精睿样本测试（15.5.16）

挥泪斩情思

地址：http://kuai.xunlei.com/d/zuh.AZwZtJNWVQQA28a  

          http://pan.baidu.com/s/1dDEnriT  提取密码  kjj5  

密码：bbs.vc52.cn
数量：50

每顿需吃三大碗

咖啡个人版剩下31，杀18个，修复1个。不上图了.......噢耶！

开开心心卖手机

蛋挞检测到23x（25.1.0.3处理病毒速度真的好慢。。。。）
[mw_shl_code=xml,true]Version 25.1.0.3 (2015/4/7)
Virus signature dated 2015/5/16
Start time: 2015/5/16 9:53:05
Engine(s): Engine A (AVA 25.1579), Engine B (GD 25.5105)
Heuristics: On
Archives: On
System areas: Off
Check rootkits: Off

Check the following directories and files:


Analysis performed in full: 2015/5/16 9:53:10
    50 files checked
    23 infected files detected
    0 suspicious files found


Object: 01.vir

        Status: File moved to quarantine
        Virus: Gen:Heur.MSIL.Krypt.2 (Engine A)

Object: 08.vir

        Status: File moved to quarantine
        Virus: Application.Bundler.Outbrowse.BE (Engine A)

Object: 09.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Kazy.254703 (Engine A)

Archive: 10.vir

        Status: File moved to quarantine
        Virus: Trojan.GenericKD.2411006 (Engine A)
Object: Antonio Braz & Vanda Maia.exe

        Status: Virus detected
        Virus: Trojan.GenericKD.2411006

Object: 12.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Zusy.141040 (Engine A)

Object: 15.vir

        Status: File moved to quarantine
        Virus: PDF.Malware.FakeInvoice.C (Engine B)

Archive: 13.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Kazy.254703 (Engine A)
Object: صوووورتي.exe

        Status: Virus detected
        Virus: Gen:Variant.Kazy.254703

Archive: 17.vir

        Status: File moved to quarantine
        Virus: W97M.Downloader.NW (2x) (Engine A)
Object: (BASE64)=>(REMOVED_NULLS)=>(MIME part)=>(application)=>(Active Mime)

        Status: Virus detected
        Virus: W97M.Downloader.NW
Object: (BASE64)=>(MIME part)=>(application)=>(Active Mime)

        Status: Virus detected
        Virus: W97M.Downloader.NW

Object: 19.vir

        Status: File moved to quarantine
        Virus: PDF.Malware.FakeInvoice.C (Engine B)

Object: 20.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Zusy.2766 (Engine A)

Object: 21.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Barys.8318 (Engine A)

Object: 22.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Barys.7801 (Engine A)

Object: 26.vir

        Status: File moved to quarantine
        Virus: Trojan.Generic.13223225 (Engine A)

Object: 28.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.FAkeAlert.105 (Engine A)

Object: 34.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Barys.7801 (Engine A)

Object: 38.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Graftor.187262 (Engine A)

Object: 37.vir

        Status: File moved to quarantine
        Virus: Generic.Rebhip.833F036D (Engine A)

Object: 40.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Kazy.460943 (Engine A)

Object: 43.vir

        Status: File moved to quarantine
        Virus: Trojan.GenericKD.2411045 (Engine A)

Object: 44.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Kazy.254703 (Engine A)

Object: 46.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Zusy.75322 (Engine A)

Object: 47.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Barys.10219 (Engine A)

Archive: 50.vir

        Status: File moved to quarantine
        Virus: Gen:Variant.Barys.7801 (Engine A)
Object: (Embedded EXE o)

        Status: Virus detected
        Virus: Gen:Variant.Barys.7801
[/mw_shl_code]

ericdj

开开心心卖手机 发表于 2015-5-16 09:53
蛋挞检测到23x（25.1.0.3处理病毒速度真的好慢。。。。）
[mw_shl_code=xml,true]Version 25.1.0.3 (2015/ ...

手好快啊
处理准备上报

诸葛亮

火绒：15/50
红伞：20/50

残缺的唯美

kill22
File path Scanning result Virus name Cleaning action
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\01.vir 已感染! Gen:Heur.MSIL.Krypt.2 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\08.vir 已感染! Application.Bundler.Outbrowse.BE (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\09.vir 已感染! Gen:Variant.Kazy.254703 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\10.vir\Antonio Braz & Vanda Maia.exe 已感染! Trojan.GenericKD.2411006 (Xenon) 隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\10.vir 已感染! Trojan.GenericKD.2411006 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\12.vir 已感染! Gen:Variant.Zusy.141040 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\13.vir\صوووورتي.exe 已感染! Gen:Variant.Kazy.254703 (Xenon) 隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\13.vir 已感染! Gen:Variant.Kazy.254703 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\20.vir 已感染! Gen:Variant.Zusy.2766 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\18.vir 已感染! Inject2.CCSU (Argon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\21.vir 已感染! Gen:Variant.Barys.8318 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\22.vir 已感染! Gen:Variant.Barys.7801 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\26.vir 已感染! Trojan.Generic.13223225 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\28.vir 已感染! Gen:Variant.FAkeAlert.105 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\34.vir 已感染! Gen:Variant.Barys.7801 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\32.vir 已感染! Win32/Heur (Argon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\38.vir 已感染! Gen:Variant.Graftor.187262 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\40.vir 已感染! Gen:Variant.Kazy.460943 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\37.vir 已感染! Generic.Rebhip.833F036D (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\44.vir 已感染! Gen:Variant.Kazy.254703 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\46.vir 已感染! Gen:Variant.Zusy.75322 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\43.vir 已感染! Trojan.GenericKD.2411045 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\47.vir 已感染! Gen:Variant.Barys.10219 (Xenon) 已隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\50.vir\(Embedded EXE o) 已感染! Gen:Variant.Barys.7801 (Xenon) 隔離
C:\Users\EKINCHENG\Desktop\2015.5.16\2015.5.16\50.vir 已感染! Gen:Variant.Barys.7801 (Xenon) 已隔離

ericdj

残缺的唯美 发表于 2015-5-16 10:33
kill22
File path Scanning result Virus name Cleaning action
C:\Users\EKINCHENG\Desktop\2015.5.16\ ...

大神，这是TP吧

看样子，TP的BD引擎也没有更新到最新版本啊

狐狸糊涂

BD杀22个(监控杀16个,右键杀5个,修复1个)余28个

275751198

360云kill28个剩余22个

sogou2004

KES 修复3
MISS 25