精睿样本测试（16.10.13）

linzh

T.Yoshiyuki 发表于 2016-10-13 09:50
那大概都是BD引擎殺的了

你可以幫忙確認下BD有沒有殺出

扫描日志已贴出
20号BD报Trojan.Script.145146
07号是BD的报毒名
27号。。。BDmiss了？我没找到，你可以找找哦

宝贝要升天了

AVG杀了一点,还有几个,都不大完整.运行都不能运行,楼主确定文件都能运行?

T.Yoshiyuki

linzh 发表于 2016-10-13 10:44
BD： 删除29个 修复6个
TOTAL： 35

BD日誌怎麼是這個樣子

你點“show log”然後保存下來 是一個xml檔 打開以後複製就行

linzh

T.Yoshiyuki 发表于 2016-10-13 09:59
BD日誌怎麼是這個樣子

你點“show log”然後保存下來 是一個xml檔 打開以後複製就行

BD的日志就是这个样子啊特别别扭对吧。。这就是复制xml的了
另外我剪了一部分日志，上边那部分没啥用的

windows7爱好者

SEP14
解压监控砍了27个，没有修复

随后改后缀，扫描，又补杀4个，其中20,23被修复，补杀05和31

双击结果不是坏的，就是毫无反应，SONAR没有发挥机会了
总成绩检测31个，修复2个，删除29个
看错了....31个成绩是领先NS22.8的
@驭龙

驭龙

WD来了
扫描时间2016年10月13日 10:15
测试版本和特征库


删除24个样本＋2修复=26个样本被查杀


另外包含5个样本是云杀

补上查杀日志：
[mw_shl_code=css,true]Result Count:20
Threat Name:TrojanDownloader:O97M/Donoff
ID:2147689064
Severity:5
Number of Resources:3
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\36.vir.doc
Extended Info:27279572145635
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\01.vir.docx->word/vbaProject.bin
Extended Info:27278779184733
Resource Schema:containerfile
Resource Path:E:\VIR\VC52\2016.10.13\01.vir.docx
Extended Info:0
Threat Name:Trojan:Win32/Peals.B!cl
ID:2147691762
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\47.vir.exe
Extended Info:42227837300647
Threat Name:Exploit:SWF/Rigved.A
ID:2147717548
Severity:5
Number of Resources:2
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\03.vir.swf->(SWC)->[SWFBinary1]->(doSWF)[0]
Extended Info:920007753910924
Resource Schema:containerfile
Resource Path:E:\VIR\VC52\2016.10.13\03.vir.swf
Extended Info:0
Threat Name:TrojanDownloader:JS/Nemucod!rfn
ID:2147693169
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\04.vir.html
Extended Info:24635279832469
Threat Name:TrojanDownloader:JS/Nemucod.FG
ID:2147711771
Severity:5
Number of Resources:2
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\31.vir.html
Extended Info:394271807077009
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\05.vir.html
Extended Info:394271807077009
Threat Name:TrojanDownloader:JS/Nemucod
ID:2147693147
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\07.vir.html
Extended Info:122691303043339
Threat Name:VirTool:Win32/Injector.GE
ID:2147696959
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\08.vir.exe
Extended Info:24632228052542
Threat Name:TrojanDownloader:JS/Swabfex.C
ID:2147708152
Severity:5
Number of Resources:2
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\40.vir
Extended Info:197461082978180
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\09.vir
Extended Info:213950818183086
Threat Name:Ransom:Win32/Troldesh.C
ID:2147712194
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\12.vir.exe
Extended Info:24633671392033
Threat Name:Trojan:Win32/Skeeyah.A!rfn
ID:2147694182
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\15.vir.exe
Extended Info:24634499568218
Threat Name:Trojan:JS/BlacoleRef.W
ID:2147653105
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\17.vir
Extended Info:115628995328446
Threat Name:Trojan:Win32/Dynamer!ac
ID:2147684005
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\19.vir.exe
Extended Info:24631696029670
Threat Name:Trojan:Win32/Pennelas.I!cl
ID:2147716615
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\21.vir.exe
Extended Info:42224156861594
Threat Name:Backdoor:MSIL/Bladabindi
ID:2147678468
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\22.vir.exe
Extended Info:24634825824112
Threat Name:Worm:Win32/Gamarue.AU
ID:2147696544
Severity:5
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\25.vir.exe
Extended Info:24632920187494
Threat Name:TrojanDownloader:Java/Banload!rfn
ID:2147709976
Severity:5
Number of Resources:2
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\27.vir.zip->Xafilmmo.class
Extended Info:24633941949963
Resource Schema:containerfile
Resource Path:E:\VIR\VC52\2016.10.13\27.vir.zip
Extended Info:0
Threat Name:Trojan:O97M/Donoff
ID:2147708549
Severity:5
Number of Resources:2
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\44.vir.doc
Extended Info:108367563098985
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\35.vir.doc
Extended Info:108367563098985
Threat Name:Trojan:Win32/Peals.E!cl
ID:2147691763
Severity:5
Number of Resources:3
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\50.vir.exe
Extended Info:42227029342878
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\43.vir.exe
Extended Info:42225622798788
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\41.vir.exe
Extended Info:42227597507356
Threat Name:BrowserModifier:Win32/Plorexie
ID:225962
Severity:4
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\48.vir.exe
Extended Info:358956620204103
Threat Name:HackTool:Win32/Mailpassview
ID:2147571412
Severity:2
Number of Resources:1
Resource Schema:file
Resource Path:E:\VIR\VC52\2016.10.13\02.vir.exe
Extended Info:40959720997783
[/mw_shl_code]

T.Yoshiyuki

linzh 发表于 2016-10-13 11:03
BD的日志就是这个样子啊特别别扭对吧。。这就是复制xml的了
另外我剪了一部分日志，上边那部分 ...

我是說複製帶格式的xml  在用瀏覽器打開後的那個界面裏複製
源碼看着難受

linzh

T.Yoshiyuki 发表于 2016-10-13 10:26
我是說複製帶格式的xml  在用瀏覽器打開後的那個界面裏複製
源碼看着難受

ok，学习了

驭龙

windows7爱好者 发表于 2016-10-13 10:05
SEP14占楼

啥成绩，到现在也没有未决分析完成么？

ys0516

NS
杀19X 剩31X