精睿样本测试（16.1.22）

轩夏

地址：

http://kuai.xunlei.com/d/zuh.AUoGa2OhVgQAb51

http://pan.baidu.com/s/1jGWjrhk    提取密码   vh87

  
密码：bbs.vc52.cn
数量：50

aiqinghe

抢沙发 Bitdefender

隔离31个，修复2个 共计kill33个 未测双击

zst470396853

360   不改任何  共杀26个   其中云杀4个  云QVM1个 本地QVM1个  其他全部bd 小红伞
PS  这时忘了测试卡巴补杀了

改zip  360补杀 6个  卡巴补杀7个 一共补杀13个


改EXE  360和卡巴  补杀0个

最后剩余11个

毛豆新人

CIS     6x

18.vir         TrojWare.MSIL.Disfa.A@313962741        
24.vir         TrojWare.Win32.TrojanDownloader.Delf.gen@117138821        
27.vir|rekl.dok.12012016.doc.exe         Heur.Dual.Extensions@4294967295        
31.vir         Malware@#1t2dzfj6oaomi        
38.vir|Boleto-2-vias.exe         Malware@#vd76fh0d6z1h        
42.vir         Malware@#148bsdzzgh6j4

tianma_h

小红伞。

windows7爱好者

360TS

41号被云分析出来，不过15号漏了

改完后缀又补杀9个，其中修复2x
一共kill38个，其中删除36个，修复2个
值得一提的是，15号改成原来的后缀之后，又给杀了

cxy密斯

Mcafee 17x含4x修复

心醉咖啡

管家kill 16x

自动上传可疑文件分析后kill22x

欧阳宣

norton
检测26，修复4个。
[mw_shl_code=css,true]Resolved Threats:
W97M.Downloader
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
- Deleted


Trojan.Gen
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
- Deleted


Risks in compressed file "13.vir"
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[__substg1.0_37010102] inside of [d:\virus\2016.1.22\13.vir] - Fully Resolved


Risks in compressed file "22.vir"
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[__substg1.0_37010102] inside of [d:\virus\2016.1.22\22.vir] - Fully Resolved


Infostealer.Limitail
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
- Deleted


Infostealer.Limitail
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
d:\virus\2016.1.22\40.vir - Deleted


Trojan.Gen.2
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
- Deleted


W97M.Downloader
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
4 Files
d:\virus\2016.1.22\21.vir - Deleted
d:\virus\2016.1.22\08.vir - Deleted
d:\virus\2016.1.22\04.vir - Deleted
d:\virus\2016.1.22\06.vir - Deleted
1 Browser Cache



W32.Qakbot!gen10
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Restart Required
-----------
2 Files
c:\users\jeff6\appdata\local\temp\~dfe666c6737ff8db8c.tmp - Restart Required
d:\virus\2016.1.22\07.vir - Deleted
1 Browser Cache



Trojan.Gen.2
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
5 Files
d:\virus\2016.1.22\10.vir - Deleted
d:\virus\2016.1.22\20.vir - Deleted
d:\virus\2016.1.22\36.vir - Deleted
d:\virus\2016.1.22\33.vir - Deleted
d:\virus\2016.1.22\44.vir - Deleted
1 Browser Cache



Infostealer.Limitail
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
8 Registry Entries
HKEY_USERS\S-1-5-21-1523581685-1367262481-2280446090-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\->NofolderOptions:0 - Repaired
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sr\Parameters\->FirstRun:0 - Repaired
HKEY_USERS\S-1-5-21-1523581685-1367262481-2280446090-1001\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\->ShowSuperHidden:0 - Repaired
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\->ShowSuperHidden:0 - Repaired
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\->ShowSuperHidden:0 - Repaired
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\->ShowSuperHidden:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusDisableNotify:0 - Repaired
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusDisableNotify:0 - Repaired
2 Files
d:\virus\2016.1.22\15.vir - Deleted
d:\virus\2016.1.22\42.vir - Deleted
1 Browser Cache



Suspicious.Cloud.7.F
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
d:\virus\2016.1.22\16.vir - Deleted
1 Browser Cache



Trojan.Bladabindi
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
d:\virus\2016.1.22\18.vir - Deleted
1 Browser Cache



Trojan.Bayrob!gen6
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
2 Files
d:\virus\2016.1.22\25.vir - Deleted
d:\virus\2016.1.22\28.vir - Deleted
1 Browser Cache



Trojan.Gen
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
d:\virus\2016.1.22\31.vir - Deleted
1 Browser Cache



SAPE.Heur.A1A37
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
d:\virus\2016.1.22\39.vir - Deleted
1 Browser Cache



Packed.Generic.477
Type: Anomaly
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
d:\virus\2016.1.22\50.vir - Deleted
1 Browser Cache[/mw_shl_code]

MXCERILYF!

金山毒霸