样本集奉上_79 (10.18)

ziyerain2015

360扫描KILL 43/50=86%

YU2711

Trend Micro
27/30

lyf1134

mcafee
kill 11
修复6

c/mm

AVG


剩余

ATP_synthase

余25，其中修复11x
C:\Users\\Desktop\VirusSamples_79\7i3RE598A1H4Y9X9Tikz.vir.zip=>bFbiYcS7T7flGX0.dll
Trojan.GenericKD.1999524
Deleted
C:\Users\\Desktop\VirusSamples_79\vp61a77M9ipX5Hi1GFBI.js
Script.SWF.C185
Deleted
C:\Users\\Desktop\VirusSamples_79\E0Gr4Jd27GEtRaha1eq3.vir.zip=>naqmjxbg270.dll
Gen:Variant.Zusy.106715
Deleted
C:\Users\\Desktop\VirusSamples_79\K39SSX7iMG7pftX9bGm4.vir.zip
Exploit.Agent.IA
Deleted
C:\Users\\Desktop\VirusSamples_79\yXSBe3s19TBnrHI2hGR1.vir.zip=>sadfrw.dll
Gen:Variant.MSILPerseus.6518
Deleted
C:\Users\\Desktop\VirusSamples_79\y3p5GE0Cs2Gb17tV52Mg.vir.zip=>asdgsd.dll
Gen:Variant.MSILPerseus.115292
Deleted
C:\Users\\Desktop\VirusSamples_79\hiGN50hZpl64OI0Fn3VI.vir.zip=>zhuitel542.dll
Trojan.Generic.11886833
Deleted
C:\Users\\Desktop\VirusSamples_79\nuJKG85b38aG9M550EsC.js
Script.SWF.C111
Deleted
C:\Users\\Desktop\VirusSamples_79\qQYeqUDp24FxBt0P2781.vir.zip=>xmkuncp95.dll
Exploit.Agent.DC
Deleted
C:\Users\\Desktop\VirusSamples_79\q9y4ICGhy09mN9BKt2vh.js
Script.SWF.C158
Deleted
C:\Users\\Desktop\VirusSamples_79\BwLykf24OUn2kw1I4N57.vir.zip
Exploit.Agent.HZ
Deleted
C:\Users\\Desktop\VirusSamples_79\sZ589285JnQ9hB21BYW0.vir.zip
Exploit.Agent.JG
Deleted
C:\Users\\Desktop\VirusSamples_79\m5eF3K8lbyueSlVanMQ8.js
Java.Trojan.GenericGB.347
Deleted
C:\Users\\Desktop\VirusSamples_79\517SMFwl0LQIt4JAUf12.vir.zip=>AppManifest.xaml
Trojan.Script.602996
Deleted
C:\Users\\Desktop\VirusSamples_79\qft9nhYm0uRkq72Wjtop.vir.zip=>cbdddssT.dll
Trojan.Agent.BEZH
Deleted
C:\Users\\Desktop\VirusSamples_79\52W445Lfyq8IKvpj59u3.js
Script.SWF.C111
Deleted
C:\Users\\Desktop\VirusSamples_79\GT09J9x74hSysiw2TjR6.js
Java.Trojan.GenericGB.377
Deleted
C:\Users\\Desktop\VirusSamples_79\Lh031gx27c0V6Aa6cjpP.vir.zip
Exploit.Agent.II
Deleted
C:\Users\\Desktop\VirusSamples_79\2XvnBvv78S38uT7TK91U.vir.zip=>Preloader.dll
Exploit.MSIL.CVE-2013-0074.A
Deleted
C:\Users\\Desktop\VirusSamples_79\jrP66T8j8GD4yFb7K12M.vir.zip
Exploit.Agent.IG
Deleted
C:\Users\\Desktop\VirusSamples_79\M16tpe32HbtjkLpYh387.vir.zip=>aAdew3fe3fe.dll
Gen:Variant.Kazy.466539
Deleted
C:\Users\\Desktop\VirusSamples_79\f6brE9BH60TMDqTa1cF0.vir.zip=>asdgsd.dll
Gen:Variant.Zusy.93206
Deleted
C:\Users\\Desktop\VirusSamples_79\KzA6m15P5261E3Lk0JSz.js
Java.Trojan.Agent.N
Deleted
C:\Users\\Desktop\VirusSamples_79\L5442j6B0OFe4qNv2k97.vir.zip
Exploit.Agent.JS
Deleted
C:\Users\\Desktop\VirusSamples_79\y3p5GE0Cs2Gb17tV52Mg.vir.zip=>AppManifes1.xaml
Trojan.Script.614328
Deleted
C:\Users\\Desktop\VirusSamples_79\5UNhd4aJCwebVN2Eu601.vir.zip
Exploit.Agent.HQ
Deleted
C:\Users\\Desktop\VirusSamples_79\FLfr1OTo5lf9wEuqZ0pA.js
Java.Trojan.GenericGB.328
Deleted
C:\Users\\Desktop\VirusSamples_79\FWXA8TKCY6I0pFU0XQI0.vir.zip
Exploit.Agent.KR
Deleted
C:\Users\\Desktop\VirusSamples_79\y3p5GE0Cs2Gb17tV52Mg.vir.zip=>AppManifest.xaml
Trojan.Script.614328
Deleted
C:\Users\\Desktop\VirusSamples_79\c2hN2T7rxxqTIYMOd64w.js
Exploit.SWF.Agent.FD
Deleted
C:\Users\\Desktop\VirusSamples_79\f6brE9BH60TMDqTa1cF0.vir.zip=>AppManifest.xaml
Trojan.Script.614328
Deleted
C:\Users\\Desktop\VirusSamples_79\5VpTVc1BoR58w3AJ3914.vir.zip
Exploit.Agent.IR
Deleted
C:\Users\\Desktop\VirusSamples_79\6RNFJy6U0oXxnN8Ja44J.vir.zip=>pvisngbw369.dll
Gen:Variant.Zusy.110934
Deleted
C:\Users\\Desktop\VirusSamples_79\kAe0u4cnAuIXp8uiz66q.vir.zip
Exploit.Agent.IK
Deleted
C:\Users\\Desktop\VirusSamples_79\60ryLt0ERT5K1823oUEj.vir.zip
Exploit.Agent.IM
Deleted
C:\Users\\Desktop\VirusSamples_79\64Rlc148cSAtLGF7ob0T.vir.zip
Exploit.Agent.JW
Deleted
C:\Users\\Desktop\VirusSamples_79\8Z5GL1frZgSVZV5o8jmt.vir.zip=>jillrez.dll
Gen:Variant.Zusy.93321
Deleted
C:\Users\\Desktop\VirusSamples_79\5eo8J10e01NAH2GUNkAY.js
Java.Exploit.CVE-2013-2463.H
Deleted
C:\Users\\Desktop\VirusSamples_79\517SMFwl0LQIt4JAUf12.vir.zip=>elrhkto23.dll
Trojan.GenericKD.6019324
Deleted
C:\Users\\Desktop\VirusSamples_79\6M3Zdfg3k5my4196Fd7q.js
Exploit.SWF.CG
Deleted

con16

comodo 掃描
(47/50) 94%

www-tekeze

@火绒工程师    火绒清空，会不会有误报？    并且没一个修复的。。。
@智量官方    智量miss all，压缩档不报也罢，但脚本全miss就说不过去了。。

Eset小粉絲

好像不是JavaScript脚本吧？我放入自动识别文件后辍全部是CLASS文件

www-tekeze

Eset小粉絲 发表于 2018-10-18 23:29
好像不是JavaScript脚本吧？我放入自动识别文件后辍全部是CLASS文件

额，我用的工具识别不了，改js后也可以运行，会调用很多dll，你用的哪个工具，能不能传一个上来？

klub

卡巴斯基的个人版可以搞的再激进些，如启发调的高些，太稳健就容易显得平庸