查看: 13310|回复: 45
收起左侧

[分享] ESET,你这么猛,你家CTO知道吗?

[复制链接]
清道夫900
发表于 2014-8-8 13:48:58 | 显示全部楼层 |阅读模式
本帖最后由 清道夫900 于 2014-8-8 13:56 编辑

2011年的病毒库,版本ESET4.2。毒包:精睿8月7号包。环境:win8.1 X64  断网。

然后,解压,剩余39X包括15个修复,实际剩余24X。

截图和日志:








2014/8/8 13:32:02        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\100.vir        Win32/Sality.NBA virus        cleaned - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:32:01        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\098.vir        Win32/Ramnit.H virus        cleaned - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:32:01        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\097.vir        probably unknown NewHeur_PE virus        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:59        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\093.vir        a variant of Win32/Kryptik.CSH trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:59        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\092.vir        Win32/Bifrose trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:59        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\091.vir        probably a variant of Win32/Delf.NVC trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:58        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\090.vir        Win32/Sality.NBA virus        cleaned - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:58        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\089.vir        a variant of Win32/Kryptik.IKS trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:58        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\088.vir        probably a variant of Win32/Delf.NVC trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:57        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\086.vir        Win32/Sality.NBA virus        cleaned - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:57        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\084.vir        a variant of Win32/Kryptik.IKS trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:56        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\082.vir        Win32/Ramnit.A virus        cleaned - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:56        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\080.vir        Win32/TrojanDownloader.Small.OCD trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:55        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\079.vir        Win32/Pacex.Gen virus        deleted - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:51        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\078.vir        a variant of Win32/Kryptik.AJD trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:50        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\076.vir        Win32/Spatet.I trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:50        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\075.vir        a variant of Win32/Kryptik.IIG trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:49        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\073.vir        Win32/TrojanDownloader.Small.OBC trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:49        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\072.vir        a variant of Win32/Kryptik.CSH trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:42        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\068.vir        Win32/Mydoom.R worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:42        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\067.vir        probably unknown NewHeur_PE virus        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:42        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\065.vir        a variant of Win32/Kryptik.IIG trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:41        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\064.vir        Win32/Sality.H virus        deleted - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:40        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\061.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:40        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\060.vir        Win32/Delf.NBA virus        deleted - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:40        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\059.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:39        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\057.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:39        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\055.vir        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:38        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\054.vir        Win32/IRCBot.OV trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:38        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\052.vir        Win32/Delf.NBA virus        deleted - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:38        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\051.vir        a variant of Win32/Kryptik.IKS trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:37        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\050.vir        Win32/Mydoom.R worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:37        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\049.vir        Win32/Farex.Y worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:37        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\048.vir        Win32/Sality.NBA virus        cleaned - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:36        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\047.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:36        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\046.vir        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:36        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\045.vir        Win32/IRCBot.OV trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:36        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\043.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:35        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\042.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:35        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\041.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:35        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\040.vir        Win32/IRCBot.OV trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:28        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\037.vir        Win32/Hupigon trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:27        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\035.vir        Win32/Delf.NBA virus        deleted - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:27        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\034.vir        a variant of Win32/Hupigon.NSF trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:26        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\033.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:26        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\031.vir        Win32/Mydoom.R worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:25        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\029.vir        a variant of Win32/Spy.Qukart trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:25        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\028.vir        Win32/Sality.NBA virus        cleaned - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:25        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\027.vir        Win32/IRCBot.OV trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:25        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\026.vir        Win32/Agent.NYN trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:24        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\025.vir        Win32/Delf.NBA virus        deleted - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:24        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\024.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:23        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\021.vir        Win32/Mydoom.R worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:23        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\020.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:22        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\019.vir        Win32/Mydoom.R worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:22        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\018.vir        probably a variant of Win32/Agent.OCX trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:22        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\016.vir        probably unknown NewHeur_PE virus        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:21        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\015.vir        Win32/IRCBot.OV trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:21        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\013.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:20        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\012.vir        Win32/Mydoom.Q worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:20        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\011.vir        a variant of Win32/TrojanDownloader.Agent.PD trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:20        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\010.vir        Win32/Delf.NBA virus        deleted - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:19        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\009.vir        a variant of Win32/Kryptik.IIG trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:19        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\008.vir        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:19        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\007.vir        probably a variant of Win32/Hupigon trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:17        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\004.vir        Win32/Autoit.CS worm        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:17        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\003.vir        Win32/Delf.PTN trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:16        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\002.vir        Win32/Alman.NAB virus        cleaned - quarantined        XXXXXX\XXX        Event occurred on a newly created file.
2014/8/8 13:31:16        Real-time file system protection        file        C:\Users\XXX\Downloads\111\2014.8.7\001.vir        a variant of Win32/TrojanDownloader.Agent.QFO trojan        cleaned by deleting - quarantined        XXXXXX\XXX        Event occurred on a newly created file.




更新病毒库之后对39X再扫描,成绩:



说明4.2修复还是有没有成功的。但是,单论扫描和引擎,成绩确实不错。


本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
minjiaming
发表于 2014-8-8 15:23:23 | 显示全部楼层
wenshui1013 发表于 2014-8-8 15:05
启发关了就是渣渣。

ESET配G DATA一点都不渣
minjiaming
发表于 2014-8-8 19:09:31 | 显示全部楼层
wenshui1013 发表于 2014-8-8 16:57
你牛。。搭配不冲突。不卡。

不卡啊 G DATA 实时监控设置只在执行时候  ESET监控默认, 这样有病毒ESET会首先发现,ESET没发现的双击歌德塔监控介入
carlcai
发表于 2014-8-8 14:06:11 | 显示全部楼层
新版的不知道怎么样呢?
清道夫900
 楼主| 发表于 2014-8-8 14:09:14 | 显示全部楼层
carlcai 发表于 2014-8-8 14:06
新版的不知道怎么样呢?

不知道啊,没测过。eset的修复还不错。
sunnyjianna
发表于 2014-8-8 14:09:53 | 显示全部楼层
你也粘贴了这么长的日志,眼睛看花了。。。。。。。。。。
imim234
发表于 2014-8-8 14:13:44 来自手机 | 显示全部楼层
其实还算不错的,在8.1上实际体验不太好
mikefan21
发表于 2014-8-8 14:28:51 | 显示全部楼层
eset很久没用了,以前用的时候一直觉得很安静,不知道是什么原因,怀疑中了病毒,然后用卡巴一查就惊呆了,后来就再没用过eset
清道夫900
 楼主| 发表于 2014-8-8 14:53:21 | 显示全部楼层
mikefan21 发表于 2014-8-8 14:28
eset很久没用了,以前用的时候一直觉得很安静,不知道是什么原因,怀疑中了病毒,然后用卡巴一查就惊呆了, ...

eset一定要加防御强力软件配合使用,或者新版开hips手动,防火墙手动。
清道夫900
 楼主| 发表于 2014-8-8 14:53:53 | 显示全部楼层
imim234 发表于 2014-8-8 14:13
其实还算不错的,在8.1上实际体验不太好

体验还算凑合,至少网页防护模块比wd好点。
星风烈日
发表于 2014-8-8 15:00:09 | 显示全部楼层
精睿的样本质量本来就不高
清道夫900
 楼主| 发表于 2014-8-8 15:04:25 | 显示全部楼层
星风烈日 发表于 2014-8-8 15:00
精睿的样本质量本来就不高

这,确实,是个事实。
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-20 03:23 , Processed in 0.161769 second(s), 20 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表