样本集奉上_58 (08.30)

飞碟1234

c/mm 发表于 2018-8-30 21:06
DR.WEB
剩余S：9X   M：8X

z建议再核对一下，蜘蛛有可能会有修复文件的现象存在

HEMM

S: 39/50，M: 36/39，Total: 75/89

WD 云 高阻止级别，监控加扫描，有自动上传，不知道有没有修复，没看。

S  留下 7 9 14 19 21 24 30 32 33 35 46
M 留下10 12 23

欧阳宣

emsisoft

45/50+M21/39 = 67/89

静影沉璧

迟到的BD2019：
M：15/39
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(13)M.vir MemScan:Trojan.Ransom.AYF Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(1)M.vir Trojan.Ransom.Spora.Gen.1 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(29)M.vir=>(NSIS o)=>lzma_nsis0000 Trojan.NSIS.Androm.BR Moved to Quarantine
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(15)M.vir DeepScan:Generic.Nymaim.E.CCBC33F3 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(24)M.vir DeepScan:Generic.Nymaim.E.6ED29B7C Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(32)M.vir DeepScan:Generic.Nymaim.E.8B6480AA Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(23)M.vir DeepScan:Generic.Nymaim.E.B4ADCDBA Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(17)M.vir Trojan.Agent.CFJZ Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(35)M.vir Gen:Trojan.Heur.LP.fO8baSZB44fi Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(2)M.vir DeepScan:Generic.Ransom.NSIS.Androm2.C92AC1BC Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(20)M.vir Trojan.Agent.BWJV Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(29)M.vir=>(NSIS o)=>lzma_nsis0006 Gen:Suspicious.Cloud.8.eG8@aG!qosii Moved to Quarantine
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(28)M.vir MemScan:Trojan.Agent.BYSS Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(16)M.vir Trojan.Ransom.Cerber.QZ Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(34)M.vir Trojan.Generic.8027426 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(8)M.vir Trojan.Agent.BVYZ Deleted

S：32/50
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(23).vir Trojan.Agent.BWJV Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(41).vir Trojan.GenericKD.40298896 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(5).vir Trojan.Ransom.Spora.Gen.1 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(50).vir Script.SWF.C78 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(32).vir Trojan.GenericKD.3525870 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(47).vir Trojan.GenericKD.30831374 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(29).vir DeepScan:Generic.Nymaim.E.3386EF13 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(25).vir=>BolProa000121594984151521000.exe Trojan.GenericKD.12183020 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(24).vir=>[Subject: Scanned Image from a Xerox WorkCentre][Date: Fri, 4 Sep 2015 15:34:36 +0100]=>Scan001_2943828_008.zip=>Scan001.scr Trojan.Dalexis.Gen.1 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(38).vir Exploit.PDF.DD Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(16).vir Gen:Suspicious.Cloud.8.yS8@aecm9Sbk Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(34).vir Trojan.GenericKD.5559334 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(43).vir Trojan.GenericKD.3228878 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(42).vir DeepScan:Generic.Nymaim.E.61E542AD Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(2).vir Trojan.Inject.VB.DA Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(33).vir Exploit.SWF.BZ Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(15).vir Trojan.GenericKD.3343480 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(39).vir Trojan.GenericKD.4268248 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(49).vir Trojan.GenericKD.31117734 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(48).vir Trojan.GenericKD.4778454 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(12).vir Trojan.Bedep.Gen.1 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(28).vir Gen:Suspicious.Cloud.8.wu4@aqNYN7n Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(46).vir Trojan.Bedep.Gen.1 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(8).vir Trojan.Agent.BVYZ Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(18).vir Trojan.Ransom.Cerber.QZ Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(36).vir Trojan.GenericKD.40315200 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(35).vir Trojan.GenericKD.5561098 Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(9).vir Trojan.Agent.CFSB Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(19).vir Trojan.Agent.CFJZ Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(37).vir Trojan.Agent.BYSS Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(21).vir Trojan.Agent.BYSP Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(31).vir=>ORCAMEN00017ODB23102017414478005410000048705.exe Gen:Trojan.Heur2.LPTKIW@bGGsc@nQb Deleted
C:\Users\Administrator\Desktop\VirusSamples_58\Samp(1).vir Trojan.RanSerKD.4048950 Deleted

双击：
检测到文件 c:\users\administrator\desktop\virussamples_58\samp(6).exe 已被感染病毒Gen:Suspicious.Cloud.8.gy0@aKYMgziU,已移动到隔离区. 我们建议你运行全盘扫描，以确保你的系统是安全的.
检测到文件 c:\users\administrator\desktop\virussamples_58\samp(22).exe 已被感染病毒Gen:Suspicious.Cloud.8.Bq0@aWEfUCci,已移动到隔离区. 我们建议你运行全盘扫描，以确保你的系统是安全的.
检测到文件 c:\users\administrator\desktop\virussamples_58\virussamples_58m\samp(3)m.exe 已被感染病毒Gen:Suspicious.Cloud.8.nmLfa4CUo9ei,已移动到隔离区. 我们建议你运行全盘扫描，以确保你的系统是安全的.
ATD杀：
Samp 4，7，26，30，5M，6M，7M，19M，21M，25M，26M，27M，31M，37M，38M，39M
剩余样本双击结果：
Samp 3，10，11，13，17，20，27，40，44，45，4M，9M，10M，11M，14M，18M，22M，30M，33M，36M无法运行
Samp 14，24 ,12M miss
Total：65/89 73.03%

清道夫900

killmatt01 发表于 2018-8-30 22:09
传言是改进了杀毒组件还是咋滴

没听说啊   不知道忽然查杀就上来了

Llano_心情

瑞星安全云终端
S: 38/50，M: 9/39，Total: 47/89

社区2.0（rdm+）
S: 42/50，M: 17/39，Total: 59/89

社区3.0
S: 35/50，M: 23/39，Total: 58/89

ML
S: 34/50，M: 15/39，Total: 49/89

所有社区一起
S: 45/50，M: 31/39，Total: 76/89

AllureLove

360杀毒:
S:47/50
M:31/39
Total:78/89 7.6%

www-tekeze

HEMM 发表于 2018-8-31 01:21
S: 39/50，M: 36/39，Total: 75/89

WD 云 高阻止级别，监控加扫描，有自动上传，不知道有没有修复，没 ...

大佬出关了，欢迎。。

www-tekeze

Llano_心情 发表于 2018-8-31 09:06
瑞星安全云终端
S: 38/50，M: 9/39，Total: 47/89

所有社区一起，M: 31/39，三者报的差异还是比较大，因为最高的也才M: 23/39 。

www-tekeze

静影沉璧 发表于 2018-8-31 07:32
迟到的BD2019：
M：15/39
C:%users\Administrator\Desktop\VirusSamples_58\VirusSamples_58M\Samp(13)M. ...

BD这次不咋的，不双击的话才32+15=47，M: 15/39明显不行，而22楼的WD是36/39 。

双击无法运行是因为这批的dll比较多 。。