精睿样本测试（17.11.24）

諾言敵不過時間

emsisoft: 75X

I76700K

毒霸Kill 65X

alalei

FSCS kill83x 余17

Jirehlov1234

540923555 发表于 2017-11-24 13:43
WD占位

一扫72个

无敌真的翻身了？，数字不小

欧阳宣

zemana 67x

dongwenqi

和泉纱雾 发表于 2017-11-24 09:18
KIS2018
数据库与版本

感谢您的帮助，在您提交的样本中有新的检测，请稍后更新最新数据库试一下。
009.vir - HEUR:Trojan.Win32.Generic
028.vir - Trojan-Downloader.Win32.Agent.hhpd
030.vir - Trojan-Clicker.BAT.Agent.cx
044.vir - Trojan-Ransom.MSIL.Agent.aap
071.vir - Trojan-Ransom.Win32.Bitcovar.ff
073.vir - Trojan.MSIL.Inject.abtyl
075.vir - Trojan.Win32.Agent.ikxu
082.vir - Trojan-Downloader.Win32.Miner.de
087.vir - Trojan-Downloader.MSIL.Agent.lbr
092.vir - HackTool.Win32.Agent.ahfh
095.vir - not-a-virus:Downloader.Win32.Agent.kdhh

核弹总裁黄仁勋

XZ8SM7Sx0bVkoUV 发表于 2017-11-24 09:46
火绒 kill33

刚测的

bbs2811125

相当于入库扫吧，ESET kill 79x，其中修复1x

1. 
   
2. Version of virus signature database: 16469P (20171125)
   
3. Date: 2017/11/25  Time: 21:15:16
   
4. Scanned disks, folders and files: C:\Users\Administrator\Desktop\2017.11.24\2017.11.24
   
5. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\001.vir - a variant of Win32/Kryptik.FZAA trojan - cleaned by deleting [1]
   
6. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\003.vir » NSIS » Script.nsi - NSIS/Injector.XG trojan - cleaned by deleting [1]
   
7. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\003.vir » NSIS » Js - archive damaged - the file could not be extracted.
   
8. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\004.vir - a variant of MSIL/Injector.TDS trojan - cleaned by deleting [1]
   
9. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\005.vir - a variant of MSIL/Kryptik.LST trojan - cleaned by deleting [1]
   
10. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\006.vir - a variant of Win32/Injector.DTRW trojan - cleaned by deleting [1]
    
11. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\007.vir - a variant of MSIL/Kryptik.KPP trojan - cleaned by deleting [1]
    
12. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\008.vir - a variant of Win32/Kryptik.FZIE trojan - cleaned by deleting [1]
    
13. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\009.vir - a variant of Win32/Packed.Themida suspicious application - cleaned by deleting [1]
    
14. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\010.vir - a variant of Win32/Injector.DTRM trojan - cleaned by deleting [1]
    
15. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\011.vir - a variant of MSIL/Injector.NIK trojan - cleaned by deleting [1]
    
16. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\012.vir » WINRARSFX » js.js - JS/TrojanDownloader.Agent.RDM trojan - cleaned by deleting [1]
    
17. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\014.vir - a variant of Win32/Kryptik.FZHS trojan - cleaned by deleting [1]
    
18. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\015.vir - a variant of Win32/Kryptik.FZHJ trojan - cleaned by deleting [1]
    
19. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\017.vir » INNO - a variant of Win32/Adware.FileTour.FFX application - cleaned by deleting [1]
    
20. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\018.vir - a variant of Win32/Kryptik.FZML trojan - cleaned by deleting [1]
    
21. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\020.vir - a variant of MSIL/Kryptik.LTC trojan - cleaned by deleting [1]
    
22. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\021.vir - a variant of MSIL/DllInject.RB potentially unsafe application - cleaned by deleting [1]
    
23. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\022.vir - a variant of MSIL/Kryptik.LOL trojan - cleaned by deleting [1]
    
24. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\023.vir - a variant of Win32/Injector.DTRM trojan - cleaned by deleting [1]
    
25. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\024.vir - a variant of MSIL/CoinMiner.AFI trojan - cleaned by deleting [1]
    
26. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\025.vir - Win32/Diskcoder.Petya.A trojan - cleaned by deleting [1]
    
27. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\026.vir - Win32/Agent.YIJ trojan - cleaned by deleting [1]
    
28. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\027.vir - a variant of Win32/Kryptik.FZHJ trojan - cleaned by deleting [1]
    
29. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\028.vir » INNO » {sys}\Launcher.exe » INNO » {sys}\CertEnroll.exe - Win32/TrojanDownloader.Agent.DSO trojan - cleaned by deleting [1]
    
30. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\029.vir - a variant of MSIL/DllInject.BK potentially unsafe application - cleaned by deleting [1]
    
31. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\031.vir » INNO » {tmp}\sensationless.dll - Win32/Adware.YoBrowser.BB application - cleaned by deleting [1]
    
32. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\032.vir - MSIL/Filecoder.FF trojan - cleaned by deleting [1]
    
33. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\033.vir - a variant of Win32/Kryptik.BWOY trojan - cleaned by deleting [1]
    
34. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\034.vir » ZIP » word/vbaProject.bin - VBA/TrojanDownloader.Agent.FFR trojan - deleted
    
35. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\035.vir - a variant of Win32/Injector.DTSO trojan - cleaned by deleting [1]
    
36. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\036.vir - a variant of Win32/Agent.YIJ trojan - cleaned by deleting [1]
    
37. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\037.vir - a variant of MSIL/Kryptik.LBD trojan - cleaned by deleting [1]
    
38. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\038.vir » WINRARSFX » winupdate.exe - a variant of Generik.MOZQPDQ trojan - cleaned by deleting [1]
    
39. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\039.vir - Win32/Spy.Zbot.ACM trojan - cleaned by deleting [1]
    
40. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\041.vir - a variant of Win32/Kryptik.FZHJ trojan - cleaned by deleting [1]
    
41. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\042.vir » UPX v13_m8 - a variant of Win32/Kryptik.FZHX trojan - deleted
    
42. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\043.vir - a variant of Win32/Injector.DTSV trojan - cleaned by deleting [1]
    
43. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\045.vir - a variant of Win32/Injector.DTQY trojan - cleaned by deleting [1]
    
44. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\046.vir - a variant of Win32/Injector.DTSL trojan - cleaned by deleting [1]
    
45. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\047.vir - a variant of Win32/Injector.DTMI trojan - cleaned by deleting [1]
    
46. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\048.vir - a variant of Win32/Kryptik.FZHJ trojan - cleaned by deleting [1]
    
47. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\049.vir - a variant of MSIL/Kryptik.LQJ trojan - cleaned by deleting [1]
    
48. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\050.vir - a variant of Win32/Kryptik.FZHJ trojan - cleaned by deleting [1]
    
49. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\052.vir - Win32/Emotet.AZ trojan - cleaned by deleting [1]
    
50. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\053.vir - a variant of Win32/DealPly.JQ potentially unwanted application - cleaned by deleting [1]
    
51. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\054.vir - a variant of MSIL/Spy.Keylogger.II trojan - cleaned by deleting [1]
    
52. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\055.vir - a variant of Win32/Injector.DTPY trojan - cleaned by deleting [1]
    
53. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\056.vir » UPX v13_m8 - a variant of Win32/DealPly.MT potentially unwanted application - deleted
    
54. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\057.vir - Win32/Agent.QJK trojan - cleaned by deleting [1]
    
55. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\060.vir - a variant of Win32/Kryptik.FZHJ trojan - cleaned by deleting [1]
    
56. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\061.vir » NSIS » escarole.dll - a variant of Win32/Injector.DTSP trojan - cleaned by deleting [1]
    
57. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\062.vir - a variant of Win32/Kryptik.FZHJ trojan - cleaned by deleting [1]
    
58. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\064.vir » NSIS » loudmouth.dll - a variant of Win32/Injector.DTSP trojan - cleaned by deleting [1]
    
59. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\065.vir - a variant of Win32/Kryptik.FZIE trojan - cleaned by deleting [1]
    
60. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\066.vir » WINRARSFX » vimeZERO.sfx.exe » WINRARSFX » vimeZERO.exe - Incorrect file checksum (CRC); the file is probably password protected.
    
61. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\068.vir - a variant of Win32/Kryptik.FZFR trojan - cleaned by deleting [1]
    
62. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\069.vir - a variant of Win32/Kryptik.FZHY trojan - cleaned by deleting [1]
    
63. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\071.vir - a variant of Win32/GenKryptik.BEVC trojan - cleaned by deleting [1]
    
64. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\072.vir - Win32/Spy.Zbot.ACZ trojan - cleaned by deleting [1]
    
65. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\073.vir - a variant of MSIL/DllInject.RB potentially unsafe application - cleaned by deleting [1]
    
66. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\074.vir - a variant of Win32/Injector.DTRO trojan - cleaned by deleting [1]
    
67. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\075.vir - a variant of Win32/Kryptik.BUHX trojan - cleaned by deleting [1]
    
68. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\076.vir - a variant of Win32/Kryptik.FZHC trojan - cleaned by deleting [1]
    
69. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\077.vir - a variant of Win32/Spy.Zbot.YW trojan - cleaned by deleting [1]
    
70. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\078.vir - Win32/Sality virus - deleted
    
71. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\079.vir - a variant of Win32/Injector.DTSL trojan - cleaned by deleting [1]
    
72. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\080.vir - a variant of Win32/Injector.DTSO trojan - cleaned by deleting [1]
    
73. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\082.vir - Win32/CoinMiner.AUL trojan - cleaned by deleting [1]
    
74. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\084.vir - a variant of MSIL/CoinMiner.AFI trojan - cleaned by deleting [1]
    
75. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\085.vir - a variant of MSIL/Kryptik.LLL trojan - cleaned by deleting [1]
    
76. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\086.vir » UPX v13_m8 - a variant of Win32/DealPly.LH.gen potentially unwanted application - deleted
    
77. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\087.vir - a variant of MSIL/Packed.Confuser.J suspicious application - cleaned by deleting [1]
    
78. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\088.vir - VBA/TrojanDownloader.Agent.FLE trojan - cleaned
    
79. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\089.vir - PDF/Phishing.A.Gen trojan - cleaned by deleting [1]
    
80. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\094.vir - a variant of Win32/Kryptik.FZHX trojan - cleaned by deleting [1]
    
81. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\095.vir - a variant of Win32/Auslogics.A potentially unwanted application - cleaned by deleting [1]
    
82. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\096.vir - a variant of Win32/DownloadAdmin.AA.gen potentially unwanted application - cleaned by deleting [1]
    
83. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\098.vir - a variant of VBS/TrojanDownloader.Small.NGR trojan - cleaned by deleting [1]
    
84. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\099.vir - a variant of Win32/Kryptik.FZHJ trojan - cleaned by deleting [1]
    
85. C:\Users\Administrator\Desktop\2017.11.24\2017.11.24\100.vir - a variant of Win32/Kryptik.FZHS trojan - cleaned by deleting [1]
    
86. Number of scanned objects: 382
    
87. Number of threats found: 79
    
88. Number of cleaned objects: 79
    

复制代码

SEP补充5x：66、02、13、16、58，剩余16x

刻舟求剑

趋势科技，解压后检出32个。