568593 ... 8f7a5d32e2a6a68b42c

密码(7Z) infected

已将以下杀软漏报的文件上报至对应厂商:

Anvisoft
Avast
Avira
Baidu
BitDefender
Comodo
Dr.Web
Emsisoft
ESET
F-Prot
F-Secure
Fortinet
Ikarus
Immunet
K7
Kaspersky
Kompas
Malwarebytes
McAfee
Microsoft
Nano
Norman
Outpost
Panda
PCMAV
Qihoo 360
Quick Heal
Sophos
Spybot
Symantec
TotalDefense
Trend Micro
Trojan Killer
Twister
Vipre
VirIT
Xvirus
Zillya

显示全部楼层 · 发表于 2014-7-13 08:37:21

本帖最后由尘梦幽然于 2014-7-13 09:30 编辑

诺顿杀了5个。
瑞星杀了24个。RDM杀了14个。
ESET只剩一个！

显示全部楼层 · 发表于 2014-7-13 10:44:12

费尔 kill 6x

云鉴定剩一个

显示全部楼层 · 发表于 2014-7-13 11:51:12

GD：kill 26x（BD Engine）
表示小A引擎完全无反应~~

显示全部楼层 · 发表于 2014-7-13 11:53:08

bav kill 24

显示全部楼层 · 发表于 2014-7-13 12:31:20

霄栋发表于 2014-7-13 11:51
GD：kill 26x（BD Engine）
表示小A引擎完全无反应~~

b引擎是自家引擎了。除非你还在用2013。

显示全部楼层 · 发表于 2014-7-13 12:44:05

欧阳宣发表于 2014-7-13 12:31
b引擎是自家引擎了。除非你还在用2013。

了解~现在是closegap~~

显示全部楼层 · 发表于 2014-7-13 12:46:54

IKARUS found 32X

Aimbot.exe - SIGNATURE FOUND "Trojan.MSIL.Injector"
Amazon Rechnung 11.07.2014.PDF.exe - SIGNATURE FOUND "Trojan.Win32.Kryptik"
appsvc.exe - SIGNATURE FOUND "Trojan.MSIL.CoinMiner"
BKO - Zeldzame Vertoning.exe - SIGNATURE FOUND "Trojan.Win32.Inject"
conhost(1).exe - SIGNATURE FOUND "Trojan.Win32.Reconyc"

conhost.exe - SIGNATURE FOUND "Trojan.Win32.Reconyc"
Console Bypass.exe - SIGNATURE FOUND "Trojan.Win32.CDur"
Crypted DNS TEST.exe - SIGNATURE FOUND "Trojan.MSIL.Injector"
Crypted.exe - SIGNATURE FOUND "Trojan.Dropper"
cryptedbin.exe - SIGNATURE FOUND "Trojan.MSIL.Agent"

Crypted_ForWardow.exe - SIGNATURE FOUND "Trojan.MSIL.Injector"
Doc_4289.exe - SIGNATURE FOUND "Trojan.MSIL.Kryptik"
Eazereze.exe - SIGNATURE FOUND "Trojan.MSIL.Injector"
ethernetdriv.exe - SIGNATURE FOUND "Trojan.Win32.Injector"
hello.exe - SIGNATURE FOUND "Virus.Win32.BeeInject"

k.exe - SIGNATURE FOUND "Trojan.Win32.Kryptik"
Luxcrypt1.exe - SIGNATURE FOUND "Trojan.MSIL.PSW"
mjlCVTsPFGi.exe - SIGNATURE FOUND "Trojan.Win32.Injector"
ng(1).exe - SIGNATURE FOUND "Win32.Cryptor"
ng.exe - SIGNATURE FOUND "Trojan.Win32.Kryptik"

NTKernel.exe - SIGNATURE FOUND "Trojan.MSIL.CoinMiner"
Output_11.07.2014_20.exe - SIGNATURE FOUND "Win32.SuspectCrc"
Output_protected.exe - SIGNATURE FOUND "Trojan.Win32.Injector"
Patment Details.scr - SIGNATURE FOUND "Trojan.Win32.Injector"
photo.exe - SIGNATURE FOUND "Trojan.MSIL2"

Rage Aimbot.exe - SIGNATURE FOUND "Trojan.MSIL.Kryptik"
SecTeam Ethicals.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Twores"
Server_54092.exe - SIGNATURE FOUND "Trojan.MSIL.Agent"
shortkeys.exe - SIGNATURE FOUND "Trojan.Win32.Injector"
sp.exe - SIGNATURE FOUND "Trojan.MSIL.Injector"

VoiceMessage.exe - SIGNATURE FOUND "Trojan.Win32.Kryptik"
xhardrwareMS.exe - SIGNATURE FOUND "Trojan.Win32.Injector"

Virus found: 32

显示全部楼层 · 发表于 2014-7-13 13:08:32

本帖最后由霄栋于 2014-7-13 16:29 编辑

又补测了一次：
GDIS2015:监控+右键 26X
Windows 8.1 X64 双击：
样本：conhost(1).exe;Crypted.exe;Rage Aimbot.exe缺少运行库，无法运行
GD行为监控杀3X（其中cryptedbin.exe杀衍生物，未杀本体）

Patment Details.scr布吉岛有虾米行为~~求HIPS党双击~~

16：28三嫂：样本conhost(1).exe;Crypted.exe；Patment Details.scr被A引擎干掉了~这入库速度~~

显示全部楼层 · 发表于 2014-7-13 13:16:50

本帖最后由 zxcqwe 于 2014-7-13 13:21 编辑

avast 22/33,双击都不杀，不杀的已提交
2014/7/13 10:49:26 C:\Users\Administrator.PC-20131109YQEB\Desktop\A密码123\鬼影\样本.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:15:59 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\Patment Details.scr [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:01 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\Aimbot.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:01 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\Amazon Rechnung 11.07.2014.PDF.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:03 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\BKO - Zeldzame Vertoning.exe|>AutoIt.script [L] AutoIt:Injector-AU (0)
文件已成功移至隔离区...
2014/7/13 13:16:04 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\BKO - Zeldzame Vertoning.exe|>net4.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:04 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\conhost(1).exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:04 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\conhost.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:04 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\Console Bypass.exe [L] Win32:Delf-SQI [Trj] (0)
文件已成功移至隔离区...
2014/7/13 13:16:04 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\cryptedbin.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:04 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\Doc_4289.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:06 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\ethernetdriv.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:06 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\hello.exe [L] MSIL:Agent-FI [Trj] (0)
文件已成功移至隔离区...
2014/7/13 13:16:06 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\k.exe [L] Win32:GenMalicious-AW [Trj] (0)
文件已成功移至隔离区...
2014/7/13 13:16:06 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\Luxcrypt1.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:07 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\Output_11.07.2014_20.exe [L] Win32:Evo-gen [Susp] (0)
文件已成功移至隔离区...
2014/7/13 13:16:07 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\Output_protected.exe [L] Win32:Evo-gen [Susp] (0)
文件已成功移至隔离区...
2014/7/13 13:16:07 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\Rage Aimbot.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:07 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\SecTeam Ethicals.exe [L] Win32:Kryptik-IUN [Trj] (0)
文件已成功移至隔离区...
2014/7/13 13:16:07 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\Server_54092.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:08 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\shortkeys.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:08 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\sp.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...
2014/7/13 13:16:08 C:\Users\Administrator.PC-20131109YQEB\Desktop\2014-07-12_33\2014-07-12_33\VoiceMessage.exe [L] Win32:Malware-gen (0)
文件已成功移至隔离区...

[病毒样本] 2014-07-12 #33

本帖子中包含更多资源

评分

评分