样本集奉上_18

郭昕旸

卡巴扫描剩两个，没敢双击

www-tekeze

郭昕旸 发表于 2018-7-12 14:47
卡巴扫描剩两个，没敢双击

看4楼，之前才5个，双击也才多杀1个。。。你来晚了，昨天已被上报。。

郭昕旸

为什么上报了还剩两个？
https://s.threatbook.cn/report/file/e2722e5f2b24acd21631278d5dc1aca981b6566712c010c878c8de3f7a3782ad/?env=win7_sp1_enx86_office2013
https://s.threatbook.cn/report/file/61e0a8029c715edd5a064f0ee40d1676ad6913afe41a1aae5622cc79eabb1781/?env=win7_sp1_enx86_office2013
第二个还行，第一个不入库就不对了吧

www-tekeze

郭昕旸 发表于 2018-7-12 15:00
为什么上报了还剩两个？

样本里完全有可能有白文件，也就是说根本算不上病毒，为何要全杀呢，那不成了误报误杀？  

PS：各家入库策略不一样，某些样本比如PUP类的，这家不报那家报，也不奇怪。。。

郭昕旸

这样子啊

www-tekeze

郭昕旸 发表于 2018-7-12 15:00
为什么上报了还剩两个？
https://s.threatbook.cn/report/file/e2722e5f2b24acd21631278d5dc1aca981b65667 ...

编辑过了？ 微步的更新比较慢，还是用VT较好。。。https://www.virustotal.com/#/home/upload

www-tekeze

郭昕旸 发表于 2018-7-12 15:11
这样子啊

没有哪个杀软是绝对的Top 1，否则其它杀软厂商就得关门了，所以选择一款适合自己的才是关键。。

xcvbaby

ynghaos 发表于 2018-7-11 17:57
不如用火绒

这货还不如毒霸呢

su333777

sep

"Samp_(6).vir","Trojan.Gen.2","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:48:15"
"Samp_(6).vir","Trojan.Gen.2","未决分析","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","C:\Users\hapi999\Downloads\","清除安全风险","隔离"," ","2018/7/12 20:46:33"
"Samp_(7).vir","Trojan.Gen.2","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:48:58"
"Samp_(7).vir","Trojan.Gen.2","未决分析","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","C:\Users\hapi999\Downloads\","清除安全风险","隔离"," ","2018/7/12 20:46:33"
"Samp_(8).vir","Trojan.Gen.2","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:49:27"
"Samp_(8).vir","Trojan.Gen.2","未决分析","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","C:\Users\hapi999\Downloads\","清除安全风险","隔离"," ","2018/7/12 20:47:59"
"Samp_(9).vir","Trojan.Gen.2","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:49:30"
"Samp_(9).vir","Trojan.Gen.2","未决分析","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","C:\Users\hapi999\Downloads\","清除安全风险","隔离"," ","2018/7/12 20:48:04"
"Samp_(6).vir","Heur.AdvML.C","已隔离","启发式病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:48:15"
"Samp_(10).vir","Trojan.Gen.MBT","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:49:32"
"Samp_(10).vir","Trojan.Gen.MBT","未决分析","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","C:\Users\hapi999\Downloads\","清除安全风险","隔离"," ","2018/7/12 20:48:37"
"Samp_(11).vir","Trojan.Gen.2","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:49:34"
"Samp_(11).vir","Trojan.Gen.2","未决分析","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","C:\Users\hapi999\Downloads\","清除安全风险","隔离"," ","2018/7/12 20:48:38"
"Samp_(12).vir","Trojan.Gen.2","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:49:36"
"Samp_(12).vir","Trojan.Gen.2","未决分析","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","C:\Users\hapi999\Downloads\","清除安全风险","隔离"," ","2018/7/12 20:48:39"
"Samp_(1).vir","Trojan.Gen.SMH","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","SYSTEM","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:50:02"
"Samp_(7).vir","Heur.AdvML.B","已隔离","启发式病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:48:58"
"Samp_(2).vir","Trojan.Gen.2","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","SYSTEM","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:50:25"
"Samp_(3).vir","Trojan Horse","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:50:26"
"Samp_(4).vir","Trojan.Gen.2","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:50:27"
"Samp_(4).vir","Trojan.Gen.2","未决分析","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","C:\Users\hapi999\Downloads\","清除安全风险","隔离"," ","2018/7/12 20:49:21"
"Samp_(8).vir","Heur.AdvML.B","已隔离","启发式病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:49:27"
"Samp_(9).vir","Heur.AdvML.B","已隔离","启发式病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:49:31"
"Samp_(10).vir","Heur.AdvML.A","已隔离","启发式病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:49:33"
"Samp_(5).vir","Trojan.Gen.2","已隔离","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:50:29"
"Samp_(5).vir","Trojan.Gen.2","未决分析","病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","C:\Users\hapi999\Downloads\","清除安全风险","隔离"," ","2018/7/12 20:49:33"
"Samp_(11).vir","Heur.AdvML.C","已隔离","启发式病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:49:35"
"Samp_(12).vir","Heur.AdvML.B","已隔离","启发式病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:49:37"
"Samp_(4).vir","Heur.AdvML.C","已隔离","启发式病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:50:27"
"Samp_(5).vir","Heur.AdvML.B","已隔离","启发式病毒","自动防护扫描","C:\Users\hapi999\Downloads\","DESKTOP-H6H4GLC","hapi999","受感染","隔离","清除安全风险","隔离","已经成功地隔离了文件。","2018/7/12 20:50:29"

www-tekeze

su333777 发表于 2018-7-12 20:56
sep

"Samp_(6).vir","Trojan.Gen.2","已隔离","病毒","自动防护扫描","C:%users\hapi999\Downloads\","D ...

眼睛都看花了，最终杀了几个啊？ 但现在测试意思不大，有可能刚被入库不久。。