好像是新鲜的下载器类，不知道纯不纯

心痛的伤不起

清道夫900 发表于 2015-11-12 13:11
关键主防也不一定让人满意，云鉴定还木有加入扫描和动态防御。。。。

云鉴定是加入了主房的，不然你试下断网拦截率

清道夫900

y3312068 发表于 2015-11-12 13:19
云鉴定是加入了主房的，不然你试下断网拦截率

是吗，好久没玩了，有点不记得了。

尘梦幽然

[mw_shl_code=css,true]Assessment
File1:        rilhbilagai.exe
MD5:        0xAD677F8983937FA03479A794F3159F57
SHA-1:        0xF401A95970B11C0996DF8502EE908648B0B66CB7
Machine:        Machine
Determination:        NotMalicious
Submission Detail:        rilhbilagai.exe is not malicious.

This message was generated by Symantec Security Response automation.[/mw_shl_code]

fuzhk

沙盘 BD MISS

ccboxes

诺顿解压杀，又是万能的WS.Reputation.1

275751198

360 HEUR/QVM42.0.Malware.Gen

T.Yoshiyuki

VSE miss
标准结局

不过这种推广包 访问保护规则分分钟拦截掉

尘梦幽然

[mw_shl_code=css,true]Assessment
File1:        rilhbilagai.exe
MD5:        0xAD677F8983937FA03479A794F3159F57
SHA-1:        0xF401A95970B11C0996DF8502EE908648B0B66CB7
Machine:        Machine
Determination:        NewThreat
Submission Detail:        This file is detected as PUA.Downloader with our existing Rapid Release definition set. Protection is available in Rapid Release definitions with a sequence number of 169635 or greater.
Signature Protection Name:        PUA.Downloader
Rapid Release Sequence Number:        169635

This message was generated by Symantec Security Response automation.[/mw_shl_code]

@ccboxes

蓝天二号

windows 阻止

ccboxes

尘梦幽然 发表于 2015-11-13 09:38
[mw_shl_code=css,true]Assessment
File1:        rilhbilagai.exe
MD5:        0xAD677F8983937FA03479A794F3159F57

查杀还是过，文件智能分析还是WS.Reputation.1。刚手动更新过。