样本集奉上_78 (10.16)

显示全部楼层 · 发表于 2018-10-16 17:48:36

本帖最后由 j2016 于 2018-10-16 17:59 编辑

红伞
杀了43，修复了1个，共 44/50 88%
余下 6个用智量，0

红伞二扫，又杀了3个共47/50 94%

显示全部楼层 · 发表于 2018-10-16 18:06:35

FortiClient监控KILL43，扫描KILL4，共计KILL47/50=94%

显示全部楼层 · 发表于 2018-10-16 18:54:18

Trend Micro

41/50
修复2

显示全部楼层 · 发表于 2018-10-16 19:09:17

sep 43/50

显示全部楼层 · 发表于 2018-10-16 20:55:14

明天试试～～有勒索不大佬～

显示全部楼层 · 发表于 2018-10-16 21:04:05

AVG 剩余7X

显示全部楼层 · 发表于 2018-10-16 21:07:58

BD2019

扫描：46/50
剩余Samp 31 40 42 49

C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(23).vir Gen:Variant.Graftor.Elzob.11324 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(41).vir Trojan.GenericKD.3687913 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(14).vir Gen:Variant.Ransom.Locky.27 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(32).vir Gen:Variant.Symmi.47053 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(50).vir Trojan.Agent.BTRJ Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(5).vir Trojan.GenericKD.6297806 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(6).vir Trojan.Bedep.Gen.1 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(8).vir Trojan.GenericKD.4656686 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(17).vir Trojan.Generic.7640746 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(35).vir Trojan.GenericKD.30356967 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(29).vir Gen:Trojan.Heur2.JP.mmLfaGVigVkI Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(47).vir Trojan.Autoruns.GenericKDS.31163452 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(27).vir Generic.JS.DownloaderAI.C363C2AF Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(45).vir Trojan.GenericKD.40456586 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(4).vir VB:Trojan.VBA.Downloader.ME Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(38).vir Trojan.Ransom.BAO Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(26).vir Trojan.GenericKD.6294932 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(44).vir Gen:Variant.Ursu.29684 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(39).vir Trojan.GenericKD.31271025 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(34).vir Trojan.GenericKD.31077342 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(2).vir Trojan.GenericKD.40415275 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(15).vir Trojan.Generic.8027426 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(33).vir Generic.Nymaim.E.42180412 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(12).vir Trojan.GenericKD.6311903 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(30).vir Script.SWF.C80 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(3).vir Gen:Variant.Symmi.90772 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(13).vir Trojan.GenericKD.30991146 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(7).vir Gen:Variant.Sirefef.912 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(1).vir Gen:Variant.Ursu.29684 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(24).vir Trojan.Bedep.Gen.1 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(22).vir Trojan.AgentWDCR.OUR Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(18).vir Gen:Variant.Kazy.183559 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(36).vir Gen:Variant.Ransom.Sage.30 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(9).vir Gen:Variant.Jaiko.4635 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(28).vir Gen:Variant.Symmi.71475 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(46).vir Win32.Parite.B Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(37).vir DeepScan:Generic.Ransom.GlobeImposter.D83FC2A5 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(19).vir VB:Trojan.VBS.Agent.AQN Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(21).vir Gen:Variant.Razy.132565 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(11).vir Trojan.JS.Agent.KWD Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(10).vir Gen:Variant.Symmi.89944 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(25).vir Gen:Variant.Babar.419 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(43).vir Gen:Variant.Symmi.67136 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(20).vir Trojan.Injector.DCI Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(48).vir Gen:Variant.Razy.85524 Deleted
C:\Users\Administrator.SXCSXC-AJKJJUBR\Desktop\新建文件夹\Samp(16).vir=>At35689574.zip.exe Gen:Variant.Zusy.255627 Deleted

复制代码

显示全部楼层 · 发表于 2018-10-16 21:14:26

McAfee 扫描
修复2 还剩下3个
47/50

显示全部楼层 · 发表于 2018-10-16 21:33:33

lkjx21 发表于 2018-10-16 20:55
明天试试～～有勒索不大佬～

都是收集来的，事先没注意过，刚看了火绒的报毒名，有4个明确报的勒索，另外有6、7个报的混淆器，也有部分可能是勒索。。。明天你自己试下，样本太多我不想双击，累。。。

显示全部楼层 · 发表于 2018-10-16 21:41:36

静影沉璧发表于 2018-10-16 21:07
BD2019

扫描：46/50

#42是js，其它3个都是exe，火绒和智量都报#49 。。。双击下如何。。

[病毒样本] 样本集奉上_78 (10.16)

本帖子中包含更多资源

评分