精睿样本测试（15.7.14）

z2009

本帖隐藏的内容

http://kuai.xunlei.com/d/zuh.AZYqUX6jVQQA57d

http://pan.baidu.com/s/1hqtlJDy 提取密码  8ynb

  
密码：bbs.vc52.cn
数量：50

bullguard  监控 杀28 ，右键1，余21个

欧阳宣

McAfee
检测27个，修复3个。
[mw_shl_code=css,true]7/14/2015        10:02:51 AM        "E:\Virus\2015.7.14\03.vir"        "Exploit-SWF.ae"        "2"

7/14/2015        10:02:55 AM        "E:\Virus\2015.7.14\40.vir"        "Artemis!D4B9AF4880F8"        "2"

7/14/2015        10:02:56 AM        "E:\Virus\2015.7.14\23.vir"        "Artemis!479FCCB303C7"        "2"

7/14/2015        10:02:56 AM        "E:\Virus\2015.7.14\45.vir"        "Artemis!D0CF436045E3"        "2"

7/14/2015        10:02:59 AM        "E:\Virus\2015.7.14\05.vir"        "Artemis!751659B7B2AC"        "2"

7/14/2015        10:03:00 AM        "E:\Virus\2015.7.14\01.vir"        "Artemis!7E825DBDB772"        "2"

7/14/2015        10:03:01 AM        "E:\Virus\2015.7.14\07.vir"        "Artemis!26ABB9E459E5"        "2"

7/14/2015        10:03:01 AM        "E:\Virus\2015.7.14\20.vir"        "W32/Worm-FOB!12036C73E1D9"        "1"

7/14/2015        10:03:02 AM        "E:\Virus\2015.7.14\13.vir"        "Generic FakeAlert.b"        "2"

7/14/2015        10:03:02 AM        "E:\Virus\2015.7.14\18.vir"        "PWSZbot-FAMH!6CEEB20D8520"        "2"

7/14/2015        10:03:02 AM        "E:\Virus\2015.7.14\25.vir"        "Artemis!AFB51A7E9F10"        "2"

7/14/2015        10:03:03 AM        "E:\Virus\2015.7.14\24.vir"        "Artemis!F44CDE74A47A"        "2"

7/14/2015        10:03:03 AM        "E:\Virus\2015.7.14\27.vir"        "Trojan-FGRW!57225179BDF9"        "2"

7/14/2015        10:03:03 AM        "E:\Virus\2015.7.14\32.vir"        "Artemis!B8177A97F5CC"        "2"

7/14/2015        10:03:03 AM        "E:\Virus\2015.7.14\42.vir"        "BackDoor-FAJ"        "2"

7/14/2015        10:03:04 AM        "E:\Virus\2015.7.14\34.vir"        "Artemis!83E29F10D016"        "2"

7/14/2015        10:03:16 AM        "E:\Virus\2015.7.14\02.vir"        "Artemis!FB289A538EA6"        "2"

7/14/2015        10:03:17 AM        "E:\Virus\2015.7.14\08.vir"        "Artemis!E5A44F251B27"        "2"

7/14/2015        10:03:17 AM        "E:\Virus\2015.7.14\31.vir"        "Artemis!7883A361AB6B"        "2"

7/14/2015        10:03:18 AM        "E:\Virus\2015.7.14\41.vir"        "Artemis!AFF3AD5BB7DC"        "2"

7/14/2015        10:03:19 AM        "E:\Virus\2015.7.14\43.vir"        "Artemis!508367BDDBD7"        "2"

7/14/2015        10:03:20 AM        "E:\Virus\2015.7.14\30.vir"        "Artemis!D098F271CCB0"        "2"

7/14/2015        10:03:20 AM        "E:\Virus\2015.7.14\19.vir"        "Artemis!592F3EB333B4"        "2"

7/14/2015        10:03:22 AM        "E:\Virus\2015.7.14\16.vir"        "Artemis!EF6B0221EFEC"        "3"

7/14/2015        10:03:22 AM        "E:\Virus\2015.7.14\17.vir"        "Artemis!E3E5DF792291"        "2"

7/14/2015        10:03:23 AM        "E:\Virus\2015.7.14\12.vir"        "Artemis!F42E58587CDF"        "2"

7/14/2015        10:03:23 AM        "E:\Virus\2015.7.14\10.vir"        "Artemis!8B63DF79AA43"        "2"[/mw_shl_code]

碧水金江

小红伞监控+扫描kill31X,剩19X，360卫士再扫KILL4X，最后剩15X

aboringman

KSOS kill 21 files and fix 3 files.

wjy19800315

编辑掉！

wjy19800315

[mw_shl_code=css,true]扫描报告
2015年7月14日 10:40:03 - 10:40:13
计算机名称: *********
扫描类型: 扫描目标
目标: C:\Users\jiayou\Desktop\2015.7.14


结果: 找到 29 恶意软件
Trojan.GenericKD.2561310 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\08.vir\order4389_pdf.exe
Trojan.Generic.12863629 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\16.vir\UsbEAm Hosts Editor v1.9.exe
Trojan.GenericKD.2560686 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\05.vir 操作： 已隔离
Trojan.Generic.12125587 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\17.vir 操作： 已隔离
Gen:Variant.Graftor.Elzob.11433 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\07.vir 操作： 已隔离
Trojan.GenericKD.2558102 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\21.vir\EGH Inject\EGH Inject.exe
•C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\21.vir 操作： 已隔离
Gen:Variant.Zusy.78329 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\11.vir 操作： 已隔离
Trojan.Upatre.Crypted.2 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\09.vir 操作： 已隔离
Trojan.Generic.7372972 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\13.vir 操作： 已隔离
Trojan.Agent.BKRZ (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\18.vir 操作： 已隔离
Trojan.GenericKD.2532226 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\25.vir 操作： 已隔离
Gen:Win32.ExplorerHijack.cmW@aaZs7uk (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\12.vir 操作： 已隔离
Trojan.GenericKDZ.29217 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\27.vir 操作： 已隔离
Gen:Variant.Zusy.47696 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\20.vir 操作： 已隔离
Trojan.Generic.13182726 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\31.vir\XE Curreny Realtime Exchange Rate & Coverter Offline App Software.scr
Gen:Trojan.Heur.GZ.lmGfbKzMGWf (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\24.vir 操作： 已隔离
Trojan.Generic.14823923 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\32.vir 操作： 已隔离
Trojan.Generic.14777095 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\01.vir 操作： 已隔离
Trojan.GenericKD.2559260 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\44.vir 操作： 已隔离
Trojan.Generic.14827083 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\41.vir 操作： 已隔离
Trojan.GenericKD.2559059 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\45.vir 操作： 已隔离
Gen:Variant.Kazy.661268 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\02.vir 操作： 已隔离
Rogue:W32/FakeAv.BI (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\42.vir 操作： 已隔离
Gen:Variant.Adware.Amonetize (广告软件) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\40.vir 操作： 已隔离
Trojan.GenericKD.2559946 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\48.vir 操作： 已隔离
Trojan.Zbot.9501 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\43.vir 操作： 已隔离
Gen:Variant.Zusy.150659 (病毒) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\10.vir 操作： 已隔离
Adware.BrowseFox.BB (广告软件) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\34.vir 操作： 已隔离


找到危险软件
Gen:Variant.Application.Jatif (危险软件) •C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\23.vir 操作： 已隔离

统计信息
已扫描: •文件: 410
•未扫描: 5
结果: •病毒: 27
•间谍软件: 2
•可疑项目: 0
•危险软件: 1
操作: •已杀毒: 0
•已重命名: 0
•删除: 0
•已隔离: 26
•失败: 0
启动扇区: •已扫描: 0
•受感染: 0
•可疑项目: 0
•已杀毒: 0
未扫描文件: •文件 C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\46.vir\Galaxy Crypter Cracked - by Meth/Galaxy Crypter - Cracked by Meth.exe 已加密
•文件 C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\46.vir\Galaxy Crypter Cracked - by Meth/GalaxyCrypter - Original.exe 已加密
•文件 C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\46.vir\Galaxy Crypter Cracked - by Meth/READ ME.txt 已加密
•文件 C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\46.vir\Galaxy Crypter Cracked - by Meth/Runpe 已加密
•文件 C:\Users\jiayou\Desktop\2015.7.14\2015.7.14\46.vir\Galaxy Crypter Cracked - by Meth/Stub 已加密[/mw_shl_code]

神迹般存在

我又复出样本区了@驭龙 @pal家族 @阿童木来了

BAV（Global）killed 31X, missed 19X.
[mw_shl_code=css,true]【敏感项（姓名等）已手动屏蔽】
Started time: 2015/7/14 12:06:01
Elapsed time: 00:00:02
Version of virus signature database: 2015/7/14 11:34:46
Scan mode: deep scan
Scan type: right-menu scan - C:\Users\***\Downloads\2015.7.14
Status: completed
Number of scanned objects: 109
Number of detected threats: 31
Number of cleaned threats: 31

Trusted objects:

Trusted extensions:

Detected threats:
C:\Users\***\Downloads\2015.7.14\30.vir        Trojan.Win32.Inject.vdbh        Deleted
C:\Users\***\Downloads\2015.7.14\40.vir        PUA.Win32.Amonetize.FU        Deleted
C:\Users\***\Downloads\2015.7.14\12.vir        Trojan.Win32.Orsam.ahH        Deleted
C:\Users\***\Downloads\2015.7.14\07.vir        Backdoor.Win32.Poison.fpxv        Deleted
C:\Users\***\Downloads\2015.7.14\19.vir        Trojan.Win32.Injector.JN        Deleted
C:\Users\***\Downloads\2015.7.14\48.vir        Trojan.MSIL.Inject.cdtj        Deleted
C:\Users\***\Downloads\2015.7.14\25.vir        Trojan.Win32.Dropper.badk        Deleted
C:\Users\***\Downloads\2015.7.14\23.vir        PUA.Win32.Dlhelper.BERS        Deleted
C:\Users\***\Downloads\2015.7.14\11.vir        Trojan.Win32.Generic.PWS        Deleted
C:\Users\***\Downloads\2015.7.14\24.vir        Trojan.Win32.Generic.Downloader        Deleted
C:\Users\***\Downloads\2015.7.14\44.vir        Trojan.MSIL.Small.XJ        Deleted
C:\Users\***\Downloads\2015.7.14\17.vir        Trojan.MSIL.Agent.bPWE        Deleted
C:\Users\***\Downloads\2015.7.14\14.vir        Hacktool.MSIL.GameHack.GQ        Deleted
C:\Users\***\Downloads\2015.7.14\02.vir        Trojan.Win32.Banload.TXV        Deleted
C:\Users\***\Downloads\2015.7.14\18.vir        Trojan.Win32.Zbot.$CA        Deleted
C:\Users\***\Downloads\2015.7.14\20.vir        Trojan.Win32.Spatet.T        Deleted
C:\Users\***\Downloads\2015.7.14\45.vir        Backdoor.Win32.Kasidet.ble        Deleted
C:\Users\***\Downloads\2015.7.14\13.vir        Trojan.Win32.Downloader.QXU        Deleted
C:\Users\***\Downloads\2015.7.14\41.vir        Trojan.MSIL.Inject.cbjo        Deleted
C:\Users\***\Downloads\2015.7.14\08.vir        Adware.MSIL.iBryte.CVK        Deleted
C:\Users\***\Downloads\2015.7.14\05.vir        Trojan.Win32.InfoStealer.pswtij        Deleted
C:\Users\***\Downloads\2015.7.14\31.vir        Trojan.Win32.Delf.SRW        Deleted
C:\Users\***\Downloads\2015.7.14\10.vir        Adware.Win32.iBryte.DPGT        Deleted
C:\Users\***\Downloads\2015.7.14\22.vir        Trojan.MSIL.MultiPacked.BH        Deleted
C:\Users\***\Downloads\2015.7.14\34.vir        Adware.Win64.BrowseFox.BT        Deleted
C:\Users\***\Downloads\2015.7.14\32.vir        Trojan.Win32.Downloader.a        Deleted
C:\Users\***\Downloads\2015.7.14\16.vir        Trojan.Win32.Spnr.15KT14        Deleted
C:\Users\***\Downloads\2015.7.14\01.vir        Trojan.Win32.Inject.AWmJ        Deleted
C:\Users\***\Downloads\2015.7.14\21.vir        Hacktool.MSIL.DllInject.A        Deleted
C:\Users\***\Downloads\2015.7.14\39.vir        Trojan.Backdoor.Heur.gen        Deleted
C:\Users\***\Downloads\2015.7.14\42.vir        Trojan.Downloader.Heur.gen        Deleted
[/mw_shl_code]

驭龙

神迹般存在 发表于 2015-7-14 12:04
我又复出样本区了@驭龙 @pal家族 @阿童木来了

BAV（Global）killed 31X, missed 19X.

看起来BAV今天的表现不错

神迹般存在

碧水金江 发表于 2015-7-14 10:26
小红伞监控+扫描kill31X,剩19X，360卫士再扫KILL4X，最后剩15X

Baidu Antivirus(Global)用的是小红伞+Baidu引擎，看来简直一模一样。

神迹般存在

wjy19800315 发表于 2015-7-14 10:43
扫描报告
2015年7月14日 10:40:03 - 10:40:13
计算机名称: *********

这个杀软是...不好意思我不会识别杀软。。。