【04.11】#VirusPackage 11x

ELOHIM

SCEP MISS:

1. 2018/04/11  17:23            73,728              (1).exe
   
2. 2018/04/11  17:25         1,170,656              (10).exe
   
3. 2018/04/11  12:33           342,528              (2).exe
   
4. 2018/04/11  17:14           622,592              (3).exe
   
5. 2018/04/11  17:27           631,808              (4).exe
   
6. 2018/04/10  17:17           758,496              (5).exe
   
7. 2018/04/11  17:13           797,696              (8).exe
   
8. 2018/04/11  12:35         1,112,464              (9).exe
   
9.                8 个文件      5,509,968 字节

复制代码

温馨小屋

BD： 11/11

(1).exe ATD杀 (回滚了一堆东西)
(2).exe ATD杀
(3).exe ATD杀
(4).exe ATD杀
(5).exe Gen:Variant.Strictor.161052
(6).exe Gen:Variant.Razy.296852
(7).exe AIT:Trojan.Nymeria.219
(8).exe ATD杀
(9).exe Trojan.GenericKD.30578833
(10).exe Gen:Variant.Symmi.40417
(11).scr ATD杀

Jirehlov1234

pal家族 发表于 2018-4-11 20:23
目前应该只剩下八号了

好奇怪。。6和1我这里右键能看到“不受信任”，但是扫描就是不杀。。。双击PDM有反应

x291502676

温馨小屋 发表于 2018-4-11 20:48
BD： 11/11

(1).exe ATD杀 (回滚了一堆东西)

BD果然无敌

x291502676

Jirehlov1234 发表于 2018-4-11 17:49
卡巴

(2).exe Backdoor.Win32.Mokes.woo

1.6不是PDM杀的吧？应该是联动云了

温馨小屋

x291502676 发表于 2018-4-11 20:54
1.6不是PDM杀的吧？应该是联动云了

确实是云联动报法，估计是信誉不信任到UDS杀有一定时间差吧

pal家族

Jirehlov1234 发表于 2018-4-11 20:50
好奇怪。。6和1我这里右键能看到“不受信任”，但是扫描就是不杀。。。双击PDM有反应

因为有监控扫描也有缓存呀，么么哒。
双击就不一样了。监控和扫描或许会因为缓存的缘故没有报毒(这个缓存不会一直有效的)。，但主防可以独立查询云信誉，看到拉黑了就杀了

saleniy35

SEP 11/11

BBCALL

Avira 全杀

d:\downloads\test\(1).exe
04/11/2018,22-02-24        [INFO]        [ACTION] Clean
04/11/2018,22-02-24        [INFO]        Repair of TR/AD.MalwareCrypter.spugv started.
04/11/2018,22-02-31        [INFO]        Repair of TR/AD.MalwareCrypter.spugv finished successfully.
04/11/2018,22-02-31        [INFO]        d:\downloads\test\(2).exe
04/11/2018,22-02-31        [INFO]        [ACTION] Clean
04/11/2018,22-02-31        [INFO]        Repair of DR/Delphi.olfqf started.
04/11/2018,22-02-39        [INFO]        Repair of DR/Delphi.olfqf finished successfully.
04/11/2018,22-02-39        [INFO]        d:\downloads\test\(3).exe
04/11/2018,22-02-39        [INFO]        [ACTION] Clean
04/11/2018,22-02-39        [INFO]        Repair of DR/Delphi.7f375b started.
04/11/2018,22-02-46        [INFO]        Repair of DR/Delphi.7f375b finished successfully.
04/11/2018,22-02-46        [INFO]        d:\downloads\test\(4).exe
04/11/2018,22-02-46        [INFO]        [ACTION] Clean
04/11/2018,22-02-46        [INFO]        Repair of TR/Spy.ZBot.zwtqo started.
04/11/2018,22-02-54        [INFO]        Repair of TR/Spy.ZBot.zwtqo finished successfully.
04/11/2018,22-02-54        [INFO]        d:\downloads\test\(5).exe
04/11/2018,22-02-54        [INFO]        [ACTION] Clean
04/11/2018,22-02-54        [INFO]        Repair of TR/Dropper.VB.fgplp started.
04/11/2018,22-03-01        [INFO]        Repair of TR/Dropper.VB.fgplp finished successfully.
04/11/2018,22-03-01        [INFO]        d:\downloads\test\(6).exe
04/11/2018,22-03-01        [INFO]        [ACTION] Clean
04/11/2018,22-03-01        [INFO]        Repair of TR/Nymeria.iqjxy started.
04/11/2018,22-03-09        [INFO]        Repair of TR/Nymeria.iqjxy finished successfully.
04/11/2018,22-03-09        [INFO]        d:\downloads\test\(7).exe
04/11/2018,22-03-09        [INFO]        [ACTION] Clean
04/11/2018,22-03-09        [INFO]        Repair of HEUR/APC started.
04/11/2018,22-03-16        [INFO]        Repair of HEUR/APC finished successfully.
04/11/2018,22-03-16        [INFO]        d:\downloads\test\(8).exe
04/11/2018,22-03-16        [INFO]        [ACTION] Clean
04/11/2018,22-03-16        [INFO]        Repair of TR/Dropper.MSIL.xhbiq started.
04/11/2018,22-03-24        [INFO]        Repair of TR/Dropper.MSIL.xhbiq finished successfully.
04/11/2018,22-03-24        [INFO]        d:\downloads\test\(9).exe
04/11/2018,22-03-24        [INFO]        [ACTION] Clean
04/11/2018,22-03-24        [INFO]        Repair of TR/Dropper.MSIL.mysxv started.
04/11/2018,22-03-28        [INFO]        Repair of TR/Dropper.MSIL.mysxv finished successfully.
04/11/2018,22-03-28        [INFO]        d:\downloads\test\(11).scr
04/11/2018,22-03-28        [INFO]        [ACTION] Clean
04/11/2018,22-03-28        [INFO]        Repair of HEUR/APC started.
04/11/2018,22-03-35        [INFO]        Repair of HEUR/APC finished successfully.
04/11/2018,22-03-35        [INFO]        d:\downloads\test\(10).exe
04/11/2018,22-03-35        [INFO]        [ACTION] Clean

---------------------------------------------------------

End of scan : 2018-04-11 22:03:35
Duration : 02m:21s:843ms

The scan has been done completely.

      0 Scanned directories
      1 Scanned archives
     11 Scanned files
      0 Skipped files
      0 Ignored files
     11 Detected files
     11 Infected files cleaned
      0 Warnings

---------------------------------------------------------

x291502676

saleniy35 发表于 2018-4-11 21:56
SEP 11/11

这么多WS开头的是信誉杀？万物杀？