楼主: 轩夏
收起左侧

[病毒样本] 精睿样本测试(16.12.8)

  [复制链接]
cy0072005
发表于 2016-12-8 12:05:03 | 显示全部楼层

哈哈我抢个先,显示抑制15个,实际还剩36个,删除14个,有个没删除但应该不能运行。


本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
ese567
发表于 2016-12-8 12:07:47 | 显示全部楼层
cy0072005 发表于 2016-12-8 12:05
哈哈我抢个先,显示抑制15个,实际还剩36个,删除14个,有个没删除但应该不能运行。


我这里扫描好像多了几个  你这是什么版本的?   
我用的是free  双击基本被过
yushu280
发表于 2016-12-8 12:08:26 | 显示全部楼层
bd free检测出34个,处理失败5个,共29个
Eset小粉絲
发表于 2016-12-8 12:14:48 | 显示全部楼层
Avira 33x
[mw_shl_code=css,true]Start of the scan: Thursday, 8 December, 2016  12:12

Starting the file scan:

Begin scan in 'C:\Users\Ivan\Desktop\2016.12.8'
C:\Users\Ivan\Desktop\2016.12.8\01.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.460825 macro virus
        [WARNING]   Infected files in archives cannot be repaired
Successful Cloud SDK initialization and license check.
The file 'C:\Users\Ivan\Desktop\2016.12.8\02.vir' was scanned with the Protection Cloud. SHA256 = F5E2200A60A7A0CE45B0DF5AF8B0DDECD476437FA56B3009E5AD5B6083A39CE2
C:\Users\Ivan\Desktop\2016.12.8\02.vir (SHA-256: f5e2200a60a7a0ce45b0df5af8b0ddecd476437fa56b3009e5ad5b6083a39ce2)
  [DETECTION] Contains suspicious code HEUR/APC (Cloud)
C:\Users\Ivan\Desktop\2016.12.8\03.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.valmi Java script virus
C:\Users\Ivan\Desktop\2016.12.8\04.vir
  [DETECTION] Contains suspicious code HEUR/Macro.Dropper
C:\Users\Ivan\Desktop\2016.12.8\07.vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen2 HTML script virus
C:\Users\Ivan\Desktop\2016.12.8\08.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.460825 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.8\09.vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen2 HTML script virus
The file 'C:\Users\Ivan\Desktop\2016.12.8\10.vir' was scanned with the Protection Cloud. SHA256 = C5A90A428E64E85EF8536F121A8447C8E1D7D85E0091071DED47A5BECF5591A6
C:\Users\Ivan\Desktop\2016.12.8\10.vir (SHA-256: c5a90a428e64e85ef8536f121a8447c8e1d7d85e0091071ded47a5becf5591a6)
  [DETECTION] Contains suspicious code HEUR/APC (Cloud)
C:\Users\Ivan\Desktop\2016.12.8\11.vir
    [0] Archive type: ZIP
    --> xl/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Agent.725816 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.8\12.vir
  [DETECTION] Is the TR/Dropper.MSIL.noocc Trojan
C:\Users\Ivan\Desktop\2016.12.8\13.vir
  [DETECTION] Contains suspicious code HEUR/Macro.Downloader
C:\Users\Ivan\Desktop\2016.12.8\14.vir
  [DETECTION] Is the TR/Spy.Agent.jxami Trojan
C:\Users\Ivan\Desktop\2016.12.8\16.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.460825 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.8\17.vir
  [DETECTION] Is the TR/Agent.dzufi Trojan
C:\Users\Ivan\Desktop\2016.12.8\18.vir
    [0] Archive type: ZIP
    --> l.class
        [DETECTION] Contains recognition pattern of the EXP/JAVA.Adwind.BO.Gen exploit
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.8\19.vir
    [0] Archive type: ZIP
    --> xl/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Agent.6780895 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.8\20.vir
    [0] Archive type: NSIS
    --> ProgramFilesDir/spud.dll
        [DETECTION] Is the TR/Injector.ulsnz Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.8\22.vir
  [DETECTION] Contains code of the X2000M/Dldr.Agent.gtng Excel macro virus
C:\Users\Ivan\Desktop\2016.12.8\24.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.valmi Java script virus
C:\Users\Ivan\Desktop\2016.12.8\25.vir
  [DETECTION] Contains suspicious code HEUR/Macro.Dropper
C:\Users\Ivan\Desktop\2016.12.8\26.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.75001 Java script virus
C:\Users\Ivan\Desktop\2016.12.8\28.vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen2 HTML script virus
C:\Users\Ivan\Desktop\2016.12.8\29.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.460825 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.8\30.vir
  [DETECTION] Contains suspicious code HEUR/Macro.Dropper
C:\Users\Ivan\Desktop\2016.12.8\31.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.460825 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.8\33.vir
    [0] Archive type: NSIS
    --> ProgramFilesDir/Im.dll
        [DETECTION] Is the TR/Injector.ymezh Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.8\34.vir
  [DETECTION] Contains suspicious code HEUR/Macro.Agent
C:\Users\Ivan\Desktop\2016.12.8\35.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.valmi Java script virus
C:\Users\Ivan\Desktop\2016.12.8\36.vir
  [DETECTION] Contains recognition pattern of the PHISH/Agent.142355 phishing file/email
C:\Users\Ivan\Desktop\2016.12.8\38.vir
  [DETECTION] Is the TR/Spy.Agent.xusus Trojan
C:\Users\Ivan\Desktop\2016.12.8\40.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the X2000M/Dldr.Agent.gtng Excel macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.8\44.vir
  [DETECTION] Is the TR/ATRAPS.Gen Trojan
C:\Users\Ivan\Desktop\2016.12.8\46.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Krypt.921163 Java script virus
The file 'C:\Users\Ivan\Desktop\2016.12.8\48.vir' was scanned with the Protection Cloud. SHA256 = A50497C39021A8CCDB384FB974F45C88B69E7D123D9B528AD792139ECF9BC117[/mw_shl_code]
cy0072005
发表于 2016-12-8 12:32:53 | 显示全部楼层
ese567 发表于 2016-12-8 12:07
我这里扫描好像多了几个  你这是什么版本的?   
我用的是free  双击基本被过


我就知道,我用的是云杀毒,国内应该用的人挺少,这个占用低也安静和mse差不多,虽然查杀率不高,但很适合做辅助杀软,良好的上网习惯也可以单奔。
ese567
发表于 2016-12-8 12:53:28 | 显示全部楼层
cy0072005 发表于 2016-12-8 12:32
我就知道,我用的是云杀毒,国内应该用的人挺少,这个占用低也安静和mse差不多,虽然查杀率不高,但很 ...

前几天试过 pro  功能强大的多   单奔也可以   不过就是查杀太鸡肋了   而且监控灵敏度很低..
Virus4
发表于 2016-12-8 13:07:34 | 显示全部楼层
瑞星新引擎 Kill 31 来的有点晚了。。
qwe12301
发表于 2016-12-8 14:20:37 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
qwe12301
发表于 2016-12-8 14:21:33 | 显示全部楼层
好多office病毒。
qwe12301
发表于 2016-12-8 14:24:17 | 显示全部楼层
毒霸18X,目前还不算宏病毒查杀的结果。这周更新宏病毒查杀应该会再表现好点

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-3 18:21 , Processed in 0.100729 second(s), 14 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表