2014-07-12 #33

瓜g

尘梦幽然 发表于 2014-7-13 08:37
诺顿杀了5个。
瑞星杀了24个。RDM杀了14个。
ESET只剩一个！

星星不升反降

fzshot

Dr.Web 32x kill 1x miss

Object(s) to scan:
- C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33


C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\conhost(1).exe - infected with Trojan.BtcMine.323
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\conhost(1).exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\appsvc.exe - infected with Trojan.DownLoader11.20944
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\appsvc.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Crypted.exe - infected with BackDoor.Siggen.57253
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Crypted.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Amazon Rechnung 11.07.2014.PDF.exe - infected with BackDoor.Andromeda.22
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Amazon Rechnung 11.07.2014.PDF.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Crypted_ForWardow.exe - infected with Trojan.DownLoader10.23317
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Crypted_ForWardow.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\cryptedbin.exe - infected with Trojan.DownLoader9.28526
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\cryptedbin.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Aimbot.exe - infected with BackDoor.Bladabindi.1056
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Aimbot.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Crypted DNS TEST.exe - infected with BackDoor.Comet.884
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Crypted DNS TEST.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Console Bypass.exe - infected with BackDoor.Comet.884
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Console Bypass.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Eazereze.exe - infected with BackDoor.Vertex.25
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Eazereze.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\k.exe - infected with Trojan.Fakealert.45800
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\k.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\ethernetdriv.exe - infected with BackDoor.Comet.884
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\ethernetdriv.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Doc_4289.exe - is hacktool program Tool.MailPassView.236
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Doc_4289.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\mjlCVTsPFGi.exe - infected with BackDoor.Comet.884
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\ng(1).exe - infected with BackDoor.IRC.NgrBot.42
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\mjlCVTsPFGi.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\ng(1).exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\ng.exe - infected with Trojan.DownLoader11.20821
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\ng.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\NTKernel.exe - infected with Trojan.DownLoader11.20944
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\NTKernel.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Patment Details.scr - infected with BackDoor.Comet.884
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Patment Details.scr - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Output_11.07.2014_20.exe - is hacktool program Tool.PassView.717
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Output_11.07.2014_20.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Server_54092.exe - infected with Trojan.Siggen6.20332
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Server_54092.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\photo.exe - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Rage Aimbot.exe - infected with Trojan.DownLoader11.20951
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Rage Aimbot.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Output_protected.exe - infected with BackDoor.Vertex.5
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Output_protected.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\hello.exe - infected with BackDoor.Bifrost.21167
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\hello.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\sp.exe - infected with BackDoor.IRC.Sdbot.18340
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\sp.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\shortkeys.exe - infected with BackDoor.Comet.884
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\shortkeys.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\SecTeam Ethicals.exe - infected with BackDoor.Vertex.5
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\SecTeam Ethicals.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\VoiceMessage.exe - infected with Trojan.DownLoad3.33795
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\VoiceMessage.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\swag434434.exe - infected with Trojan.DownLoader11.20946
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\swag434434.exe - infected
>C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\conhost.exe is CAB archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\xhardrwareMS.exe - infected with BackDoor.Andromeda.22
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\xhardrwareMS.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\conhost.exe\conhost.exe - infected with Trojan.BtcMine.323
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\conhost.exe\conhost.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\conhost.exe\alg.exe - infected with Trojan.BtcMine.323
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\conhost.exe\alg.exe - infected
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\conhost.exe - infected archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\conhost.exe - infected archive
>C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Luxcrypt1.exe is BINARYRES container
>>C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Luxcrypt1.exe\data001 is ZLIB container
>C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\BKO - Zeldzame Vertoning.exe is AUTOIT container
>>C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Luxcrypt1.exe\data002 is RAR archive
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Luxcrypt1.exe\data002\gowaDlwfY.SAN - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Luxcrypt1.exe\data002\Lux.com - Ok
>>C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\BKO - Zeldzame Vertoning.exe\Users\Eigenaar\AppData\Local\Temp\autB30A.tmp - packed by ASCRIPT
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Luxcrypt1.exe\data002\cGObMTxq.DDF - unpack error
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Luxcrypt1.exe\data002 - Ok
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Luxcrypt1.exe - container, , unpack error
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\Luxcrypt1.exe - container, , unpack error
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\BKO - Zeldzame Vertoning.exe\Users\Eigenaar\AppData\Local\Temp\RazorCrypt\net4.exe - infected with Trojan.MulDrop4.50404
C:\Users\PRODUCTION I.G\Desktop\2014-07-12_33\2014-07-12_33\BKO - Zeldzame Vertoning.exe - infected container

蓝天二号

瓜g 发表于 2014-7-13 15:00
星星不升反降

这是认为有误报的节奏吗？

星猫

红伞剩下3x

雷帝彬

微软mcep解压的时候干掉两个，解压完成之后我手残的双击一个，本数字的杀毒拦截了，再次用scep扫描+360杀毒 两次扫描清理，文件夹里面的样本全部干掉

至于谁干吊多少个就不清楚  不过结论就是在360杀毒+scep的情况下实现了100%