精睿样本测试（15.8.28）

显示全部楼层 · 发表于 2015-8-28 10:20:49

霄栋发表于 2015-8-28 09:40
江民速智版：发现8，清除2，删除6

云鉴定日常转人工：

@lindeng1988

显示全部楼层 · 发表于 2015-8-28 10:25:09

熊猫：21
ESET补杀：18

显示全部楼层 · 发表于 2015-8-28 10:29:58

本帖最后由 a1121611810 于 2015-8-28 10:34 编辑

管家占位
[mw_shl_code=css,true]【扫描信息】

开始时间:2015-8-28 10:32:12
扫描用时:00:00:24
扫描类型:指定位置杀毒
扫描引擎:管家云查杀引擎管家反病毒引擎 Avira本地查杀引擎管家系统修复引擎
扫描状态:扫描完成

【扫描结果】

扫描文件数:50
发现风险数:11
已处理风险数:11

---------------------
2015-8-28 10:32:39 MD5:74607d9f9c127cc4c47e4c7d99eb1e0f C:\Users\Lld\Desktop\2015.8.28\47.vir [Win32.Trojan-downloader.Zlob.Agku]  [删除成功]
2015-8-28 10:32:39 MD5:0b8a14059fe05d52badccf2d65b51046 C:\Users\Lld\Desktop\2015.8.28\37.vir [Virus.Win32.Huhk.b]  [清除成功]
2015-8-28 10:32:39 MD5:1a015bac95125ce33f94579c6be84675 C:\Users\Lld\Desktop\2015.8.28\20.vir [Win32.Backdoor.Hackarmy.Dwtd]  [删除成功]
2015-8-28 10:32:39 MD5:848006aa2e76c6c40648fb4b3a7f74c3 C:\Users\Lld\Desktop\2015.8.28\15.vir [Win32.Risk.ADWARE.wpjf]  [删除成功]
2015-8-28 10:32:40 MD5:6c78bd196fa5053a6b64a0784a05adbf C:\Users\Lld\Desktop\2015.8.28\08.vir [TR/Agent.19509.1]  [删除成功]
2015-8-28 10:32:40 MD5:a1be23f3369c209dd7cef410f3150cea C:\Users\Lld\Desktop\2015.8.28\14.vir [Win32.Trojan.Dropper.Lmaw]  [删除成功]
2015-8-28 10:32:40 MD5:8835147e55b4a9e94c606459881a84e9 C:\Users\Lld\Desktop\2015.8.28\50.vir [TR/Crypt.TPM.Gen]  [删除成功]
2015-8-28 10:32:40 MD5:6cb75dd478d56910e1581afe2b87c6f7 C:\Users\Lld\Desktop\2015.8.28\02.vir [Win32.Trojan.Bp-generic.Wpav]  [删除成功]
2015-8-28 10:32:41 MD5:eda9f6668c261e1f4598f98896196dfb C:\Users\Lld\Desktop\2015.8.28\43.vir [BDS/Zegost.99004]  [删除成功]
2015-8-28 10:32:41 MD5:2e70127855e7d12d48c79f27bcc0ad0d C:\Users\Lld\Desktop\2015.8.28\06.vir [Win32.Risk.Generic.duch]  [删除成功]
2015-8-28 10:32:41 MD5:ef016f5c350b6a05665cf847595ce3a7 C:\Users\Lld\Desktop\2015.8.28\21.vir [OLE.Win32.Macro.700048]  [清除成功]
---------------------
[/mw_shl_code]

显示全部楼层 · 发表于 2015-8-28 10:38:53

本帖最后由 ericdj 于 2015-8-28 10:40 编辑

狐狸糊涂发表于 2015-8-28 09:49
BD余15个，BD扫描日志怎样导出，知道吗？

以扫描某个样本为例

扫描然后处理完后

保存的xml文件用excel打开~~~~
然后找到显示文件地址和病毒名的那一部分，复制，粘贴到“添加文字代码”

反正偶觉得，现在好麻烦~~~

显示全部楼层 · 发表于 2015-8-28 10:47:41

本帖最后由 MXCERILYF! 于 2015-8-28 16:16 编辑

360TS（只开启自主引擎）
文件后缀为vir时：杀22个

文件后缀为exe时：补杀7个

文件后缀为zip时：补杀11个

无后缀时：补杀2个

实际共查杀41个，排除两个修复的剩余：9个

Bitdefender Total Security 2015补杀3个

最终剩余：6个

显示全部楼层 · 发表于 2015-8-28 10:50:09

BAV Kill 29x

显示全部楼层 · 发表于 2015-8-28 10:52:17

a1121611810 发表于 2015-8-28 10:29
管家占位
[mw_shl_code=css,true]【扫描信息】

感觉管家国内版和国际版差的太多，包括红伞引擎。昨天的样本扫出13X，开伞才20X

显示全部楼层 · 发表于 2015-8-28 11:02:53

瑜辰双飞发表于 2015-8-28 10:52
感觉管家国内版和国际版差的太多，包括红伞引擎。昨天的样本扫出13X，开伞才20X

中午吃完饭我去试试国际版

显示全部楼层 · 发表于 2015-8-28 11:04:59

狐狸糊涂发表于 2015-8-28 09:49
BD余15个，BD扫描日志怎样导出，知道吗？

知道啊Resolved issues:
Object Path Threat Name Final Status

C:\Users\YAN\Desktop\2015.8.28\49.vir=>PO.exe Trojan.GenericKDZ.30073 Moved to Quarantine
C:\Users\YAN\Desktop\2015.8.28\05.vir=>invoice-82701-info-11292_new_dos.exe Trojan.Injector.BQF Deleted
C:\Users\YAN\Desktop\2015.8.28\41.vir=>invoice26_994751510375_scan.exe Trojan.Zmutzy.10 Moved to Quarantine
C:\Users\YAN\Desktop\2015.8.28\13.vir=>嵁㈦?ぎ.exe Trojan.GenericKD.2681364 Deleted
C:\Users\YAN\Desktop\2015.8.28\23.vir=>invoice-66396-info-11292_new_dos.exe Trojan.Injector.BQF Deleted
C:\Users\YAN\Desktop\2015.8.28\29.vir W97M.Downloader.YY Deleted
C:\Users\YAN\Desktop\2015.8.28\47.vir Trojan.Generic.2071185 Deleted
C:\Users\YAN\Desktop\2015.8.28\09.vir W97M.Downloader.YU Disinfected
C:\Users\YAN\Desktop\2015.8.28\27.vir W97M.Downloader.ZC Deleted
C:\Users\YAN\Desktop\2015.8.28\45.vir=>invoice26_547220130435_new_scan.exe Trojan.Injector.BQF Deleted
C:\Users\YAN\Desktop\2015.8.28\48.vir=>invoice-92737-info-11292_new_dos.exe Trojan.Injector.BQF Deleted
C:\Users\YAN\Desktop\2015.8.28\07.vir Trojan.GenericKD.2678763 Deleted
C:\Users\YAN\Desktop\2015.8.28\43.vir Trojan.Generic.14930375 Deleted
C:\Users\YAN\Desktop\2015.8.28\44.vir=>(unicode) Worm.VBS.Autorun.T Moved to Quarantine
C:\Users\YAN\Desktop\2015.8.28\41.vir=>(heurC) Zum.Zmutz.1 Deleted
C:\Users\YAN\Desktop\2015.8.28\01.vir=>(INFECTED_JS) JS:Trojan.JS.Downloader.AN Deleted
C:\Users\YAN\Desktop\2015.8.28\39.vir=>word/vbaProject.bin W97M.Downloader.YT Deleted
C:\Users\YAN\Desktop\2015.8.28\14.vir Gen:Variant.Kazy.717989 Deleted
C:\Users\YAN\Desktop\2015.8.28\32.vir Trojan.GenericKD.2602938 Deleted
C:\Users\YAN\Desktop\2015.8.28\37.vir Gen:Variant.Kazy.595744 Deleted after reboot
C:\Users\YAN\Desktop\2015.8.28\06.vir Worm.Generic.405772 Deleted
C:\Users\YAN\Desktop\2015.8.28\24.vir Trojan.GenericKD.2679931 Deleted
C:\Users\YAN\Desktop\2015.8.28\35.vir=>(INFECTED_JS) JS:Trojan.Script.CPM Deleted
C:\Users\YAN\Desktop\2015.8.28\17.vir Gen:Variant.Application.Jatif.320 Deleted
C:\Users\YAN\Desktop\2015.8.28\21.vir X97M.Laroux.FC Disinfected
C:\Users\YAN\Desktop\2015.8.28\02.vir Gen:Variant.Zbot.161 Deleted
C:\Users\YAN\Desktop\2015.8.28\03.vir=>invoice-94505-info-22704_new_dos.exe Trojan.Injector.BQF Deleted
C:\Users\YAN\Desktop\2015.8.28\20.vir Backdoor.Hackarmy.W Deleted
C:\Users\YAN\Desktop\2015.8.28\22.vir=>(unicode) Worm.VBS.Autorun.T Moved to Quarantine
C:\Users\YAN\Desktop\2015.8.28\04.vir Gen:Variant.Symmi.55465 Deleted
C:\Users\YAN\Desktop\2015.8.28\19.vir=>invoice-56279-info-11292_new_dos.exe Trojan.Injector.BQF Deleted
C:\Users\YAN\Desktop\2015.8.28\18.vir=>l21.ex7 Trojan.Injector.BQF Deleted
C:\Users\YAN\Desktop\2015.8.28\15.vir Application.Generic.1349554 Deleted
C:\Users\YAN\Desktop\2015.8.28\30.vir Trojan.Dridex.L Deleted
C:\Users\YAN\Desktop\2015.8.28\16.vir Gen:Variant.Kazy.354418 Deleted

显示全部楼层 · 发表于 2015-8-28 11:13:30

ericdj 发表于 2015-8-28 10:38
以扫描某个样本为例

扫描然后处理完后

哦，知道了，谢谢

[病毒样本] 精睿样本测试（15.8.28）

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块