样本集奉上_6

www-tekeze

zm2352 发表于 2018-6-23 15:30
eset eav
引擎全开 扫描
杀17个剩13个

看51楼，之前只能 kill 8 ，现在已入库，so，你来晚了。。   去59楼那个链接里试试。

zm2352

www-tekeze 发表于 2018-6-23 15:39
看51楼，之前只能 kill 8 ，现在已入库，so，你来晚了。。   去59楼那个链接里试试。

没有入库，因为关闭潜在只有8个检测，我特地关闭潜在威胁试了下

www-tekeze

zm2352 发表于 2018-6-23 15:43
没有入库，因为关闭潜在只有8个检测，我特地关闭潜在威胁试了下

看到了，打开之后能杀17个，这批样本PUP比较多。

救命稻草

                瑞星反恶软引擎命令行扫描器（社区交流版）                 


编译于：Sep 22 2017   15:07:50

提示：
  - 本工具供社区交流使用，请勿用于其他用途
  - 本工具没有恶意软件删除、清除、隔离功能
  - 本工具包含开发中的新特性，结果仅供参考

* 命令行中的选项开关：-output-json -log=F:\瑞星新引擎x64 18.2.4\ScanLog_180623200333.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) F:\VirusSamples_6

* 加载恶软签名库： F:\瑞星新引擎x64 18.2.4/malware.rmd
* 恶软签名库加载成功，发布序号为 4460
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Sat Jun 23 20:03:37 2018

{"filename":"F:\\VirusSamples_6\\Samp (13).file","infect":{"engine":"rdmk","signature":"cmRtazo5URPVbxu9Lb5YDQDb2ouo","threat":"Trojan.Generic!8.C3"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (10).file","infect":{"engine":"md5","signature":"bWQ1Oo84CwLyRioyho+WKQNIqCg","threat":"Trojan.Bluteal!8.EFE7"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (15).file","infect":{"engine":"md5","signature":"bWQ1OpVzegDmUoHvRWymmY4WoZY","threat":"Malware.Qiwmonk!8.E93B"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (17).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (16).file","infect":{"engine":"md5","signature":"bWQ1OmHfbbAPP7+Aifu8EzRint8","threat":"Virus.Undefined!8.23"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (11).file","infect":{"engine":"rdmk","signature":"cmRtazo13f3FLWT3FAp7xgkwN1yR","threat":"PUA.Youxun!8.F60F"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (19).file","infect":{"engine":"rdmk","signature":"cmRtazomyHx41VFT5ExmLh2gFfa1","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (12).file","infect":{"engine":"md5","signature":"bWQ1OqqKZwXUOONp7CyP+rkRYvc","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (23).file","infect":{"engine":"rdmk","signature":"cmRtazp1nCnmkmEL6p052BBG9ugn","threat":"Malware.Heuristic!ET#86%"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (2).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (18).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (22).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (27).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (24).file","infect":{"engine":"md5","signature":"bWQ1OsA2jQSwNawEDMYPXYUzY4k","threat":"Malware.SupTab!8.E953"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (29).file","infect":{"engine":"rdmk","signature":"cmRtazoYwJRFrNhl9jymPjopZf+S","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (28).file","infect":{"engine":"rdmk","signature":"cmRtazpLxXYE9RBcawiGPqrQnexQ","threat":"Malware.Mizenota!8.E94D"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (14).file","infect":{"engine":"md5","signature":"bWQ1OnHW4tR0WR3TAaZ0VOw4jwc","threat":"PUA.Jawego!8.DC9F"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (20).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (3).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (30).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (7).file","infect":{"engine":"md5","signature":"bWQ1OsxnDyLIVG27pH8QQwTsD7g","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (4).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (8).file","infect":{"engine":"md5","signature":"bWQ1OmtKAr7c3Y7ApWa2u/eDNvY","threat":"Backdoor.Generic!8.CE"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (9).file","infect":{"engine":"rdmk","signature":"cmRtazrklVHDOqcie/RU5PZug8YG","threat":"PUA.ShopBox!8.1DBF"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (1).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (6).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (26).file","infect":{"engine":"md5","signature":"bWQ1OmjF6cWDXiymQU5fDZeoJLQ","threat":"PUA.Kuping!8.EB"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (5).file","type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (25).file","infect":{"engine":"md5","signature":"bWQ1OrnXIV78dVjD9BQNdpHXb3U","threat":"Malware.MalwSite!8.B1"},"type":"scan"}
{"filename":"F:\\VirusSamples_6\\Samp (21).file","type":"scan"}

扫描结束: Sat Jun 23 20:03:58 2018

总扫描耗时: 0:21:577(m:s:ms)
总扫描对象: 2977
总扫描文件: 30
总恶意文件: 17
有效检出率: 56.67%