楼主: 神迹般存在
收起左侧

[病毒样本] 精睿样本测试(15.8.18)

  [复制链接]
HonEy
发表于 2015-8-18 09:35:53 | 显示全部楼层
360杀毒扫描日志

病毒库版本:
扫描时间:2015-08-18 09:25:23
扫描用时:00:00:02
扫描类型:右键扫描
扫描文件总数:50
项目总数:41
清除项目数:41

扫描选项
----------------------
扫描所有文件:否
扫描压缩包:否
发现病毒处理方式:由用户选择处理
扫描磁盘引导区:是
扫描 Rootkit:否
使用云查杀引擎:是
使用QVM人工智能引擎:是
扫描建议修复项:否
常规引擎设置:未使用

扫描内容
----------------------
C:\Users\zhang\Desktop\2015.8.18


白名单设置
----------------------


扫描结果
======================
高危风险项
----------------------
C:\Users\zhang\Desktop\2015.8.18\01.vir        感染型病毒(Win32/Trojan.d74)        已删除
C:\Users\zhang\Desktop\2015.8.18\06.vir        后门程序(Backdoor.Win32.Agent.FT)        已删除
C:\Users\zhang\Desktop\2015.8.18\04.vir        HEUR/QVM11.1.Malware.Gen        已删除
C:\Users\zhang\Desktop\2015.8.18\05.vir        HEUR/QVM17.0.Malware.Gen        已删除
C:\Users\zhang\Desktop\2015.8.18\08.vir        木马程序(Trojan.Win32.FakeLPK.A)        已删除
C:\Users\zhang\Desktop\2015.8.18\02.vir        Dropper.Win32.FakeLPK.F        已删除
C:\Users\zhang\Desktop\2015.8.18\07.vir        感染型病毒(Win32/Backdoor.9b1)        已删除
C:\Users\zhang\Desktop\2015.8.18\10.vir        感染型病毒(Win32/Trojan.Dropper.fae)        已删除
C:\Users\zhang\Desktop\2015.8.18\11.vir        HEUR/QVM20.1.Malware.Gen        已删除
C:\Users\zhang\Desktop\2015.8.18\14.vir        HEUR/QVM03.0.Malware.Gen        已删除
C:\Users\zhang\Desktop\2015.8.18\22.vir        木马程序(Trojan.Win32.VBCode.R)        已删除
C:\Users\zhang\Desktop\2015.8.18\09.vir        感染型病毒(Win32/Trojan.40a)        已删除
C:\Users\zhang\Desktop\2015.8.18\29.vir        Virus.Win32.VirutChangeCall.J        已修复
C:\Users\zhang\Desktop\2015.8.18\16.vir        感染型病毒(Win32/Trojan.21c)        已删除
C:\Users\zhang\Desktop\2015.8.18\17.vir        感染型病毒(Win32/Trojan.313)        已删除
C:\Users\zhang\Desktop\2015.8.18\31.vir        后门程序(Backdoor.Win32.Dark.A)        已删除
C:\Users\zhang\Desktop\2015.8.18\19.vir        感染型病毒(Win32/Trojan.44a)        已删除
C:\Users\zhang\Desktop\2015.8.18\20.vir        感染型病毒(Win32/Trojan.7c7)        已删除
C:\Users\zhang\Desktop\2015.8.18\21.vir        感染型病毒(Win32/Trojan.ead)        已删除
C:\Users\zhang\Desktop\2015.8.18\32.vir        木马程序(Trojan.PSW.Win32.FakeUspAndLpk.B)        已删除
C:\Users\zhang\Desktop\2015.8.18\42.vir        Virus.Win32.VirutChangeEntry.A        已修复
C:\Users\zhang\Desktop\2015.8.18\44.vir        木马程序(Trojan.Win32.FakeLPK.B)        已删除
C:\Users\zhang\Desktop\2015.8.18\45.vir        木马程序(Trojan.Win32.VBCode.R)        已删除
C:\Users\zhang\Desktop\2015.8.18\23.vir        感染型病毒(Win32/Trojan.Spy.e74)        已删除
C:\Users\zhang\Desktop\2015.8.18\24.vir        感染型病毒(Win32/Trojan.4af)        已删除
C:\Users\zhang\Desktop\2015.8.18\25.vir        感染型病毒(Win32/Trojan.d60)        已删除
C:\Users\zhang\Desktop\2015.8.18\30.vir        感染型病毒(Win32/Trojan.e2d)        已删除
C:\Users\zhang\Desktop\2015.8.18\33.vir        感染型病毒(Win32/Trojan.81a)        已删除
C:\Users\zhang\Desktop\2015.8.18\34.vir        感染型病毒(Win32/Trojan.40a)        已删除
C:\Users\zhang\Desktop\2015.8.18\35.vir        HEUR/QVM07.1.Malware.Gen        已删除
C:\Users\zhang\Desktop\2015.8.18\36.vir        感染型病毒(Win32/Trojan.f53)        已删除
C:\Users\zhang\Desktop\2015.8.18\37.vir        感染型病毒(Win32/Trojan.05f)        已删除
C:\Users\zhang\Desktop\2015.8.18\39.vir        HEUR/QVM11.1.Malware.Gen        已删除
C:\Users\zhang\Desktop\2015.8.18\40.vir        HEUR/QVM11.1.Malware.Gen        已删除
C:\Users\zhang\Desktop\2015.8.18\41.vir        Malware.Radar03.Gen        已删除
C:\Users\zhang\Desktop\2015.8.18\46.vir        感染型病毒(Win32/Virus.Downloader.df6)        已删除
C:\Users\zhang\Desktop\2015.8.18\47.vir        HEUR/QVM03.0.Malware.Gen        已删除
C:\Users\zhang\Desktop\2015.8.18\48.vir        HEUR/QVM08.0.Malware.Gen        已删除
C:\Users\zhang\Desktop\2015.8.18\50.vir        HEUR/QVM07.1.Malware.Gen        已删除
C:\Users\zhang\Desktop\2015.8.18\28.vir        后门程序(Backdoor.Win32.Agent.MN)        已删除
C:\Users\zhang\Desktop\2015.8.18\15.vir        Dropper.Win32.FakeLPK.D        已删除 后戳为zip补杀1x
C:\Users\zhang\Desktop\2015.8.18\49.zip=>wallhack.zip=>jtx.asi        HEUR/Malware.QVM25.Gen        已删除 后戳为exe补杀0 最后

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Luca.l
发表于 2015-8-18 09:36:09 | 显示全部楼层
本帖最后由 a1121611810 于 2015-8-18 09:42 编辑

火绒

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
skyboybone
发表于 2015-8-18 09:37:34 | 显示全部楼层

金山开始蹲坑了?那我就撤了
XywCloud
发表于 2015-8-18 09:47:38 | 显示全部楼层
BAV Kill 42x
欧阳宣
头像被屏蔽
发表于 2015-8-18 09:49:21 | 显示全部楼层
本帖最后由 欧阳宣 于 2015-8-18 10:07 编辑

f-secure
算上压缩包威胁一共46个,修复1个。
[mw_shl_code=css,true]结果: 找到 54 恶意软件

Gen:Variant.Zusy.125155 (病毒)
D:\Virus\huge\2015.8.18\09.vir\DOS.exe
Gen:Variant.Barys.10219 (病毒)
D:\Virus\huge\2015.8.18\09.vir\NJPlugin.exe
D:\Virus\huge\2015.8.18\10.vir\Server.exe
D:\Virus\huge\2015.8.18\34.vir 操作: 已隔离
Trojan-Downloader:VBS/Agent.DWFW (病毒)
D:\Virus\huge\2015.8.18\43.vir\Download.vbe
Trojan.GenericKD.2651921 (病毒)
D:\VIRUS\HUGE\2015.8.18\36.VIR
D:\Virus\huge\2015.8.18\36.vir 操作: 已隔离
Gen:Variant.Adware.Graftor (广告软件)
D:\Virus\huge\2015.8.18\48.vir
D:\VIRUS\HUGE\2015.8.18\48.vir 操作: 已隔离
Win32.Virtob.Gen.12 (病毒)
D:\Virus\huge\2015.8.18\06.vir 操作: 已隔离
D:\Virus\huge\2015.8.18\29.vir 操作: 已隔离
D:\Virus\huge\2015.8.18\28.vir 操作: 已隔离
D:\Virus\huge\2015.8.18\42.vir 操作: 已隔离
Gen:Trojan.Heur.VP2.bmKfaStcOcni (病毒)
D:\Virus\huge\2015.8.18\04.vir 操作: 已隔离
Generic.ServStart.2E49DA81 (病毒)
D:\Virus\huge\2015.8.18\01.vir 操作: 已隔离
Trojan.Generic.5094104 (病毒)
D:\Virus\huge\2015.8.18\02.vir 操作: 已隔离
GenPack:Generic.ServStart.60B550CE (病毒)
D:\Virus\huge\2015.8.18\08.vir 操作: 已隔离
Backdoor.Shell.AC (病毒)
D:\Virus\huge\2015.8.18\07.vir 操作: 已隔离
Trojan.Agent.BBPP (病毒)
D:\Virus\huge\2015.8.18\15.vir 操作: 已隔离
W97M.Downloader.XZ (病毒)
D:\Virus\huge\2015.8.18\12.vir 操作: 已杀毒
Gen:Variant.Zusy.116265 (病毒)
D:\Virus\huge\2015.8.18\11.vir 操作: 已隔离
Trojan.Generic.14741561 (病毒)
D:\Virus\huge\2015.8.18\10.vir 操作: 已隔离
Trojan.Generic.14710263 (病毒)
D:\Virus\huge\2015.8.18\14.vir 操作: 已隔离
Gen:Variant.Kazy.587299 (病毒)
D:\Virus\huge\2015.8.18\16.vir 操作: 已隔离
Gen:Variant.Barys.9335 (病毒)
D:\Virus\huge\2015.8.18\19.vir 操作: 已隔离
Trojan:W32/Qhost.WE (病毒)
D:\Virus\huge\2015.8.18\20.vir 操作: 已隔离
Gen:Variant.Kazy.316039 (病毒)
D:\Virus\huge\2015.8.18\21.vir 操作: 已隔离
Gen:Trojan.Heur.bmX@s1ArQPcaf (病毒)
D:\Virus\huge\2015.8.18\22.vir 操作: 已隔离
D:\Virus\huge\2015.8.18\45.vir 操作: 已隔离
Gen:Heur.MSIL.Krypt.2 (病毒)
D:\Virus\huge\2015.8.18\25.vir 操作: 已隔离
Gen:Variant.Graftor.119523 (病毒)
D:\Virus\huge\2015.8.18\23.vir 操作: 已隔离
Gen:Heur.Jintor.1 (病毒)
D:\Virus\huge\2015.8.18\30.vir 操作: 已隔离
Gen:Variant.Agiala.4 (病毒)
D:\Virus\huge\2015.8.18\17.vir 操作: 已隔离
Trojan:W32/SystemHijack.gen!A (病毒)
D:\Virus\huge\2015.8.18\31.vir 操作: 已隔离
Gen:Variant.Barys.7801 (病毒)
D:\Virus\huge\2015.8.18\33.vir 操作: 已隔离
Gen:Variant.Zusy.10749 (病毒)
D:\Virus\huge\2015.8.18\32.vir 操作: 已隔离
Trojan.GenericKD.2644411 (病毒)
D:\Virus\huge\2015.8.18\35.vir 操作: 已隔离
Gen:Variant.Zusy.78189 (病毒)
D:\Virus\huge\2015.8.18\37.vir 操作: 已隔离
Trojan.GenericKD.2651459 (病毒)
D:\Virus\huge\2015.8.18\38.vir 操作: 已隔离
Gen:Trojan.Heur.ZGY.7 (病毒)
D:\Virus\huge\2015.8.18\39.vir 操作: 已隔离
Gen:Variant.Barys.5565 (病毒)
D:\Virus\huge\2015.8.18\41.vir 操作: 已隔离
Gen:Heur.Kelios.1 (病毒)
D:\Virus\huge\2015.8.18\24.vir 操作: 已隔离
Gen:Variant.Zusy.2732 (病毒)
D:\Virus\huge\2015.8.18\40.vir 操作: 已隔离
Trojan.Generic.6278340 (病毒)
D:\Virus\huge\2015.8.18\44.vir 操作: 已隔离
Trojan.GenericKD.2653222 (病毒)
D:\Virus\huge\2015.8.18\36.vir\Server.exe\Server.exe
Trojan.GenericKD.2652058 (病毒)
D:\Virus\huge\2015.8.18\36.vir\Server.exe
Trojan.GenericKD.2651385 (病毒)
D:\Virus\huge\2015.8.18\47.vir 操作: 已隔离
Gen:Variant.Mikey.21403 (病毒)
D:\Virus\huge\2015.8.18\46.vir 操作: 已隔离
Trojan.GenericKD.2651121 (病毒)
D:\Virus\huge\2015.8.18\50.vir 操作: 已隔离
Trojan.Generic.8382369 (病毒)
D:\Virus\huge\2015.8.18\49.vir\wallhack.zip\jtx.asi
D:\Virus\huge\2015.8.18\49.vir\wallhack.zip
D:\Virus\huge\2015.8.18\49.vir 操作: 已隔离
Trojan:Android/FakeBank.M (病毒)
D:\Virus\huge\2015.8.18\26.vir\assets\test.apk
D:\Virus\huge\2015.8.18\26.vir\classes.dex
D:\Virus\huge\2015.8.18\26.vir 操作: 已隔离
找到危险软件

Gen:Variant.Application.Bundler (危险软件)
D:\Virus\huge\2015.8.18\05.vir[/mw_shl_code]
dsb2466
头像被屏蔽
发表于 2015-8-18 09:57:35 | 显示全部楼层
skyboybone 发表于 2015-8-18 09:37
金山开始蹲坑了?那我就撤了

我只是一直都逛这里。。。都这么多年了。。。
aboringman
发表于 2015-8-18 09:57:51 | 显示全部楼层
AVIRA kill 40 files and fix 5 files(fix failed)
[mw_shl_code=css,true]Begin scan in 'C:\Documents and Settings\Administrator\桌面\2015.8.18'
C:\Documents and Settings\Administrator\桌面\2015.8.18\01.vir
  [DETECTION] Is the TR/MicroFake.BA.2 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\02.vir
  [DETECTION] Is the TR/Agent.bbe Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\04.vir
  [DETECTION] Is the TR/Spy.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\05.vir
  [DETECTION] Contains patterns of software PUA/Softpulse.Gen
C:\Documents and Settings\Administrator\桌面\2015.8.18\06.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
C:\Documents and Settings\Administrator\桌面\2015.8.18\07.vir
  [DETECTION] Is the TR/Crypt.EPACK.Gen2 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\08.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
C:\Documents and Settings\Administrator\桌面\2015.8.18\09.vir
    [0] Archive type: Portable Executable Resource
    --> CABINET
        [1] Archive type: CAB (Microsoft)
      --> DOS.exe
          [DETECTION] Is the TR/Zusy.32256.13 Trojan
          [WARNING]   Infected files in archives cannot be repaired
      --> NJPlugin.exe
          [DETECTION] Contains a recognition pattern of the (harmful) BDS/Bladabindi.dcrj back-door program
          [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.18\10.vir
  [DETECTION] Is the TR/Dropper.Gen7 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\11.vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
C:\Documents and Settings\Administrator\桌面\2015.8.18\12.vir
  [DETECTION] Contains code of the W97M/Agent.94208.1 Word macro virus
C:\Documents and Settings\Administrator\桌面\2015.8.18\14.vir
  [DETECTION] Is the TR/Crypt.Xpack.44560 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\15.vir
  [DETECTION] Contains code of the W32/Virut.X Windows virus
C:\Documents and Settings\Administrator\桌面\2015.8.18\16.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\17.vir
  [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\19.vir
  [DETECTION] Is the TR/Spy.Gen8 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\20.vir
    [0] Archive type: Smart Install Maker
    --> AV0000000c.AV$
        [1] Archive type: CAB (Microsoft)
      --> 4
          [2] Archive type: NSIS
        --> ProgramFilesDir/video.gif
            [DETECTION] Is the TR/AD.Glupteba.Y.643 Trojan
            [WARNING]   Infected files in archives cannot be repaired
        --> ProgramFilesDir/garbology.dll
            [DETECTION] Is the TR/Dropper.A.7924 Trojan
            [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.18\21.vir
  [DETECTION] Is the TR/Dropper.MSIL.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\22.vir
  [DETECTION] Is the TR/VB.dbi Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\23.vir
  [DETECTION] Is the TR/Spy.185693.1 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\24.vir
  [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\25.vir
  [DETECTION] Is the TR/Spy.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\26.vir
  [DETECTION] Contains code of the ANDROID/Spy.Banker.AE.Gen virus
C:\Documents and Settings\Administrator\桌面\2015.8.18\27.vir
  [DETECTION] Contains recognition pattern of the JS/Agent.hhi.1 Java script virus
C:\Documents and Settings\Administrator\桌面\2015.8.18\28.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
C:\Documents and Settings\Administrator\桌面\2015.8.18\29.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
C:\Documents and Settings\Administrator\桌面\2015.8.18\30.vir
  [DETECTION] Is the TR/Dropper.MSIL.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\31.vir
  [DETECTION] Is the TR/Gendal.kdt.352500 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\32.vir
  [DETECTION] Is the TR/Hijacker.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\33.vir
  [DETECTION] Is the TR/ATRAPS.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\34.vir
  [DETECTION] Is the TR/Dropper.Gen7 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\35.vir
  [DETECTION] Is the TR/Crypt.ZPACK.152774 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\36.vir
  [DETECTION] Is the TR/AD.Bladabindi.Y.2860 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\37.vir
  [DETECTION] Is the TR/Dropper.Gen7 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\38.vir
  [DETECTION] Is the TR/AD.Farfli.Y.147 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\39.vir
  [DETECTION] Is the TR/ProxChange.27648.6 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\40.vir
  [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
C:\Documents and Settings\Administrator\桌面\2015.8.18\41.vir
  [DETECTION] Is the TR/Agent.44544218 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\42.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
C:\Documents and Settings\Administrator\桌面\2015.8.18\44.vir
  [DETECTION] Contains code of the W32/Ramnit.C Windows virus
C:\Documents and Settings\Administrator\桌面\2015.8.18\45.vir
  [DETECTION] Is the TR/VB.dbi Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\47.vir
  [DETECTION] Is the TR/Dropper.VB.34014 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\48.vir
  [DETECTION] Is the TR/Kryptik.abbogw Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\49.vir
    [0] Archive type: RAR
    --> wallhack.zip
        [1] Archive type: ZIP
      --> jtx.asi
          [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
          [WARNING]   Infected files in archives cannot be repaired
C:\Documents and Settings\Administrator\桌面\2015.8.18\50.vir
  [DETECTION] Is the TR/Crypt.Xpack.263215 Trojan

Beginning disinfection:
[INFO] RepairMalware: Disinfection of malware W32/Ramnit.C needs a reboot to complete
[ERROR] RepairMalware: Not able to Repair Malware PUA/Softpulse.Gen
C:\Documents and Settings\Administrator\桌面\2015.8.18\50.vir
  [DETECTION] Is the TR/Crypt.Xpack.263215 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '4a17053e.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\49.vir
  [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
  [NOTE]      The file was moved to the quarantine directory under the name '18485fdf.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\48.vir
  [DETECTION] Is the TR/Kryptik.abbogw Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '7e7f101c.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\47.vir
  [DETECTION] Is the TR/Dropper.VB.34014 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '3bfb3d21.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\45.vir
  [DETECTION] Is the TR/VB.dbi Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '44e00f46.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\44.vir
  [DETECTION] Contains code of the W32/Ramnit.C Windows virus
  [NOTE]      The file was repaired.
C:\Documents and Settings\Administrator\桌面\2015.8.18\42.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
  [NOTE]      The file was repaired.
C:\Documents and Settings\Administrator\桌面\2015.8.18\41.vir
  [DETECTION] Is the TR/Agent.44544218 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '0858230f.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\40.vir
  [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
  [NOTE]      The file was moved to the quarantine directory under the name '74406350.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\39.vir
  [DETECTION] Is the TR/ProxChange.27648.6 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '591a4cea.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\38.vir
  [DETECTION] Is the TR/AD.Farfli.Y.147 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '4072778f.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\37.vir
  [DETECTION] Is the TR/Dropper.Gen7 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '2c2e5bbe.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\36.vir
  [DETECTION] Is the TR/AD.Bladabindi.Y.2860 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '5d976228.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\35.vir
  [DETECTION] Is the TR/Crypt.ZPACK.152774 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '538d52ee.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\34.vir
  [DETECTION] Is the TR/Dropper.Gen7 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '16a42bab.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\33.vir
  [DETECTION] Is the TR/ATRAPS.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '1faf2f01.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\32.vir
  [DETECTION] Is the TR/Hijacker.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '47ee366b.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\31.vir
  [DETECTION] Is the TR/Gendal.kdt.352500 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '6b1a4fa6.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\30.vir
  [DETECTION] Is the TR/Dropper.MSIL.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '55e42f73.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\29.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
  [NOTE]      The file was repaired.
C:\Documents and Settings\Administrator\桌面\2015.8.18\28.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
  [NOTE]      The file was repaired.
C:\Documents and Settings\Administrator\桌面\2015.8.18\27.vir
  [DETECTION] Contains recognition pattern of the JS/Agent.hhi.1 Java script virus
  [NOTE]      The file was moved to the quarantine directory under the name '36ea04f7.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\26.vir
  [DETECTION] Contains code of the ANDROID/Spy.Banker.AE.Gen virus
  [NOTE]      The file was moved to the quarantine directory under the name '10224415.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\25.vir
  [DETECTION] Is the TR/Spy.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '22b63fb1.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\24.vir
  [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '28f314cc.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\23.vir
  [DETECTION] Is the TR/Spy.185693.1 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '17a07088.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\22.vir
  [DETECTION] Is the TR/VB.dbi Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '698c7ca8.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\21.vir
  [DETECTION] Is the TR/Dropper.MSIL.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '3cf47862.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\20.vir
  [DETECTION] Is the TR/Dropper.A.7924 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '31620949.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\19.vir
  [DETECTION] Is the TR/Spy.Gen8 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '2d3f1dbb.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\17.vir
  [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '1cec5077.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\16.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '70ba4441.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\15.vir
  [DETECTION] Contains code of the W32/Virut.X Windows virus
  [NOTE]      The file was moved to the quarantine directory under the name '392061b9.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\14.vir
  [DETECTION] Is the TR/Crypt.Xpack.44560 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '62b56969.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\12.vir
  [DETECTION] Contains code of the W97M/Agent.94208.1 Word macro virus
  [NOTE]      The file was moved to the quarantine directory under the name '04076582.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\11.vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
  [NOTE]      The file was moved to the quarantine directory under the name '5389172d.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\10.vir
  [DETECTION] Is the TR/Dropper.Gen7 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '71f94058.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\09.vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Bladabindi.dcrj back-door program
  [NOTE]      The file was moved to the quarantine directory under the name '19e93a37.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\08.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
  [NOTE]      The file was moved to the quarantine directory under the name '399f3eb3.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\07.vir
  [DETECTION] Is the TR/Crypt.EPACK.Gen2 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '6cbb7804.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\06.vir
  [DETECTION] Contains code of the W32/Virut.Gen Windows virus
  [NOTE]      The file was repaired.
C:\Documents and Settings\Administrator\桌面\2015.8.18\05.vir
  [DETECTION] Contains patterns of software PUA/Softpulse.Gen
  [NOTE]      The file was moved to the quarantine directory under the name '0d9b59ba.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\04.vir
  [DETECTION] Is the TR/Spy.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '68371bce.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\02.vir
  [DETECTION] Is the TR/Agent.bbe Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '0de06f6d.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\01.vir
  [DETECTION] Is the TR/MicroFake.BA.2 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '1e0453ff.qua'!
[/mw_shl_code]

SECOND
[mw_shl_code=css,true]Begin scan in 'C:\Documents and Settings\Administrator\桌面\2015.8.18'
C:\Documents and Settings\Administrator\桌面\2015.8.18\06.vir
  [DETECTION] Is the TR/Spy.109568.200 Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\28.vir
  [DETECTION] Is the TR/ATRAPS.Gen Trojan
C:\Documents and Settings\Administrator\桌面\2015.8.18\29.vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Agent.vwy back-door program
C:\Documents and Settings\Administrator\桌面\2015.8.18\42.vir
  [DETECTION] Contains recognition pattern of the WORM/Rbot.Gen worm
C:\Documents and Settings\Administrator\桌面\2015.8.18\44.vir
  [DETECTION] Is the TR/Agent.bbe Trojan

Beginning disinfection:
C:\Documents and Settings\Administrator\桌面\2015.8.18\44.vir
  [DETECTION] Is the TR/Agent.bbe Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '52982a33.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\42.vir
  [DETECTION] Contains recognition pattern of the WORM/Rbot.Gen worm
  [NOTE]      The file was moved to the quarantine directory under the name '4a0f0592.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\29.vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Agent.vwy back-door program
  [NOTE]      The file was moved to the quarantine directory under the name '18505f41.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\28.vir
  [DETECTION] Is the TR/ATRAPS.Gen Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '7e671082.qua'!
C:\Documents and Settings\Administrator\桌面\2015.8.18\06.vir
  [DETECTION] Is the TR/Spy.109568.200 Trojan
  [NOTE]      The file was moved to the quarantine directory under the name '3be33d82.qua'!
[/mw_shl_code]

@a1121611810
Ozzie_wei
发表于 2015-8-18 10:01:54 | 显示全部楼层
ESS 8.0 清除1个 余下9个
ELOHIM
发表于 2015-8-18 10:02:08 | 显示全部楼层
卡布达 发表于 2015-8-18 09:08
Windows Defender
版本1.203.2523.0
余10

不会吧,报的还是一个名字。。
一会儿我也下载试试。。
真奇怪
aboringman
发表于 2015-8-18 10:06:59 | 显示全部楼层
CIS kill 32 files
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-22 00:36 , Processed in 0.106452 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表