样本

显示全部楼层 · 发表于 2016-10-7 15:27:34

T.Yoshiyuki 发表于 2016-10-7 13:02
幾個報VBS宏病毒的看來還是不修復嘛……直接刪除也太不夠意思

ESET就是这样，先尝试修复，修复不了就删。

显示全部楼层 · 发表于 2016-10-7 16:52:18

Eset小粉絲发表于 2016-10-6 23:49
这些样本只是随便抓红伞Miss的，趋势也Miss，看来同等级

不一样，趋势走的是云端截毒，本地扫描从来没好过，但是实际效果好。

显示全部楼层 · 发表于 2016-10-7 18:01:53

没有比对。

显示全部楼层 · 发表于 2016-10-8 13:57:11

ELOHIM 发表于 2016-10-6 22:14
图一：三个文件不知道修复了没有，还是原来就这么大？
没有比对。

MSE
[mw_shl_code=css,true]C:\Users\XuanXia\Desktop\Samples\114c22f28e9858efb541fc9896645c2569bc95b297b3cf797c4894b86536c91f.vir                         Infected: TrojanDropper:BAT/Vaultcrypt.A
C:\Users\XuanXia\Desktop\Samples\25a24ec279ac6fed4bb35efc8203303f2afddbc0a8e5a49d98d6207bd1c4f846.vir                         Infected: Trojan:O97M/Macrobe.D
C:\Users\XuanXia\Desktop\Samples\28f32ab52240b62b8221e044767142df6ede752868c01085c482058b55879dbb.vir                         Suspicious: VirTool:VBS/Obfuscator.SK [submit_sample]
C:\Users\XuanXia\Desktop\Samples\2956f04a60b08881e1b8134d0fc16a1b5cc46dc36a25d0a0160d2e9819081487.vir                         Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\Samples\2a04f9a83f4549c1d1770ef7e700ded1d9e5cd257f55c257e985b6e5365b1af5.vir                         Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\Samples\2daedf0b267f7ec2e8645dac356fc64eb1bae48523016b903e4dfb7360532a25.vir                         Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\Samples\471ffab4327060f37f04ed0b5d4e9bb959a2025e68314007ad1925cffcbab666.vir                         Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\Samples\8e803d0190788bc5331ad3954a5554b8d7db5f21d9c00c0b0516ca511a5a9061.vir                         Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\Samples\b3871db142af884eeb680080680891f1f225397cf214d8c148e607ae2fa1fb98.vir->(SCRIPT0063)          Infected: HackTool:JS/Jsprat
C:\Users\XuanXia\Desktop\Samples\c51841317fbca33f02897a5ae15b4f735c21f5329c1af61327b4a006d86c853c.vir                         Infected: TrojanDownloader:JS/Kipin.A
C:\Users\XuanXia\Desktop\Samples\c7090e450ad5564be6d00b600316f7301262c9693c96bb30bc283d64d384cfa0.vir                         Infected: TrojanDownloader:JS/Nemucod[/mw_shl_code]

[病毒样本] 样本