精睿样本测试（15.8.4）

温馨小屋

地址：

本帖隐藏的内容
http://kuai.xunlei.com/d/zuh.ATdIt-y-VQQAb62

http://pan.baidu.com/s/1qWHZzzA 提取密码  wh98
   
密码：bbs.vc52.cn
数量：50

温馨小屋

bitdefender 2016
杀29个，修复一个
AVC：杀16，20，30，19，06，49，36，05
24竟然是helloworld！

aboringman

AVIRA kill 28 files and fix 1 files（failed）
[mw_shl_code=css,true]Begin scan in 'C:\Documents and Settings\Administrator\桌面\2015.8.4'
C:\Documents and Settings\Administrator\桌面\2015.8.4\01.vir
  [DETECTION] Is the TR/Dropper.MSIL.58929 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\02.vir
    [0] Archive type: ZIP
    --> N de Factura 7485_Forma de pago.docx_.exe
        [DETECTION] Is the TR/AD.Zbot.Y.98 Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.4\03.vir
  [DETECTION] Is the TR/Crypt.Xpack.201678 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\04.vir
  [DETECTION] Is the TR/Crypt.Xpack.35509 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\05.vir
  [DETECTION] Contains virus patterns of Adware ADWARE/Adload.4832648.1
C:\Documents and Settings\Administrator\桌面\2015.8.4\07.vir
  [DETECTION] Is the TR/Crypt.ZPACK.54809 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\08.vir
  [DETECTION] Is the TR/Dldr.Upatre.NE Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\09.vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Sinowal.ujy back-door program
C:\Documents and Settings\Administrator\桌面\2015.8.4\10.vir
  [DETECTION] Contains code of the ANDROID/Spy.Banker.AZ.Gen virus
C:\Documents and Settings\Administrator\桌面\2015.8.4\12.vir
  [DETECTION] Is the TR/Crypt.Xpack.31909 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\13.vir
  [DETECTION] Is the TR/ArchSMS.mcw Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\14.vir
  [DETECTION] Is the TR/Crypt.ZPACK.55795 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\15.vir
  [DETECTION] Is the TR/Dropper.MSIL.178349 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\16.vir
  [DETECTION] Contains patterns of software PUA/InstallCore.Gen7
C:\Documents and Settings\Administrator\桌面\2015.8.4\18.vir
  [DETECTION] Is the TR/Kryptik.avp.8 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\23.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
C:\Documents and Settings\Administrator\桌面\2015.8.4\26.vir
  [DETECTION] Is the TR/Agent.491520.162 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\27.vir
  [DETECTION] Is the TR/AD.Bladabindi.Y.967 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\32.vir
  [DETECTION] Contains code of the W32/Parite Windows virus
C:\Documents and Settings\Administrator\桌面\2015.8.4\34.vir
  [DETECTION] Is the TR/Dropper.MSIL.36284 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\35.vir
  [DETECTION] Is the TR/AD.Tescrypt.M.10 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\37.vir
    [0] Archive type: ZIP
    --> revslider/pbot.php
        [DETECTION] Contains recognition pattern of the PHP/PBot.W PHP virus
        [WARNING]   Infected files in archives cannot be repaired
    --> revslider/joss.php
        [DETECTION] Contains recognition pattern of the PHP/WebShell.A.5 PHP virus
        [WARNING]   Infected files in archives cannot be repaired
    --> revslider/joss.phpbot.php
        [DETECTION] Contains recognition pattern of the PHP/WebShell.A.4 PHP virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.4\40.vir
    [0] Archive type: ZIP
    --> specification.scr
        [DETECTION] Is the TR/Crypt.Xpack.28382 Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.4\42.vir
  [DETECTION] Is the TR/Injector.398336.4 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\44.vir
  [DETECTION] Is the TR/AD.Teerac.Y.20 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\46.vir
  [DETECTION] Is the TR/Dropper.MSIL.178227 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.4\47.vir
    [0] Archive type: ZIP
    -->     1.rar.exe
        [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.4\50.vir
  [DETECTION] Is the TR/Injector.401408.11 Trojan

Beginning disinfection:
[ERROR] RepairMalware: Not able to Repair Malware PUA/InstallCore.Gen7
[ERROR] RepairMalware: Not able to Repair Malware ADWARE/Adload.4832648.1
C:\Documents and Settings\Administrator\桌面\2015.8.4\50.vir
  [DETECTION] Is the TR/Injector.401408.11 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '5147b12d.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\47.vir
  [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '49d09e81.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\46.vir
  [DETECTION] Is the TR/Dropper.MSIL.178227 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '1b8fc468.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\44.vir
  [DETECTION] Is the TR/AD.Teerac.Y.20 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '7db88ba4.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\42.vir
  [DETECTION] Is the TR/Injector.398336.4 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '383ca698.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\40.vir
  [DETECTION] Is the TR/Crypt.Xpack.28382 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '472794ff.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\37.vir
  [DETECTION] Contains recognition pattern of the PHP/WebShell.A.4 PHP virus
  [NOTE]      The file was moved to the quarantine directory under the name '0b9fb8be.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\35.vir
  [DETECTION] Is the TR/AD.Tescrypt.M.10 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '7787f8e0.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\34.vir
  [DETECTION] Is the TR/Dropper.MSIL.36284 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '5addd7ac.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\32.vir
  [DETECTION] Contains code of the W32/Parite Windows virus
  [NOTE]      The file was moved to the quarantine directory under the name '43b5ec34.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\27.vir
  [DETECTION] Is the TR/AD.Bladabindi.Y.967 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '2fe9c009.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\26.vir
  [DETECTION] Is the TR/Agent.491520.162 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '5e50f99d.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\23.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
  [WARNING]   The file could not be repaired!
  [NOTE]      The file is scheduled for deleting after reboot.
  [NOTE]      It is recommended to restart your computer in order to finish the repair.
C:\Documents and Settings\Administrator\桌面\2015.8.4\18.vir
  [DETECTION] Is the TR/Kryptik.avp.8 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '504ac958.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\16.vir
  [DETECTION] Contains patterns of software PUA/InstallCore.Gen7
  [NOTE]      The file was moved to the quarantine directory under the name '1563b018.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\15.vir
  [DETECTION] Is the TR/Dropper.MSIL.178349 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '1c68b4bc.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\14.vir
  [DETECTION] Is the TR/Crypt.ZPACK.55795 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '4429add5.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\13.vir
  [DETECTION] Is the TR/ArchSMS.mcw Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '68ddd418.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\12.vir
  [DETECTION] Is the TR/Crypt.Xpack.31909 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '5623b4c1.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\10.vir
  [DETECTION] Contains code of the ANDROID/Spy.Banker.AZ.Gen virus
  [NOTE]      The file was moved to the quarantine directory under the name '352d9fb4.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\09.vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Sinowal.ujy back-door program
  [NOTE]      The file was moved to the quarantine directory under the name '13e5dfa6.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\08.vir
  [DETECTION] Is the TR/Dldr.Upatre.NE Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '2171a404.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\07.vir
  [DETECTION] Is the TR/Crypt.ZPACK.54809 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '2b348f7b.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\05.vir
  [DETECTION] Contains virus patterns of Adware ADWARE/Adload.4832648.1
  [NOTE]      The file was moved to the quarantine directory under the name '1467eb3c.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\04.vir
  [DETECTION] Is the TR/Crypt.Xpack.35509 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '6a4be714.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\03.vir
  [DETECTION] Is the TR/Crypt.Xpack.201678 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '3f33e3de.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\02.vir
  [DETECTION] Is the TR/AD.Zbot.Y.98 Trojan
  [NOTE]      The detection was classified as suspicious.
  [NOTE]      The file was moved to the quarantine directory under the name '32a592f5.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.4\01.vir
  [DETECTION] Is the TR/Dropper.MSIL.58929 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '2ef886fd.qua'!


End of the scan: 2015年8月4日  09:30
Used time: 00:10 Minute(s)

The scan has been done completely.

      1 Scanned directories
     92 Files were scanned
     30 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      0 Files were deleted
      0 Viruses and unwanted programs were repaired
     27 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
     62 Files not concerned
     16 Archives were scanned
      7 Warnings
     28 Notes
[/mw_shl_code]

z2009

bullguard  杀29
后管家  杀2
共余19

温馨小屋

NS
杀21个，修复3个

欧阳宣

下次bd留给我测好不好

steven_lzs

EAV杀36 余14

白露为霜

电脑管家占楼

【扫描信息】

开始时间:2015-8-4 16:52:01
扫描用时:00:00:05
扫描类型:指定位置杀毒
扫描引擎:管家云查杀引擎 管家反病毒引擎 管家系统修复引擎
扫描状态:扫描完成


【扫描结果】

扫描文件数:50
发现风险数:16
已处理风险数:16


---------------------
2015-8-4 16:52:08 MD5:2d693b41f9be9c9d9034418cc216965d F:\旋风下载\2015.8.4\2015.8.4\44.vir [Win32.Backdoor.Androm.Htcr]  [删除成功]
2015-8-4 16:52:09 MD5:ab6bfabe3a411acb3143b096091f559b F:\旋风下载\2015.8.4\2015.8.4\32.vir [Virus.Win32.Parite.a]  [删除成功]
2015-8-4 16:52:31 MD5:7a65eb2645929b7f0e0e240117c7e3da F:\旋风下载\2015.8.4\2015.8.4\01.vir [Msil.Trojan.Disfa.Aisb]  [删除成功]
2015-8-4 16:52:31 MD5:4773d51e8856351464132b5de7e31589 F:\旋风下载\2015.8.4\2015.8.4\42.vir [Win32.Trojan.Yakes.Pdcl]  [删除成功]
2015-8-4 16:52:32 MD5:ab4f1dbe0ce781ae69dc4cfc8857a483 F:\旋风下载\2015.8.4\2015.8.4\23.vir [Trojan.Win32.Agent.spy]  [删除成功]
2015-8-4 16:52:32 MD5:f3e376f289d7a063cc1e1ba94ad26a1a F:\旋风下载\2015.8.4\2015.8.4\12.vir [Win32.Trojan.Generic.Eeqt]  [删除成功]
2015-8-4 16:52:32 MD5:9b50284cd5d95d643612c68fd56654d9 F:\旋风下载\2015.8.4\2015.8.4\34.vir [Win32.Trojan.Generic.Hupc]  [删除成功]
2015-8-4 16:52:33 MD5:859df4bed5d7031b91279cbab764a322 F:\旋风下载\2015.8.4\2015.8.4\08.vir [Win32.Trojan-downloader.Upatre.Eaxh]  [删除成功]
2015-8-4 16:52:33 MD5:158f34c1a71981ce72f95e5e3d08ba06 F:\旋风下载\2015.8.4\2015.8.4\27.vir [Win32.Trojan.Generic.Dxxf]  [删除成功]
2015-8-4 16:52:33 MD5:ef6555fbca568adbba06bb4b7979d3c8 F:\旋风下载\2015.8.4\2015.8.4\07.vir [Win32.Trojan.Generic.Anfp]  [删除成功]
2015-8-4 16:52:34 MD5:a85d94cd80c8ca02a488ce910d2083ff F:\旋风下载\2015.8.4\2015.8.4\18.vir [Win32.Trojan-qqpass.Qqrob.Lmkr]  [删除成功]
2015-8-4 16:52:34 MD5:c2ef9dae276f64f892772f508aaf6d25 F:\旋风下载\2015.8.4\2015.8.4\26.vir [Win32.Packed.Black.Szln]  [删除成功]
2015-8-4 16:52:34 MD5:ed7a1a848b63c79d2c492a2a17012543 F:\旋风下载\2015.8.4\2015.8.4\03.vir [Win32.Trojan.Aura.Amvy]  [删除成功]
2015-8-4 16:52:34 MD5:7f055195a2072b6fdd942f365c11fb5e F:\旋风下载\2015.8.4\2015.8.4\46.vir [Win32.Trojan.Fakedoc.Auto]  [删除成功]
2015-8-4 16:52:35 MD5:0f82964cf39056402ee2de9193635b34 F:\旋风下载\2015.8.4\2015.8.4\09.vir [Win32.Backdoor.Sinowal.Iso]  [删除成功]
2015-8-4 16:52:35 MD5:e00f039f0dc4a97ce097b253f644fab2 F:\旋风下载\2015.8.4\2015.8.4\16.vir [Win32.Adware.Bp-installer.Ecbm]  [删除成功]
---------------------

白露为霜

欧阳宣 发表于 2015-8-4 09:22
下次bd留给我测好不好

好的啊你在用bd啊

欧阳宣

root1605 发表于 2015-8-4 09:27
好的啊你在用bd啊

美系在win10上会出问题，bd暂时没有

但是要忍受莫名其妙的卡网