精睿样本测试（15.8.6）

85464

瑞星16x其中清除3x

ELOHIM

断簪 发表于 2015-8-6 09:52
13是Kido蠕虫！

项目:
containerfile:C:\Documents and Settings\^\桌面\2015.8.6\07.vir
containerfile:C:\Documents and Settings\^\桌面\2015.8.6\13.vir
containerfile:C:\Documents and Settings\^\桌面\2015.8.6\42.vir
containerfile:C:\Documents and Settings\^\桌面\2015.8.6\49.vir
file:C:\Documents and Settings\^\桌面\2015.8.6\07.vir
file:C:\Documents and Settings\^\桌面\2015.8.6\07.vir->(UPX)
file:C:\Documents and Settings\^\桌面\2015.8.6\13.vir
file:C:\Documents and Settings\^\桌面\2015.8.6\13.vir->(UPX)
file:C:\Documents and Settings\^\桌面\2015.8.6\42.vir
file:C:\Documents and Settings\^\桌面\2015.8.6\42.vir->(UPX)
file:C:\Documents and Settings\^\桌面\2015.8.6\49.vir
file:C:\Documents and Settings\^\桌面\2015.8.6\49.vir->(UPX)

包括13号，还有其他几个，微软检测为：Worm:Win32/Conficker.B
病毒说明还是很详细的，不妨一看。
http://www.microsoft.com/securit ... ;enterprise=1#tab=2
-----
Alert level: Severe

First detected by definition: 1.49.1183.0
Latest detected by definition: 1.203.795.0 and higher
First detected on: Dec 30, 2008 This entry was first published on: Dec 30, 2008
This entry was updated on: Aug 21, 2014

This threat is also detected as:

TA08-297A (other)
CVE-2008-4250 (other)
VU827267 (other)
Win32/Conficker.A (CA)
Mal/Conficker-A (Sophos)
Trojan.Win32.Agent.bccs (Kaspersky)
W32.Downadup.B (Symantec)
Confickr (other)

skyboybone

金山

ericdj

ELOHIM 发表于 2015-8-6 10:03
项目:
containerfile:C:\Documents and Settings\^\桌面\2015.8.6\07.vir
containerfile:C:\Documen ...

微软的还会给出其他厂商的爆报毒方法~~~

ELOHIM

ericdj 发表于 2015-8-6 10:29
微软的还会给出其他厂商的爆报毒方法~~~

这是必须的。哈哈

ericdj

ELOHIM 发表于 2015-8-6 10:38
这是必须的。哈哈

好吧，系统都是微软出的，果然这帮厂家必须配合啊

ELOHIM

ericdj 发表于 2015-8-6 10:39
好吧，系统都是微软出的，果然这帮厂家必须配合啊

知道就好哦，

wenshui1013

TP杀37个

ericdj

wenshui1013 发表于 2015-8-6 11:02
TP杀37个

求帖日志

另外i，似乎TP还不如EAV哦

wenshui1013

ericdj 发表于 2015-8-6 11:10
求帖日志

另外i，似乎TP还不如EAV哦

EAV除了查杀，我感觉一无是处==日志我清除了==