【开放测试】卡饭病毒样本包 第三十期 20181226-27

英仔

测试环境：WIN10 1809  64
测试产品： secureaplus
病毒库版本：20181227
测试项目：扫描
测试配置：apex高敏
结果：扫描（25/39） = 总计 （/）%

英仔

测试环境：WIN10 1809  64
测试产品： 費尔
病毒库版本：20181227
测试项目：扫描
测试配置：高敏
结果：扫描（11/39） = 总计 （/）%

记录微笑

萧萧小 发表于 2018-12-27 19:27
测试环境：WIN10  虚拟机
测试产品：BD 2019 中文版
病毒库版本：20181227

好像很多杀软都这样回滚，只是速度比bd快很多。

七游

测试环境：WIN10 1803  64实机

测试产品：360 Total Security Essential

病毒库版本：20181227

测试项目：扫描

测试配置：标准+bd+小红伞

测试时间：2018-12-27 20:47:07

结果：扫描（32/39） +上传（2/2）= 总计 （34/39）87.18%

忘了等监控
这次360TSE成绩还行

www-tekeze

测试环境：WIN7  64位  实机
测试产品：红伞，AFA
病毒库版本：8.3.52.150，20181227
测试项目：扫描、双击
测试配置：标准
结果：首扫（32/39），二扫（2/7），Total：34/39，87.2%

补充：剩余双击无反应。

aice7837

测试环境：WIN7 SP1  64 虚拟机
测试产品：NIS
病毒库版本：20181227
测试项目：扫描+执行
测试配置：主动
结果：扫描（28/39） + 执行（1/39）= 总计   74%

测试时升级病毒库非常慢，网络可能连接不好，所以可能测试数据并不准确，30楼也测了，请以30楼为准

心醉咖啡

测试环境：win10 1809
测试产品：毒霸SP5.1
病毒库版本：20181227
测试项目：扫描
测试配置：标准
结果：扫描= 3
日志：

1. 扫描时间：[2018-12-27 21:39:00]
   
2. 扫描用时：[00:00:29]
   
3. 扫描类型：自定义查杀
   
4. 扫描文件总数：135
   
5. 扫描速度：4文件/秒
   
6. 发现威胁：3个
   
7. 清除威胁：3个
   
8. =============================================
   
9. [2018-12-27 21:39:51]
   
10. 威胁：f:\浏览器下载\卡饭病毒样本包 20181226-27\kafan_sample_54090c6616798b06c3e6aa28cfffcebab260bb191b19739c3f393e10ea3cb08a.exe
    
11. 类型：win32.heur.kvm007.a
    
12. 处理方式：删除
    
13. 
    
14. [2018-12-27 21:39:51]
    
15. 威胁：f:\浏览器下载\卡饭病毒样本包 20181226-27\kafan_sample_686720571005c6f2dda47b9242f0b2cf89c1e61f3ce200ce7ee039a48ea20394.exe
    
16. 类型：win32.infected.autoinfector.a.(kcloud)
    
17. 处理方式：修复
    
18. 
    
19. [2018-12-27 21:39:51]
    
20. 威胁：f:\浏览器下载\卡饭病毒样本包 20181226-27\kafan_sample_a141afeef2d4b701134fcaed29ada6e36d38163d921dd4b8cace5dbc6b4a285c.exe
    
21. 类型：win32.heur.kvmh008.a.(kcloud)
    
22. 处理方式：删除
    
23. 
    

复制代码

bbs2811125

EAV 12.1
扫描检测
33/39=84.62%
Version of detection engine: 18610P (20181227)
Date: 2018/12/27  Time: 21:53:39
Scanned disks, folders and files: C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_01a911754c3202540a6fef722ae16afcaadc3dfbfdb8fd01321e3964abe41607.exe - a variant of MSIL/Kryptik.QHB trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_1670bd99e63cc497245f6bd0265dc5278a67856bba50fe568716564f23a7474f.exe » INDIGOROSE » On Startup_1.lua - Win32/Indiloadz.BB trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_1dc46c2e450ab14e173a7d1a0089175ec26f8e0ebfccf401628056563e112861.exe » WINRARSFX » QtHRMS.exe - a variant of Win32/Packed.Themida.BXZ trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_1f2a9cd76bddf47b5885db51ea4269d86c4efb9bef6f0fb59b1af58c12e33294.exe - a variant of Win32/GenKryptik.CVDA trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_1f6f620b2bc24b0c4fb84ca681981f85b312b0ba9d2b9964a6c5aaf2388f8590.exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.DON trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_20350592c41e53224b8a8baf72b379108b06e29f5976421606a8cc35d82b6499.exe - a variant of Win32/Kryptik.GOCU trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_4c1f9e38e852727d96fe53de2e12c5641fcf8c90f554d93dbca056a3d03aebcd.exe - a variant of Win32/GenKryptik.CVET trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_4f92437287885f833f649cf46d134a4110945d7bb49d46ae5e218fd2ca68074c.exe - Win32/Spy.Agent.PMW trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_50f8458fe87456f1e98cf96cbf48996a68a54d2d8dab7a07c9bc3cd60289b1b6.exe » INNO - a variant of Win32/TrojanDownloader.Agent.DRY trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_51abb0fe630daf83cf3817765520fbf4664b7ed076aef6b3151e0dec2615af41.exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.DOP trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_5f3c4034a9e6aae0fc28fe4748ac35cd9d795aaec9f25ae9e683ab3deb830d11.exe » CAB » bits.ps1 - PowerShell/TrojanDropper.Agent.B trojan - deleted
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_5f3c4034a9e6aae0fc28fe4748ac35cd9d795aaec9f25ae9e683ab3deb830d11.exe » CAB » exec.bat - PowerShell/TrojanDropper.Agent.G trojan - deleted
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_65e41bbbb182f89385a22d3cf823ebf7932ab76064b3e113bf0765187a28d034.exe » INNO » {tmp}\sub.res » 7ZIP »  - Incorrect file checksum (CRC); the file is probably password protected.
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_65e41bbbb182f89385a22d3cf823ebf7932ab76064b3e113bf0765187a28d034.exe » INNO » {tmp}\form.res » 7ZIP »  - Incorrect file checksum (CRC); the file is probably password protected.
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_65e41bbbb182f89385a22d3cf823ebf7932ab76064b3e113bf0765187a28d034.exe » INNO » {tmp}\misc.res » 7ZIP »  - Incorrect file checksum (CRC); the file is probably password protected.
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_65e41bbbb182f89385a22d3cf823ebf7932ab76064b3e113bf0765187a28d034.exe » INNO - a variant of Win32/TrojanDropper.Addrop.CH trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_675c2f7c9cda48f13011b23970de9109028b6ade213f3de7692f5f68742aa339.exe - a variant of Win32/GenKryptik.CVCG trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_686720571005c6f2dda47b9242f0b2cf89c1e61f3ce200ce7ee039a48ea20394.exe - Win32/AutoRun.Delf.LV worm - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_6954f0df12990aa6c743dff73ba7f4b72c7b9d29f3af56cb7d13a1920b8e9d4e.exe - a variant of Win32/Kryptik.GODB trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_6b62967dd3b39a23cd3adbb34a67b712ae8a70b41dd110901912332ff9208032.exe - a variant of MSIL/Spy.Agent.AES trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_7d15157197f8bf565c65e5bea7f65eda19cbf52b106258efa3689a9c400d7489.exe - a variant of MSIL/Kryptik.QHB trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_8a412af21221ad26691394d2c5ce3815f9270c101135fc1ba17c0a94bce692a4.exe - a variant of Win32/Injector.ECNU trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_917c36826e35ac6c6680b93f9efb4399bcb22873950cd427f9e3ac3d5ada9b54.exe - a variant of Win32/Kryptik.GODF trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_9d6b14f8d2c57bf52402068db78e43e3dd45c463eab2c976ee079783c1310100.exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.DOP trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_9fd59ba40c26b3161642d5ebb85796b4262e5d5aa5d1e5eceb919b52a8f9b00e.exe - Win32/Filecoder.ED trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_a02c0a211fdcc7402b493c015a1ea541b2d03f2ab1551ba10f7f27a36da04b79.exe - a variant of MSIL/Kryptik.QFJ trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_a0facf1e75a9c95f902ea3f2ab862e444a0b3b3c4ec97981ddacaeff5df53bb6.exe - a variant of Win32/Kryptik.GODR trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_a141afeef2d4b701134fcaed29ada6e36d38163d921dd4b8cace5dbc6b4a285c.exe - Win32/Tofsee.BJ trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_a1c552f893dbbbecb8e697c03059e80eeac8cb5d78c50214f3b7b2bc05cfe1e9.jar » ZIP » foas/druytvh/Thbpeeo.class - a variant of Java/Kryptik.YW trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_a8d2ce6e28d69cf5f54bb1c21a260f6c34a4334f1c2f3814b50ae54663c68963.exe - a variant of Win32/Injector.ECOB trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_a9967c6072f25fdc95499206dc235f57a51c5c00eee7e21bd7793f258d46a092.exe » WINRARSFX » tgp.dat - Win32/Injector.Autoit.CNO trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_a9967c6072f25fdc95499206dc235f57a51c5c00eee7e21bd7793f258d46a092.exe » WINRARSFX » ndr=nal - Win32/Injector.Autoit.DLC trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_b394defef576354378dab00eb69c7108a877a4349fd19557e22619e0671f2d24.exe - a variant of Generik.MXRWMLN trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_b9d782587e9fa0a6f480fe7f452c25d1bd8cad613df714daa43454d2dbeb684f.exe - a variant of Win32/GenKryptik.CVCG trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_d2600eb4efb8155799e57bf685c91e28ba854054b9650a723379489db28fab9b.exe - a variant of Win32/TrojanDropper.Agent.RZS trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_d994f65735bb53dda95f7ab097e59bbd2043f8091d246bc4e21ba55ba6bda764.exe - a variant of Win32/GenKryptik.CVEP trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_ee366a6e3540190ed187c5307c1733a191879b22708e2f7af4c1bea1928e803d.exe - a variant of MSIL/Kryptik.ODI trojan - cleaned by deleting [1]
C:\Users\Administrator\Desktop\卡饭病毒样本包 20181226-27\Kafan_Sample_fe46f18aceec926ec5db5555384aff36e216abc15106501a9cc4076071dccd9a.exe - a variant of Generik.GFTFCAZ trojan - cleaned by deleting [1]
Number of scanned objects: 373
Number of threats found: 35
Number of cleaned objects: 35
Time of completion: 21:54:36  Total scanning time: 57 sec (00:00:57)

Notes:
[1] Object has been deleted as it only contained the virus body.

ziyerain2015

测试环境：WIN7 SP1  64 虚拟机
测试产品：PANDA
病毒库版本：当日
测试项目：扫描
测试配置：标准
结果：扫描（20/39） 51%
日志：

YU2711

测试环境：WIN7 SP1  64 虚拟机
测试产品：NS22
病毒库版本：20181227
测试项目：扫描+执行
测试配置：标准
结果：扫描（28/39） + 执行（5/11）= 总计 （33/39）84.6%
日志：
截图（可选）：