收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 精睿样本测试（15.4.25）
12下一页
返回列表 发新帖
查看: 2832|回复: 12
收起左侧

[病毒样本] 精睿样本测试（15.4.25）

[复制链接]
学雷锋做人
头像被屏蔽
发表于 2015-4-25 10:44:36 | 显示全部楼层 |阅读模式
本帖最后由 学雷锋做人 于 2015-4-25 10:46 编辑

地址：http://kuai.xunlei.com/d/zuh.AcT.LcE6VQQA894  
密码：vc52
数量：100
回复

举报

学雷锋做人
头像被屏蔽
 楼主| 发表于 2015-4-25 10:46:12 | 显示全部楼层
本帖最后由 学雷锋做人 于 2015-4-25 10:52 编辑

360安全卫士(关伞)：97个

FD：95个

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

这样痴痴爱着你
发表于 2015-4-25 10:48:45 | 显示全部楼层
本帖最后由 这样痴痴爱着你 于 2015-4-25 10:58 编辑

火绒修复60X，漏杀13X看来进步真的很大啊@学雷锋做人
回复

举报

skyboybone
发表于 2015-4-25 10:53:50 | 显示全部楼层
断网

联网

联网开伞

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

欧阳宣
头像被屏蔽
发表于 2015-4-25 10:59:04 | 显示全部楼层
本帖最后由 欧阳宣 于 2015-4-25 11:14 编辑

norton占位
检测97个，修复60个。
[mw_shl_code=css,true]Resolved Threats:
W32.Ramnit!inf
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
45 Files
e:\virus\huge\2015.4.25\001.vir - Repaired
e:\virus\huge\2015.4.25\005.vir - Repaired
e:\virus\huge\2015.4.25\021.vir - Repaired
e:\virus\huge\2015.4.25\011.vir - Repaired
e:\virus\huge\2015.4.25\012.vir - Repaired
e:\virus\huge\2015.4.25\014.vir - Repaired
e:\virus\huge\2015.4.25\015.vir - Repaired
e:\virus\huge\2015.4.25\063.vir - Repaired
e:\virus\huge\2015.4.25\017.vir - Repaired
e:\virus\huge\2015.4.25\018.vir - Repaired
e:\virus\huge\2015.4.25\024.vir - Repaired
e:\virus\huge\2015.4.25\035.vir - Repaired
e:\virus\huge\2015.4.25\038.vir - Repaired
e:\virus\huge\2015.4.25\020.vir - Repaired
e:\virus\huge\2015.4.25\031.vir - Repaired
e:\virus\huge\2015.4.25\043.vir - Repaired
e:\virus\huge\2015.4.25\039.vir - Repaired
e:\virus\huge\2015.4.25\048.vir - Repaired
e:\virus\huge\2015.4.25\049.vir - Repaired
e:\virus\huge\2015.4.25\040.vir - Repaired
e:\virus\huge\2015.4.25\052.vir - Repaired
e:\virus\huge\2015.4.25\050.vir - Repaired
e:\virus\huge\2015.4.25\055.vir - Repaired
e:\virus\huge\2015.4.25\059.vir - Repaired
e:\virus\huge\2015.4.25\064.vir - Repaired
e:\virus\huge\2015.4.25\057.vir - Repaired
e:\virus\huge\2015.4.25\065.vir - Repaired
e:\virus\huge\2015.4.25\068.vir - Repaired
e:\virus\huge\2015.4.25\058.vir - Repaired
e:\virus\huge\2015.4.25\066.vir - Repaired
e:\virus\huge\2015.4.25\072.vir - Repaired
e:\virus\huge\2015.4.25\067.vir - Repaired
e:\virus\huge\2015.4.25\070.vir - Repaired
e:\virus\huge\2015.4.25\073.vir - Repaired
e:\virus\huge\2015.4.25\080.vir - Repaired
e:\virus\huge\2015.4.25\074.vir - Repaired
e:\virus\huge\2015.4.25\062.vir - Repaired
e:\virus\huge\2015.4.25\081.vir - Repaired
e:\virus\huge\2015.4.25\082.vir - Repaired
e:\virus\huge\2015.4.25\085.vir - Repaired
e:\virus\huge\2015.4.25\083.vir - Repaired
e:\virus\huge\2015.4.25\096.vir - Repaired
e:\virus\huge\2015.4.25\097.vir - Repaired
e:\virus\huge\2015.4.25\095.vir - Repaired
e:\virus\huge\2015.4.25\099.vir - Repaired
1 Browser Cache



SAPE.Heur.592e
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
2 Files
e:\virus\huge\2015.4.25\009.vir - Deleted
e:\virus\huge\2015.4.25\084.vir - Deleted
1 Browser Cache



SAPE.Graftor.76e
Type: Anomaly
Risk: Low (Low Stealth, Low Removal, Low Performance, Low Privacy)  
Categories: Adware
Status: Fully Resolved
-----------
1 File
e:\virus\huge\2015.4.25\002.vir - Deleted
1 Browser Cache



W32.Ramnit.B
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
27 Registry Entries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirewallDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirewallDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->UpdatesDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->UpdatesDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->DoNotAllowExceptions:1 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->DoNotAllowExceptions:1 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->DisableNotifications:0 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->DisableNotifications:0 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->EnableFirewall:1 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->EnableFirewall:1 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv->Start:2 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv->Start:2 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend\->Start:3 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend\->Start:3 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system->EnableLUA:1 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system->EnableLUA:1 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->AntiVirusOverride:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->AntiVirusOverride:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->FirewallOverride:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->FirewallOverride:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->UacDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->UacDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\->Start:2 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\->Start:2 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\->Userinit:C:\WINDOWS\system32\userinit.exe, - Repaired
17 Files
e:\virus\huge\2015.4.25\003.vir - Deleted
e:\virus\huge\2015.4.25\004.vir - Deleted
e:\virus\huge\2015.4.25\022.vir - Deleted
e:\virus\huge\2015.4.25\034.vir - Deleted
e:\virus\huge\2015.4.25\047.vir - Deleted
e:\virus\huge\2015.4.25\033.vir - Deleted
e:\virus\huge\2015.4.25\053.vir - Deleted
e:\virus\huge\2015.4.25\056.vir - Deleted
e:\virus\huge\2015.4.25\076.vir - Deleted
e:\virus\huge\2015.4.25\071.vir - Deleted
e:\virus\huge\2015.4.25\061.vir - Deleted
e:\virus\huge\2015.4.25\077.vir - Deleted
e:\virus\huge\2015.4.25\075.vir - Deleted
e:\virus\huge\2015.4.25\091.vir - Deleted
e:\virus\huge\2015.4.25\086.vir - Deleted
e:\virus\huge\2015.4.25\093.vir - Deleted
e:\virus\huge\2015.4.25\094.vir - Deleted
1 Browser Cache



Suspicious.Epi.3
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
e:\virus\huge\2015.4.25\006.vir - Deleted
1 Browser Cache



Backdoor.Trojan
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
4 Registry Entries
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\DbxUpdateBT - No Action Required
HKEY_USERS\S-1-5-21-199303550-3880348569-3445812084-1001\Software\Microsoft\Windows\DbxUpdateBT - No Action Required
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\DbxUpdateBT - No Action Required
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\DbxUpdateBT - No Action Required
10 Files
c:\users\winter0614\appdata\local\temp\hosts - No Action Required
c:\users\winter0614\appdata\local\virtualstore\windows\clear.bat - No Action Required
c:\windows\clear.bat - No Action Required
c:\users\winter0614\appdata\local\temp\install.bat - No Action Required
c:\users\winter0614\appdata\local\temp\xpprovlk.reg - No Action Required
c:\users\winter0614\appdata\local\virtualstore\windows\system\krot.hue - No Action Required
c:\windows\system\krot.hue - No Action Required
c:\users\winter0614\appdata\roaming\asobex\asl.avf - No Action Required
e:\virus\huge\2015.4.25\010.vir - Deleted
e:\virus\huge\2015.4.25\078.vir - No Action Required
2 Host File Entries
#block wga - No Action Required
127.0.0.1:mpa.one.microsoft.com - No Action Required
1 Browser Cache



PUA.Gen.2
Type: Anomaly
Risk: Low (Low Stealth, Low Removal, Low Performance, Low Privacy)  
Categories: Security Risk
Status: Fully Resolved
-----------
2 Files
e:\virus\huge\2015.4.25\042.vir - No Action Required
e:\virus\huge\2015.4.25\026.vir - Deleted
1 Browser Cache



SAPE.MultiPlug.847c
Type: Anomaly
Risk: Low (Low Stealth, Low Removal, Low Performance, Low Privacy)  
Categories: Adware
Status: Fully Resolved
-----------
1 File
e:\virus\huge\2015.4.25\042.vir - Deleted
1 Browser Cache



W32.Ramnit.B!inf
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
27 Registry Entries
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirewallDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirewallDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->UpdatesDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->UpdatesDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->DoNotAllowExceptions:1 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->DoNotAllowExceptions:1 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->DisableNotifications:0 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->DisableNotifications:0 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->EnableFirewall:1 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->EnableFirewall:1 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv->Start:2 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv->Start:2 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend\->Start:3 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend\->Start:3 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system->EnableLUA:1 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system->EnableLUA:1 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->AntiVirusOverride:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->AntiVirusOverride:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->FirewallOverride:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->FirewallOverride:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->UacDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center->UacDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\->Start:2 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc\->Start:2 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\->Userinit:C:\WINDOWS\system32\userinit.exe, - Repaired
15 Files
e:\virus\huge\2015.4.25\013.vir - Repaired
e:\virus\huge\2015.4.25\008.vir - Repaired
e:\virus\huge\2015.4.25\016.vir - Repaired
e:\virus\huge\2015.4.25\025.vir - Repaired
e:\virus\huge\2015.4.25\027.vir - Repaired
e:\virus\huge\2015.4.25\030.vir - Repaired
e:\virus\huge\2015.4.25\019.vir - Repaired
e:\virus\huge\2015.4.25\028.vir - Repaired
e:\virus\huge\2015.4.25\037.vir - Repaired
e:\virus\huge\2015.4.25\032.vir - Repaired
e:\virus\huge\2015.4.25\046.vir - Repaired
e:\virus\huge\2015.4.25\069.vir - Repaired
e:\virus\huge\2015.4.25\100.vir - Repaired
e:\virus\huge\2015.4.25\092.vir - Repaired
e:\virus\huge\2015.4.25\098.vir - Repaired
1 Browser Cache



Suspicious.Cloud.7.A
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
e:\virus\huge\2015.4.25\007.vir - Deleted
1 Browser Cache



Trojan.Gen.2
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
3 Files
e:\virus\huge\2015.4.25\023.vir - Deleted
e:\virus\huge\2015.4.25\041.vir - Deleted
e:\virus\huge\2015.4.25\090.vir - Deleted
1 Browser Cache



Adware.Crossid
Type: Anomaly
Risk: Low (Low Stealth, Low Removal, Low Performance, Low Privacy)  
Categories: Adware
Status: Fully Resolved
-----------
1 File
e:\virus\huge\2015.4.25\036.vir - Deleted
1 Browser Cache



SAPE.Heur.20a4
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
e:\virus\huge\2015.4.25\044.vir - Deleted
1 Browser Cache



Trojan.Gen
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
2 Files
e:\virus\huge\2015.4.25\051.vir - Deleted
e:\virus\huge\2015.4.25\054.vir - Deleted
1 Browser Cache



W32.Dromedan
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
e:\virus\huge\2015.4.25\078.vir - Deleted
1 Browser Cache



Suspicious.Epi.3t
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
e:\virus\huge\2015.4.25\088.vir - Deleted
1 Browser Cache



Suspicious.Epi.3
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
e:\virus\huge\2015.4.25\089.vir - Deleted
1 Browser Cache



Suspicious.Cloud.9.A
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
e:\virus\huge\2015.4.25\079.vir - Deleted
1 Browser Cache



Suspicious.Cloud.9.A
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
e:\virus\huge\2015.4.25\087.vir - Deleted
1 Browser Cache[/mw_shl_code]
回复

举报

狐狸糊涂
发表于 2015-4-25 11:00:55 | 显示全部楼层
本帖最后由 狐狸糊涂 于 2015-4-25 11:11 编辑

BD杀95个,修复59个,余5个

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

cxy密斯
发表于 2015-4-25 11:31:59 | 显示全部楼层
本帖最后由 cxy密斯 于 2015-4-25 11:38 编辑

Dr.web检测93x，修复59x

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

pal家族
发表于 2015-4-25 11:58:24 | 显示全部楼层
这样痴痴爱着你 发表于 2015-4-25 10:48
火绒修复60X，漏杀13X看来进步真的很大啊@学雷锋做人

嗯 差不多能修复的都修复了
回复

举报

pal家族
发表于 2015-4-25 12:00:58 | 显示全部楼层
卡巴余10x
修复61X
回复

举报

学雷锋做人
头像被屏蔽
 楼主| 发表于 2015-4-25 12:03:50 | 显示全部楼层
这样痴痴爱着你 发表于 2015-4-25 10:48
火绒修复60X，漏杀13X看来进步真的很大啊@学雷锋做人

嗯，不错
回复

举报

下一页 »
12下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-25 15:41 , Processed in 0.145301 second(s), 17 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表