样本包5-16

275751198

http://yunpan.cn/cjzE9dmxu832V （提取码：b0e3）

狐狸糊涂

BD杀17个(监控杀14个,右键杀2个,双击拦截并杀掉一个:第6号),拦截1个(第10号)余2个
双击后再杀第6个

--------------------------------------------

开开心心卖手机

蛋挞杀了17个
[mw_shl_code=xml,true]Virus check with G DATA INTERNET SECURITY
Version 25.1.0.3 (2015/4/7)
Virus signature dated 2015/5/16
Start time: 2015/5/16 13:59:35
Engine(s): Engine A (AVA 25.1583), Engine B (GD 25.5106)
Heuristics: On
Archives: On
System areas: Off
Check rootkits: Off

Analysis performed in full: 2015/5/16 13:59:46
    20 files checked
    17 infected files detected
    0 suspicious files found


Object: 5-16 (11).EXE

        Status: Virus, file deleted
        Virus: Gen:Variant.Zusy.54356 (Engine A)

Object: 5-16 (12).EXE

        Status: Virus, file deleted
        Virus: Gen:Variant.Graftor.185562 (Engine A)

Object: 5-16 (1).EXE

        Status: Junkware (PUP), file removed
        Virus: Gen:Variant.Adware.Graftor.171097 (Engine A)

Object: 5-16 (13).EXE

        Status: Virus, file deleted
        Virus: Gen:Trojan.Heur.dmKfrTAZ9Jobf (Engine A)

Object: 5-16 (14).EXE

        Status: Junkware (PUP), file removed
        Virus: Gen:Application.Heur.uv0@mKUstldO (Engine A)

Object: 5-16 (15).EXE

        Status: Virus, file deleted
        Virus: Gen:Trojan.Heur.xmKfrbg3uljb1 (Engine A)

Object: 5-16 (16).EXE

        Status: Virus, file deleted
        Virus: GenPack:Trojan.Generic.48095 (Engine A)

Object: 5-16 (17).EXE

        Status: Junkware (PUP), file removed
        Virus: Win32.Adware.Mindspark.C (Engine B)

Object: 5-16 (18).EXE

        Status: Virus, file deleted
        Virus: Gen:Variant.Graftor.183799 (Engine A)

Object: 5-16 (19).EXE

        Status: Virus, file deleted
        Virus: Trojan.Generic.14508751 (Engine A)

Archive: 5-16 (2).EXE

        Status: File moved to quarantine
        Virus: GenPack:Generic.Malware.SBE!kdldg.D994DAF1 (Engine A)
Object: (RAR Sfx o)=>照片浏览插件.exe

        Status: Virus detected
        Virus: GenPack:Generic.Malware.SBE!kdldg.D994DAF1

Object: 5-16 (3).EXE

        Status: Virus, file deleted
        Virus: Gen:Variant.Graftor.135946 (Engine A)

Object: 5-16 (20).EXE

        Status: Virus, file deleted
        Virus: Trojan.Generic.14508751 (Engine A)

Object: 5-16 (5).EXE

        Status: Virus, file deleted
        Virus: Gen:Variant.Mikey.11174 (Engine A)

Object: 5-16 (7).EXE

        Status: Virus, file deleted
        Virus: Trojan.Generic.14518570 (Engine A)

Object: 5-16 (8).EXE

        Status: Virus, file deleted
        Virus: Worm.Generic.453752 (Engine A)

Object: 5-16 (9).EXE

        Status: Virus, file deleted
        Virus: Gen:Trojan.Heur.AutoIT.2 (Engine A)
[/mw_shl_code]

XywCloud

BAV Kill 15x

挥泪斩情思

dr.web 监控16X，扫描1X，剩余3x

诸葛亮

火绒11/20
红伞15/20

猥琐大叔

eset剩余4个

欧阳宣

咖啡检测12个。
[mw_shl_code=html,true]5/16/2015        5:14:58 PM        "E:\Virus\samples\5-16 (9).EXE"        "W32/YahLover.worm.gen"        "1"

5/16/2015        5:14:58 PM        "E:\Virus\samples\5-16 (11).EXE"        "PWS-Zbot-FBFS!9FDD619ACB5E"        "2"

5/16/2015        5:14:58 PM        "E:\virus\samples\5-16 (14).EXE"        "Artemis!1C7FF4BFACDD"        "3"

5/16/2015        5:14:58 PM        "E:\Virus\samples\5-16 (16).EXE"        "Artemis!DEEF3F3CC488"        "2"

5/16/2015        5:14:59 PM        "E:\Virus\samples\5-16 (8).EXE"        "W32/Autorun.worm.aaqz"        "2"

5/16/2015        5:14:59 PM        "E:\Virus\samples\5-16 (5).EXE"        "Artemis!006F2DF6E051"        "2"

5/16/2015        5:14:59 PM        "E:\Virus\samples\5-16 (18).EXE"        "Artemis!32989B09EBB3"        "2"

5/16/2015        5:14:59 PM        "E:\Virus\samples\5-16 (7).EXE"        "Artemis!7A93AD64D4F7"        "2"

5/16/2015        5:14:59 PM        "E:\virus\samples\5-16 (13).EXE"        "Artemis!23CA43D99939"        "2"

5/16/2015        5:14:59 PM        "E:\Virus\samples\5-16 (3).EXE"        "Artemis!0DE1F7B6D053"        "1"

5/16/2015        5:14:59 PM        "E:\Virus\samples\5-16 (15).EXE"        "Artemis!471A7998B322"        "2"

5/16/2015        5:14:59 PM        "E:\Virus\samples\5-16 (2).EXE"        "BackDoor-AWQ.svr.gen.a"        "2"

5/16/2015        5:14:59 PM        "E:\Virus\samples\5-16 (2).EXE"        "BackDoor-AWQ.svr.gen.a"        "2"

5/16/2015        5:15:12 PM        "E:\virus\samples\5-16 (14).EXE"        "Artemis!1C7FF4BFACDD"[/mw_shl_code]

这样痴痴爱着你

火绒干掉11X，剩余上报~

mu920450

这样痴痴爱着你 发表于 2015-5-16 17:51
火绒干掉11X，剩余上报~

那个 vbs脚本病毒，才点就保毒，你的没反应吗，病毒怎么回事？