精睿样本测试（15.8.6）

ＨonEy

360卫士17个 avast    ↓

ericdj

wenshui1013 发表于 2015-8-6 11:38
EAV除了查杀，我感觉一无是处==日志我清除了==

好吧~~~

其实，我觉得，TP最大的特色，也是查杀~~~

wenshui1013

ericdj 发表于 2015-8-6 12:00
好吧~~~

其实，我觉得，TP最大的特色，也是查杀~~~

是啊，毕竟是大杀器。。

aboringman

AVIRA kill 28 files and fix 1 file.
[mw_shl_code=css,true]Begin scan in 'C:\Documents and Settings\Administrator\桌面\2015.8.6'
C:\Documents and Settings\Administrator\桌面\2015.8.6\03.vir
  [DETECTION] Is the TR/Crypt.Xpack.162301 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\07.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\08.vir
  [DETECTION] Contains code of the WM/Agent.325 Word macro virus
C:\Documents and Settings\Administrator\桌面\2015.8.6\13.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\14.vir
  [DETECTION] Contains code of the W32/Chir.B Windows virus
C:\Documents and Settings\Administrator\桌面\2015.8.6\16.vir
  [DETECTION] Is the TR/Crypt.Xpack.43765 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\17.vir
    [0] Archive type: RAR
    --> scan copy0092.exe
        [DETECTION] Is the TR/AD.NetInject.M.1 Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.6\19.vir
  [DETECTION] Contains code of the WM/Agent.ahj Word macro virus
C:\Documents and Settings\Administrator\桌面\2015.8.6\20.vir
  [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\23.vir
    [0] Archive type: ZIP
    --> dhl_paket_995411302641991__ID__472373355883106HZO___GG_H__L05_06_2015___LCH07_17_15.exe
        [DETECTION] Is the TR/Crypt.Xpack.16319 Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.6\24.vir
    [0] Archive type: RAR
    --> CoffeeEnt\CoffeeEnt 2.1(解密pdg工具)\CoffeeEnt 2.1.0\CoffeeEnt 2.1.0.exe
        [DETECTION] Is the TR/Black.Gen2 Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.6\25.vir
  [DETECTION] Contains virus patterns of Adware ADWARE/DealPly.A.482
C:\Documents and Settings\Administrator\桌面\2015.8.6\28.vir
  [DETECTION] Contains code of the WM/Dldr.Agent.ztl Word macro virus
C:\Documents and Settings\Administrator\桌面\2015.8.6\29.vir
  [DETECTION] Contains code of the WM/Agent.yfuy Word macro virus
C:\Documents and Settings\Administrator\桌面\2015.8.6\30.vir
    [0] Archive type: ZIP
    --> Dhl_Status_zu_Sendung_756632610______ID___HK___A_C06__KMS03__06__2015___WAVNI08_14_15.exe
        [DETECTION] Is the TR/Spy.Emotet.knoa Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.6\31.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\33.vir
  [DETECTION] Is the TR/Special.8704.3 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\35.vir
  [DETECTION] Is the TR/Kazy.207984.1 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\37.vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
C:\Documents and Settings\Administrator\桌面\2015.8.6\38.vir
  [DETECTION] Is the TR/AD.Ranbyus.M Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\39.vir
    [0] Archive type: Inno Setup
    --> {app}\DoNotSpy10.exe
        [DETECTION] Is the TR/Confuser.398848.4 Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.6\40.vir
  [DETECTION] Contains code of the ANDROID/Hobt.A.3 virus
C:\Documents and Settings\Administrator\桌面\2015.8.6\41.vir
    [0] Archive type: CAB (Microsoft)
    --> browne_dalton_l_insurance_broker_ltd.scr
        [DETECTION] Is the TR/Dldr.Agent.aangvq Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.6\42.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\44.vir
  [DETECTION] Contains code of the WM/Agent.21359 Word macro virus
C:\Documents and Settings\Administrator\桌面\2015.8.6\45.vir
  [DETECTION] Is the TR/Crypt.ZPACK.14992 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\46.vir
  [DETECTION] Is the TR/Andromeda.18213925 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.6\49.vir
  [DETECTION] Contains recognition pattern of the WORM/Conficker.Z.30 worm
C:\Documents and Settings\Administrator\桌面\2015.8.6\50.vir
    [0] Archive type: ZIP
    --> New_Order#025.scr
        [DETECTION] Is the TR/Dropper.MSIL.179495 Trojan
        [WARNING]   Infected files in archives cannot be repaired

Beginning disinfection:
[ERROR] RepairMalware: Not able to Repair Malware ADWARE/DealPly.A.482
C:\Documents and Settings\Administrator\桌面\2015.8.6\50.vir
  [DETECTION] Is the TR/Dropper.MSIL.179495 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '51aa5c73.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\49.vir
  [DETECTION] Contains recognition pattern of the WORM/Conficker.Z.30 worm
  [NOTE]      The file was moved to the quarantine directory under the name '493d73ed.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\46.vir
  [DETECTION] Is the TR/Andromeda.18213925 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '1b622902.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\45.vir
  [DETECTION] Is the TR/Crypt.ZPACK.14992 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '7d5566c3.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\44.vir
  [DETECTION] Contains code of the WM/Agent.21359 Word macro virus
  [NOTE]      The file was moved to the quarantine directory under the name '38d14bfc.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\42.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '47ca79a3.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\41.vir
  [DETECTION] Is the TR/Dldr.Agent.aangvq Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '0b7255ea.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\40.vir
  [DETECTION] Contains code of the ANDROID/Hobt.A.3 virus
  [NOTE]      The file was moved to the quarantine directory under the name '776a15bb.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\39.vir
  [DETECTION] Is the TR/Confuser.398848.4 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '5a303acf.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\38.vir
  [DETECTION] Is the TR/AD.Ranbyus.M Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '43580154.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\37.vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
  [NOTE]      The file was moved to the quarantine directory under the name '2f042d63.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\35.vir
  [DETECTION] Is the TR/Kazy.207984.1 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '5ebd14f4.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\33.vir
  [DETECTION] Is the TR/Special.8704.3 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '50a7240d.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\31.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '158e5d4d.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\30.vir
  [DETECTION] Is the TR/Spy.Emotet.knoa Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '1c8559e7.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\29.vir
  [DETECTION] Contains code of the WM/Agent.yfuy Word macro virus
  [NOTE]      The file was moved to the quarantine directory under the name '44c440b7.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\28.vir
  [DETECTION] Contains code of the WM/Dldr.Agent.ztl Word macro virus
  [NOTE]      The file was moved to the quarantine directory under the name '6830397a.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\25.vir
  [DETECTION] Contains virus patterns of Adware ADWARE/DealPly.A.482
  [NOTE]      The file was moved to the quarantine directory under the name '56ce59a6.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\24.vir
  [DETECTION] Is the TR/Black.Gen2 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '35c072d6.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\23.vir
  [DETECTION] Is the TR/Crypt.Xpack.16319 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '130832ca.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\20.vir
  [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '219c4952.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\19.vir
  [DETECTION] Contains code of the WM/Agent.ahj Word macro virus
  [NOTE]      The file was moved to the quarantine directory under the name '2bd96217.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\17.vir
  [DETECTION] Is the TR/AD.NetInject.M.1 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '148a0650.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\16.vir
  [DETECTION] Is the TR/Crypt.Xpack.43765 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '6aa60a70.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\14.vir
  [DETECTION] Contains code of the W32/Chir.B Windows virus
  [WARNING]   The file could not be repaired!
  [NOTE]      The file is scheduled for deleting after reboot.
  [NOTE]      It is recommended to restart your computer in order to finish the repair.
C:\Documents and Settings\Administrator\桌面\2015.8.6\13.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '3fde0eb8.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\08.vir
  [DETECTION] Contains code of the WM/Agent.325 Word macro virus
  [NOTE]      The file was moved to the quarantine directory under the name '32487f95.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\07.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '2e156b9d.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.6\03.vir
  [DETECTION] Is the TR/Crypt.Xpack.162301 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '1fc62657.qua'!


End of the scan: 2015年8月6日  14:02
Used time: 00:11 Minute(s)

The scan has been done completely.

      1 Scanned directories
   1478 Files were scanned
     29 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      0 Files were deleted
      0 Viruses and unwanted programs were repaired
     28 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
   1449 Files not concerned
     36 Archives were scanned
      8 Warnings
     29 Notes
[/mw_shl_code]

神迹般存在

KIS killed 25X, fixed 10X.

Hertz