精睿样本测试（15.5.14）

显示全部楼层 · 发表于 2015-5-14 10:01:59

本帖最后由 Flying_Bird 于 2015-5-14 10:09 编辑

地址：http://kuai.xunlei.com/d/zuh.AfkWivBTVQQA246

密码：bbs.vc52.cn
数量：40

已转存至百度网盘
链接: http://pan.baidu.com/s/1jRhkq 密码: rmgw

显示全部楼层 · 发表于 2015-5-14 10:07:08

本帖最后由欧阳宣于 2015-5-14 10:20 编辑

mcafee占位
只检测13个。。。。

[mw_shl_code=html,true]5/14/2015 10:11:48 AM "E:\Virus\2015.5.14\02.vir" "MultiPlug-FXP" "3"

5/14/2015 10:11:58 AM "E:\Virus\2015.5.14\10.vir" "Artemis!519235A54B73" "2"

5/14/2015 10:11:59 AM "E:\Virus\2015.5.14\12.vir" "RDN/Generic.dx!ddf" "2"

5/14/2015 10:12:00 AM "E:\Virus\2015.5.14\19.vir" "VBS/Autorun.worm" "1"

5/14/2015 10:12:03 AM "E:\Virus\2015.5.14\22.vir" "BackDoor-NJRat!D9837736B1AC" "2"

5/14/2015 10:12:06 AM "E:\Virus\2015.5.14\16.vir" "Artemis!6DF1361366F1" "2"

5/14/2015 10:12:06 AM "E:\Virus\2015.5.14\27.vir" "Generic PWS.di" "2"

5/14/2015 10:12:07 AM "E:\Virus\2015.5.14\32.vir" "GenericR-DAH!8BFFA9A8B44B" "2"

5/14/2015 10:12:08 AM "E:\Virus\2015.5.14\37.vir" "BackDoor-NJRat!F1FBAFFBEE3F" "2"

5/14/2015 10:12:08 AM "E:\Virus\2015.5.14\39.vir" "MultiPlug-FXP" "3"

5/14/2015 10:14:51 AM "C:\TSLOG\15.vir" "Artemis!B356FA04D47C" "3"

5/14/2015 10:13:08 AM "E:\virus\2015.5.14\11.vir" "Artemis!B000CE694D66" "2"

5/14/2015 10:13:11 AM "E:\virus\2015.5.14\09.vir" "Artemis!9141D8A612D2" "2"[/mw_shl_code]

显示全部楼层 · 发表于 2015-5-14 10:16:21

本帖最后由 Flying_Bird 于 2015-5-14 10:22 编辑

ESS-CH deleted 21x and missed 19x. Missed samples have been sent to ESET.
[mw_shl_code=xml,true]2015.5.14\01.vir > AUTOIT > script.au3 - Win32/Injector.Autoit.KL 特洛伊木马
2015.5.14\01.vir > AUTOIT > script.bin - Win32/Injector.Autoit.AWV 特洛伊木马的变种
2015.5.14\02.vir - Win32/Adware.MultiPlug.KK 应用程序的变种
2015.5.14\03.vir - MSIL/TrojanDownloader.Banload.DG 特洛伊木马的变种
2015.5.14\07.vir - MSIL/TrojanDropper.Binder.CZ 特洛伊木马的变种
2015.5.14\09.vir > RAR > VanToM RAT 1.4\Stub\Stub.exe - MSIL/Spy.Agent.QN 特洛伊木马的变种
2015.5.14\09.vir > RAR > VanToM RAT 1.4\VANTOM RAT 1.4.EXE - MSIL/Spy.Agent.CT 特洛伊木马的变种
2015.5.14\12.vir - Win32/Keygen.HA 潜在的不安全应用程序的变种
2015.5.14\13.vir - MSIL/Spy.Keylogger.LD 特洛伊木马的变种
2015.5.14\15.vir - Win32/HackTool.Patcher.AD 潜在的不安全应用程序的变种
2015.5.14\18.vir - MSIL/TrojanDownloader.Banload.DG 特洛伊木马的变种
2015.5.14\19.vir - VBS/Agent.NDH 蠕虫
2015.5.14\21.vir - MSIL/Spy.Keylogger.LD 特洛伊木马的变种
2015.5.14\22.vir - MSIL/Bladabindi.BC 特洛伊木马的变种
2015.5.14\27.vir - Win32/Spatet.AA 特洛伊木马
2015.5.14\30.vir > RAR > LockDowN Injector Vasco da Gama V1.0\LockDowN Injector Vasco da Gama V1.0.exe - MSIL/DllInject.C 潜在的不安全应用程序的变种
2015.5.14\31.vir - MSIL/TrojanDropper.Binder.CZ 特洛伊木马的变种
2015.5.14\32.vir - Win32/PSW.Tibia.NIC 特洛伊木马的变种
2015.5.14\36.vir - Win32/TrojanDownloader.Banload.VRE 特洛伊木马的变种
2015.5.14\37.vir - MSIL/Bladabindi.BC 特洛伊木马的变种
2015.5.14\38.vir - MSIL/TrojanDropper.Agent.BBB 特洛伊木马的变种
2015.5.14\39.vir - Win32/Adware.MultiPlug.KK 应用程序的变种
2015.5.14\40.vir > RAR > LockDowN Injector Grêmio Foot-Ball V1.0\LockDowN Injector Grêmio Foot-Ball V1.0.exe - MSIL/DllInject.C 潜在的不安全应用程序的变种[/mw_shl_code]

显示全部楼层 · 发表于 2015-5-14 10:21:16

Flying_Bird 发表于 2015-5-14 10:16
ESS-CH deleted 21x and missed 19x. Missed samples have been sent to ESET.

剩下的19个，再使用ESET Live Grid检测看看
应该也有安全文件吧

显示全部楼层 · 发表于 2015-5-14 10:24:15

本帖最后由 Flying_Bird 于 2015-5-14 10:26 编辑

jayavira 发表于 2015-5-14 10:21
剩下的19个，再使用ESET Live Grid检测看看
应该也有安全文件吧

了解
04,23 可能是安全文件
25为Adware

显示全部楼层 · 发表于 2015-5-14 10:27:59

引擎全开
40杀22个
查杀率怎么都下来了

显示全部楼层 · 发表于 2015-5-14 10:28:52

本帖最后由 Flying_Bird 于 2015-5-14 10:34 编辑

Herobravo deleted 10x. Missed files have been sent to Herobravo Lab.
[mw_shl_code=xml,true]Huorong Network Security Suite v2.5.0.67 (Last update: 2015-05-13 16:08)
Copyright (C) Huorong Security Lab. All rights reserved.

Scan started on 2015-05-14 10:20:10

2015.5.14\08.vir Adware/CostMin.c
2015.5.14\09.vir >> VanToM RAT 1.4\Stub\Stub.exe Backdoor/Bladabindi
2015.5.14\09.vir >> VanToM RAT 1.4\VANTOM RAT 1.4.EXE Backdoor/Bladabindi
2015.5.14\13.vir Backdoor/Bladabindi
2015.5.14\21.vir Backdoor/Bladabindi
2015.5.14\22.vir Backdoor/Bladabindi
2015.5.14\23.vir Adware/CostMin.c
2015.5.14\27.vir Worm/Rebhip
2015.5.14\28.vir Adware/CostMin.c
2015.5.14\33.vir DEEP:VirTool/XPack.gen!A
2015.5.14\37.vir Backdoor/Bladabindi

Scan ended on 2015-05-14 10:21:04

Time: 54 second(s). [00:00:54]
Objects scanned: 0
Malware found: 11
[/mw_shl_code]

显示全部楼层 · 发表于 2015-5-14 10:36:41

Flying_Bird 发表于 2015-5-14 10:24
了解
04,23 可能是安全文件
25为Adware

3个显示危险了，应该都是易语言吧
英文版应该可以查杀啊

显示全部楼层 · 发表于 2015-5-14 10:51:15

jayavira 发表于 2015-5-14 10:36
3个显示危险了，应该都是易语言吧
英文版应该可以查杀啊

三个显示危险的文件均上传至jotti，ESET Found nothing，也就是说应该不是易语言程序。

显示全部楼层 · 发表于 2015-5-14 10:51:41

好像是kill20吧没有认真看

[病毒样本] 精睿样本测试（15.5.14）

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源