精睿样本测试（15.9.1）

ELOHIM

瑜辰双飞 发表于 2015-9-1 12:47
win10WD  杀29X，修复1X  过20X

还不错，修复项需要进事件日志查看哦。。

Llano_心情

cy0072005 发表于 2015-9-1 11:05
狮子有主防，双击还能拦截部分，应该不会这么矬

实机测试还是有点虚，就扫扫吧

cxy密斯

[mw_shl_code=css,true]
=============================================================================
Dr.Web Scanner SE for Windows v9.1.3.08170
=============================================================================
Scanning Engine version: 10.0.8.8100
Virus Finding Engine version: 7.0.14.8060
-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Object(s) to scan:
- C:\Users\Shiloh\Desktop\2015.9.1

C:\Users\Shiloh\Desktop\2015.9.1\01.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\02.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\03.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.1\03.vir\new order.scr - infected with Trojan.Siggen6.32796
C:\Users\Shiloh\Desktop\2015.9.1\03.vir\new order.scr - infected
C:\Users\Shiloh\Desktop\2015.9.1\03.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.1\03.vir - infected archive - 28ms, 190854 bytes
C:\Users\Shiloh\Desktop\2015.9.1\03.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\01.vir - Ok - 362ms, 10752 bytes
C:\Users\Shiloh\Desktop\2015.9.1\04.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\04.vir is BINARYRES container
>>C:\Users\Shiloh\Desktop\2015.9.1\04.vir\data001 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\04.vir\data001 - Ok
>>C:\Users\Shiloh\Desktop\2015.9.1\04.vir\data002 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\04.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\04.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\04.vir - container - 481ms, 1139200 bytes
C:\Users\Shiloh\Desktop\2015.9.1\05.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\06.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.1\06.vir\Revised PO.exe - infected with Trojan.PWS.Panda.7746
C:\Users\Shiloh\Desktop\2015.9.1\06.vir\Revised PO.exe - infected
C:\Users\Shiloh\Desktop\2015.9.1\06.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.1\06.vir - infected archive - 133ms, 271286 bytes
C:\Users\Shiloh\Desktop\2015.9.1\06.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\07.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.1\05.vir - infected with Trojan.Encoder.567
C:\Users\Shiloh\Desktop\2015.9.1\05.vir - infected - 346ms, 479232 bytes
C:\Users\Shiloh\Desktop\2015.9.1\07.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\07.vir\S4 IS NOICE.exe - infected with Win32.Rmnet
C:\Users\Shiloh\Desktop\2015.9.1\07.vir\S4 IS NOICE.exe - infected
C:\Users\Shiloh\Desktop\2015.9.1\07.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.1\07.vir - infected archive - 156ms, 547965 bytes
C:\Users\Shiloh\Desktop\2015.9.1\08.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\09.vir - packed by ENCODED SCRIPT
C:\Users\Shiloh\Desktop\2015.9.1\09.vir - infected with VBS.DownLoader.367
C:\Users\Shiloh\Desktop\2015.9.1\09.vir - infected - 26ms, 4756 bytes
C:\Users\Shiloh\Desktop\2015.9.1\09.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\02.vir - Ok - 1063ms, 46592 bytes
C:\Users\Shiloh\Desktop\2015.9.1\10.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\11.vir - infected with Trojan.Inject2.2071
C:\Users\Shiloh\Desktop\2015.9.1\11.vir - infected - 423ms, 139264 bytes
C:\Users\Shiloh\Desktop\2015.9.1\11.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\12.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.1\12.vir\NEW ORDER.scr - Ok
C:\Users\Shiloh\Desktop\2015.9.1\12.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\12.vir - archive - 99ms, 258839 bytes
C:\Users\Shiloh\Desktop\2015.9.1\12.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\08.vir - packed by FSG
C:\Users\Shiloh\Desktop\2015.9.1\08.vir - infected with Trojan.DownLoader15.62774
C:\Users\Shiloh\Desktop\2015.9.1\08.vir - infected - 1057ms, 113997 bytes
C:\Users\Shiloh\Desktop\2015.9.1\13.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\14.vir - infected with Linux.BackDoor.Gates.9
C:\Users\Shiloh\Desktop\2015.9.1\14.vir - infected - 1ms, 1223123 bytes
C:\Users\Shiloh\Desktop\2015.9.1\14.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\13.vir is BINARYRES container
>>C:\Users\Shiloh\Desktop\2015.9.1\13.vir\data001 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\13.vir\data001 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\13.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\13.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\13.vir - container - 360ms, 62976 bytes
C:\Users\Shiloh\Desktop\2015.9.1\15.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\16.vir - probably infected with SCRIPT.Virus
>C:\Users\Shiloh\Desktop\2015.9.1\16.vir is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.1\16.vir\JSFile_1[0][24e9] - Ok
C:\Users\Shiloh\Desktop\2015.9.1\16.vir\JSEval_2[32a] - infected with JS.DownLoader.365
C:\Users\Shiloh\Desktop\2015.9.1\16.vir\JSEval_2[32a] - infected
C:\Users\Shiloh\Desktop\2015.9.1\16.vir - infected container
C:\Users\Shiloh\Desktop\2015.9.1\16.vir - infected container - 77ms, 9449 bytes
C:\Users\Shiloh\Desktop\2015.9.1\16.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\17.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.1\15.vir - infected with Trojan.Spambot.12690
C:\Users\Shiloh\Desktop\2015.9.1\15.vir - infected - 295ms, 237568 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\10.vir - packed by PECOMPACT
C:\Users\Shiloh\Desktop\2015.9.1\17.vir:Zone.Identifier - Ok - 7ms, 26 bytes
>>C:\Users\Shiloh\Desktop\2015.9.1\17.vir\Voice For Spotify.exe is BINARYRES container
>>>C:\Users\Shiloh\Desktop\2015.9.1\17.vir\Voice For Spotify.exe\data001 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\17.vir\Voice For Spotify.exe\data001 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\17.vir\Voice For Spotify.exe\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\17.vir\Voice For Spotify.exe - Ok
C:\Users\Shiloh\Desktop\2015.9.1\17.vir\Newtonsoft.Json.dll - Ok
C:\Users\Shiloh\Desktop\2015.9.1\17.vir\SpotifyAPI.dll - Ok
C:\Users\Shiloh\Desktop\2015.9.1\17.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\17.vir - archive - 166ms, 251863 bytes
C:\Users\Shiloh\Desktop\2015.9.1\18.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\10.vir - Ok - 1372ms, 83456 bytes
C:\Users\Shiloh\Desktop\2015.9.1\19.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\18.vir - infected with Trojan.DownLoader11.47826
C:\Users\Shiloh\Desktop\2015.9.1\18.vir - infected - 314ms, 287232 bytes
C:\Users\Shiloh\Desktop\2015.9.1\20.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\21.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.1\20.vir - infected with BackDoor.Cybergate.1
C:\Users\Shiloh\Desktop\2015.9.1\20.vir - infected - 302ms, 624128 bytes
C:\Users\Shiloh\Desktop\2015.9.1\21.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\21.vir\IRS-Penalty-Income-Tax-Warning-Notification.exe - infected with Trojan.PWS.Panda.1502
C:\Users\Shiloh\Desktop\2015.9.1\21.vir\IRS-Penalty-Income-Tax-Warning-Notification.exe - infected
C:\Users\Shiloh\Desktop\2015.9.1\21.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.1\21.vir - infected archive - 174ms, 197047 bytes
C:\Users\Shiloh\Desktop\2015.9.1\22.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\22.vir - infected with Trojan.DownLoader15.63337
C:\Users\Shiloh\Desktop\2015.9.1\22.vir - infected - 327ms, 420352 bytes
C:\Users\Shiloh\Desktop\2015.9.1\23.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\24.vir - packed by FLY-CODE
C:\Users\Shiloh\Desktop\2015.9.1\19.vir - infected with BackDoor.Cybergate.1
C:\Users\Shiloh\Desktop\2015.9.1\19.vir - infected - 1048ms, 297472 bytes
C:\Users\Shiloh\Desktop\2015.9.1\24.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\25.vir is JAR container
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\META-INF\MANIFEST.MF - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\ghghjjj\gytytryrt\fdmgsffg.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\ghghjjj\gytytryrt\gfyshther.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\ghghjjj\gytytryrt\hgdfhgfhdghgf.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\ghghjjj\gytytryrt\iuyikyujmfgh$RemindTask.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\ghghjjj\gytytryrt\iuyikyujmfgh.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\ghghjjj\gytytryrt\rueyrjugghhggf.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\Main.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\cmhjj\fhfghtr.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\dnlyyu\fyyuujgh$1.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\dnlyyu\fyyuujgh$2.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\dnlyyu\fyyuujgh.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\fmhtuuu\fdhghdfhghjj$1.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\fmhtuuu\fdhghdfhghjj.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\rtryy\Rg$StreamReader.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\rtryy\Rg.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\rtryy\Stp.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\rtryy\StpL.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\rtryy\StpM.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir\com\fgty\plunddd\rtryy\StpW.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\25.vir - container - 137ms, 31420 bytes
C:\Users\Shiloh\Desktop\2015.9.1\25.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\23.vir - infected with Trojan.DownLoader12.30121
C:\Users\Shiloh\Desktop\2015.9.1\23.vir - infected - 1029ms, 363520 bytes
C:\Users\Shiloh\Desktop\2015.9.1\26.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\27.vir is OLE container
>>C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar is JAR container
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\META-INF\MANIFEST.MF - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\b.txt - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\a.txt - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\a\ASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\b\ASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\c\ASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\c\ASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\d\ASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\d\ASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\Main.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\ASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar\ASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAASSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk.class - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir\wupos_update.jar - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\27.vir - container - 96ms, 126464 bytes
C:\Users\Shiloh\Desktop\2015.9.1\27.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\28.vir - infected with VBS.DownLoader.320
C:\Users\Shiloh\Desktop\2015.9.1\28.vir - infected - 9ms, 3467 bytes
C:\Users\Shiloh\Desktop\2015.9.1\28.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\26.vir - packed by BINARYRES
C:\Users\Shiloh\Desktop\2015.9.1\26.vir - Ok - 412ms, 486961 bytes
C:\Users\Shiloh\Desktop\2015.9.1\29.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\30.vir is SWF container
C:\Users\Shiloh\Desktop\2015.9.1\24.vir - Ok - 965ms, 494592 bytes
>>C:\Users\Shiloh\Desktop\2015.9.1\30.vir\Data is SWF container
C:\Users\Shiloh\Desktop\2015.9.1\30.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\30.vir\Data\Code[3678] - Ok
>C:\Users\Shiloh\Desktop\2015.9.1\31.vir is ZIP archive
>>C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex is BINARYRES container
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data001 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data003 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data004 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data005 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data006 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data007 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data008 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data009 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data010 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data011 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data012 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data013 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data014 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data015 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data016 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data017 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\30.vir\Data\Data[53470] - Ok
C:\Users\Shiloh\Desktop\2015.9.1\30.vir\Data - Ok
C:\Users\Shiloh\Desktop\2015.9.1\30.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\30.vir - container - 148ms, 53769 bytes
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data018 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>>>C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data019 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data019 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data020 - Ok
>C:\Users\Shiloh\Desktop\2015.9.1\32.vir is SWF container
C:\Users\Shiloh\Desktop\2015.9.1\32.vir\Data - infected with Exploit.CVE-2015-3113
C:\Users\Shiloh\Desktop\2015.9.1\32.vir\Data - infected
C:\Users\Shiloh\Desktop\2015.9.1\32.vir - infected container
C:\Users\Shiloh\Desktop\2015.9.1\32.vir - infected container - 8ms, 37445 bytes
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data021 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\32.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data022 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data023 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data024 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data025 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data026 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data027 - Ok
>C:\Users\Shiloh\Desktop\2015.9.1\29.vir is BINARYRES container
>>>C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data028 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data028 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\29.vir\data001 - Ok
>>>C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data029 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data029 - Ok
>>C:\Users\Shiloh\Desktop\2015.9.1\29.vir\data002 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\29.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data030 - Ok
>>C:\Users\Shiloh\Desktop\2015.9.1\29.vir\data003 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\29.vir\data003 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data031 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\29.vir\data004 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\29.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\29.vir - container - 310ms, 57856 bytes
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data032 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\33.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data033 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data034 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data035 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data036 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data037 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data038 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data039 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data040 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data041 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data042 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data043 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data044 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data045 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex\data046 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir\PTS.ex - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\31.vir - archive - 264ms, 158662 bytes
C:\Users\Shiloh\Desktop\2015.9.1\34.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\35.vir is RAR archive
C:\Users\Shiloh\Desktop\2015.9.1\35.vir\Mono.Cecil.dll - Ok
>>C:\Users\Shiloh\Desktop\2015.9.1\35.vir\NetSealPatcher.exe is BINARYRES container
>>>C:\Users\Shiloh\Desktop\2015.9.1\35.vir\NetSealPatcher.exe\data001 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\35.vir\NetSealPatcher.exe\data001 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\35.vir\NetSealPatcher.exe\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\35.vir\NetSealPatcher.exe - Ok
C:\Users\Shiloh\Desktop\2015.9.1\35.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\35.vir - archive - 79ms, 122762 bytes
C:\Users\Shiloh\Desktop\2015.9.1\35.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\34.vir - packed by FLY-CODE
>>C:\Users\Shiloh\Desktop\2015.9.1\34.vir - packed by FLY-CODE
C:\Users\Shiloh\Desktop\2015.9.1\34.vir - Ok - 936ms, 558592 bytes
C:\Users\Shiloh\Desktop\2015.9.1\36.vir:Zone.Identifier - Ok - 8ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\33.vir - infected with BackDoor.Bladabindi.1056
C:\Users\Shiloh\Desktop\2015.9.1\33.vir - infected - 1014ms, 24064 bytes
C:\Users\Shiloh\Desktop\2015.9.1\37.vir:Zone.Identifier - Ok - 7ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\37.vir - packed by ENCODED SCRIPT
C:\Users\Shiloh\Desktop\2015.9.1\37.vir - Ok - 68ms, 9872 bytes
C:\Users\Shiloh\Desktop\2015.9.1\38.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\39.vir is ZIP archive
>>C:\Users\Shiloh\Desktop\2015.9.1\39.vir\Machine Quotation.exe is NET container
C:\Users\Shiloh\Desktop\2015.9.1\39.vir\Machine Quotation.exe - Ok
>>C:\Users\Shiloh\Desktop\2015.9.1\39.vir\Machine drawing.exe is NET container
C:\Users\Shiloh\Desktop\2015.9.1\39.vir\Machine drawing.exe - Ok
C:\Users\Shiloh\Desktop\2015.9.1\39.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\39.vir - archive - 81ms, 441318 bytes
C:\Users\Shiloh\Desktop\2015.9.1\39.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\36.vir - infected with BackDoor.Bladabindi.1056
C:\Users\Shiloh\Desktop\2015.9.1\36.vir - infected - 1008ms, 24064 bytes
C:\Users\Shiloh\Desktop\2015.9.1\40.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\40.vir - infected with Trojan.Siggen6.33372
C:\Users\Shiloh\Desktop\2015.9.1\40.vir - infected - 272ms, 212992 bytes
C:\Users\Shiloh\Desktop\2015.9.1\41.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\38.vir - packed by ASPACK
C:\Users\Shiloh\Desktop\2015.9.1\41.vir - Ok - 1113ms, 171519 bytes
C:\Users\Shiloh\Desktop\2015.9.1\42.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\42.vir - infected with Trojan.Siggen6.47749
C:\Users\Shiloh\Desktop\2015.9.1\42.vir - infected - 1051ms, 562176 bytes
C:\Users\Shiloh\Desktop\2015.9.1\43.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>>C:\Users\Shiloh\Desktop\2015.9.1\38.vir is ZLIB container
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data001 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data003 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data004 - Ok
>C:\Users\Shiloh\Desktop\2015.9.1\43.vir is BINARYRES container
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data001 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data005 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data006 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data003 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data004 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data005 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data006 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data007 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data008 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data009 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data010 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data011 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data012 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data007 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data013 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data014 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data015 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data016 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data017 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data018 - Ok
>>C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data019 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data019 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data020 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data021 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data008 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data022 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data009 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data023 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data024 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\44.vir - infected with Trojan.Dridex.195
C:\Users\Shiloh\Desktop\2015.9.1\44.vir - infected - 282ms, 134656 bytes
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data025 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data026 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\44.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data027 - Ok
>>C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data028 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data028 - Ok
>>C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data029 is NET container
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data029 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data030 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data031 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data010 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data032 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data033 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data034 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data035 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data036 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data037 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data038 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data039 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data040 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data011 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data041 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data012 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data042 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data013 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data043 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data044 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data014 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data045 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data015 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir\data046 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\43.vir - container - 552ms, 555520 bytes
C:\Users\Shiloh\Desktop\2015.9.1\38.vir\data016 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\45.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\38.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\38.vir - container - 1866ms, 521216 bytes
C:\Users\Shiloh\Desktop\2015.9.1\46.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\47.vir is BINARYRES container
C:\Users\Shiloh\Desktop\2015.9.1\47.vir\data001 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\47.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\47.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\47.vir - container - 332ms, 73216 bytes
C:\Users\Shiloh\Desktop\2015.9.1\47.vir:Zone.Identifier - Ok - 3ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\48.vir - infected with Trojan.PWS.Siggen1.40902
C:\Users\Shiloh\Desktop\2015.9.1\48.vir - infected - 325ms, 255488 bytes
C:\Users\Shiloh\Desktop\2015.9.1\48.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\49.vir is RTF container
C:\Users\Shiloh\Desktop\2015.9.1\49.vir\OLEstream-1 - Ok
C:\Users\Shiloh\Desktop\2015.9.1\49.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.1\49.vir - container - 12ms, 99945 bytes
C:\Users\Shiloh\Desktop\2015.9.1\49.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\45.vir - infected with Trojan.KeyLogger.28131
C:\Users\Shiloh\Desktop\2015.9.1\45.vir - infected - 1008ms, 27273 bytes
C:\Users\Shiloh\Desktop\2015.9.1\50.vir:Zone.Identifier - Ok - 18ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.1\46.vir - Ok - 1029ms, 52736 bytes
>C:\Users\Shiloh\Desktop\2015.9.1\50.vir - packed by PESTUB
>>C:\Users\Shiloh\Desktop\2015.9.1\50.vir - packed by FLY-CODE
C:\Users\Shiloh\Desktop\2015.9.1\50.vir - Ok - 1812ms, 1114624 bytes

Total 13674892 bytes in 100 files scanned (275 objects, 4 containers)
Total 75 files (244 objects) are clean
Total 25 files are infected
Total 0 files (1 object) is suspicious
Scan time is 00:00:09.407
-----------------------------------------------------------------------------
Start curing
-----------------------------------------------------------------------------
C:\Users\Shiloh\Desktop\2015.9.1\03.vir - quarantined - 1167 ms
C:\Users\Shiloh\Desktop\2015.9.1\06.vir - quarantined - 74 ms
C:\Users\Shiloh\Desktop\2015.9.1\05.vir - quarantined - 60 ms
C:\Users\Shiloh\Desktop\2015.9.1\07.vir - quarantined - 38 ms
C:\Users\Shiloh\Desktop\2015.9.1\09.vir - quarantined - 48 ms
C:\Users\Shiloh\Desktop\2015.9.1\11.vir - quarantined - 93 ms
C:\Users\Shiloh\Desktop\2015.9.1\08.vir - quarantined - 70 ms
C:\Users\Shiloh\Desktop\2015.9.1\14.vir - quarantined - 64 ms
C:\Users\Shiloh\Desktop\2015.9.1\16.vir - quarantined - 90 ms
C:\Users\Shiloh\Desktop\2015.9.1\15.vir - quarantined - 45 ms
C:\Users\Shiloh\Desktop\2015.9.1\18.vir - quarantined - 50 ms
C:\Users\Shiloh\Desktop\2015.9.1\20.vir - quarantined - 64 ms
C:\Users\Shiloh\Desktop\2015.9.1\21.vir - quarantined - 32 ms
C:\Users\Shiloh\Desktop\2015.9.1\22.vir - quarantined - 64 ms
C:\Users\Shiloh\Desktop\2015.9.1\19.vir - quarantined - 56 ms
C:\Users\Shiloh\Desktop\2015.9.1\23.vir - quarantined - 50 ms
C:\Users\Shiloh\Desktop\2015.9.1\28.vir - quarantined - 33 ms
C:\Users\Shiloh\Desktop\2015.9.1\32.vir - quarantined - 27 ms
C:\Users\Shiloh\Desktop\2015.9.1\33.vir - quarantined - 37 ms
C:\Users\Shiloh\Desktop\2015.9.1\36.vir - quarantined - 56 ms
C:\Users\Shiloh\Desktop\2015.9.1\40.vir - quarantined - 43 ms
C:\Users\Shiloh\Desktop\2015.9.1\42.vir - quarantined - 60 ms
C:\Users\Shiloh\Desktop\2015.9.1\44.vir - quarantined - 44 ms
C:\Users\Shiloh\Desktop\2015.9.1\48.vir - quarantined - 67 ms
C:\Users\Shiloh\Desktop\2015.9.1\45.vir - quarantined - 36 ms

Total 13674892 bytes in 100 files scanned (275 objects, 4 containers)
Total 75 files (244 objects) are clean
Total 25 files are infected
Total 0 files (1 object) is suspicious
Total 25 files (26 objects) are neutralized
Scan time is 00:00:09.407[/mw_shl_code]

1518589226

Llano_心情 发表于 2015-9-1 12:11
狮子2011  killx5  

V16+  双击狮子都没反应

[mw_shl_code=css,true]发现日期        威胁名称        危险等级         ...

[mw_shl_code=html,true]时间  文件路径  威胁类型  结果  对应进程  
2015-09-01 19: 43: 11  C:\Documents and Settings\Administrator\桌面\2015.9.1\38.vir  Trojan.Win32.Generic.18E39E30  删除   
2015-09-01 19: 43: 11  C:\Documents and Settings\Administrator\桌面\2015.9.1\40.vir  Trojan.Win32.Generic.1900E00F  删除   
2015-09-01 19: 43: 11  C:\Documents and Settings\Administrator\桌面\2015.9.1\44.vir  Trojan.Win32.Generic.190193A6  删除   
2015-09-01 19: 43: 11  C:\Documents and Settings\Administrator\桌面\2015.9.1\45.vir  Trojan.Win32.Generic.1900AAC6  删除   
2015-09-01 19: 43: 11  C:\Documents and Settings\Administrator\桌面\2015.9.1\48.vir  Trojan.Win32.Generic.190193A5  删除   
2015-09-01 19: 43: 11  C:\Documents and Settings\Administrator\桌面\2015.9.1\50.vir  Trojan.Win32.Generic.17FD6E52  删除   
2015-09-01 19: 43: 10  C:\Documents and Settings\Administrator\桌面\2015.9.1\22.vir  Trojan.Win32.Generic.18FD782B  删除   
2015-09-01 19: 43: 10  C:\Documents and Settings\Administrator\桌面\2015.9.1\23.vir  Trojan.Win32.Generic.190126F0  删除   
2015-09-01 19: 43: 10  C:\Documents and Settings\Administrator\桌面\2015.9.1\24.vir  Trojan.Win32.Generic.190193A9  删除   
2015-09-01 19: 43: 10  C:\Documents and Settings\Administrator\桌面\2015.9.1\26.vir  Trojan.Win32.Generic.190193AC  删除   
2015-09-01 19: 43: 10  C:\Documents and Settings\Administrator\桌面\2015.9.1\29.vir  Trojan.Win32.Generic.18FFE420  删除   
2015-09-01 19: 43: 10  C:\Documents and Settings\Administrator\桌面\2015.9.1\33.vir  Trojan.Win32.Generic.18CB3AFE  删除   
2015-09-01 19: 43: 10  C:\Documents and Settings\Administrator\桌面\2015.9.1\34.vir  Trojan.Win32.Generic.190193AB  删除   
2015-09-01 19: 43: 10  C:\Documents and Settings\Administrator\桌面\2015.9.1\36.vir  Trojan.Win32.Generic.18FF6688  删除   
2015-09-01 19: 43: 09  C:\Documents and Settings\Administrator\桌面\2015.9.1\15.vir  Trojan.Win32.Generic.1900FF8F  删除   
2015-09-01 19: 43: 09  C:\Documents and Settings\Administrator\桌面\2015.9.1\19.vir  Trojan.Win32.Generic.1254003E  删除   
2015-09-01 19: 43: 09  C:\Documents and Settings\Administrator\桌面\2015.9.1\20.vir  Backdoor.Win32.Delf.epl  删除   
2015-09-01 19: 43: 09  C:\Documents and Settings\Administrator\桌面\2015.9.1\21.vir>>IRS-Penalty-Income-Tax-Warning-Notification.exe  Trojan.Win32.Generic.12A65827  删除   
2015-09-01 19: 43: 08  C:\Documents and Settings\Administrator\桌面\2015.9.1\03.vir>>new order.scr  Trojan.Win32.Generic.19010C33  删除   
2015-09-01 19: 43: 08  C:\Documents and Settings\Administrator\桌面\2015.9.1\05.vir  Trojan.Win32.Generic.190193AA  删除   
2015-09-01 19: 43: 08  C:\Documents and Settings\Administrator\桌面\2015.9.1\07.vir>>S4 IS NOICE.exe  Backdoor.Win32.Gbod.b  删除   
2015-09-01 19: 43: 08  C:\Documents and Settings\Administrator\桌面\2015.9.1\08.vir  Trojan.Win32.Generic.18FFE93C  删除   
2015-09-01 19: 43: 08  C:\Documents and Settings\Administrator\桌面\2015.9.1\10.vir  Trojan.Win32.Generic.17CD5406  删除   
2015-09-01 19: 43: 08  C:\Documents and Settings\Administrator\桌面\2015.9.1\11.vir  Trojan.Win32.Generic.190095AF  删除   
2015-09-01 19: 43: 07  C:\Documents and Settings\Administrator\桌面\2015.9.1\01.vir  Trojan.Win32.Generic.190193A7  删除   
[/mw_shl_code]

housirvip

norton nis 文件夹还剩19个文件，提示查到28个,却kill了31个文件，下面的是扫描记录，双击测主防kill 增加2个，还有一个被阻止可以网络活动
最终剩余17个文件，昨天刚刚入的正，综合征又犯了
[mw_shl_code=css,true]扫描信息:
  病毒定义版本: 2015.08.31.032
  病毒定义序列 ID: 167460

扫描统计信息:
  扫描开始:
   本地: 2015/9/1 19:41
   UTC: 2015/9/1 11:41
  扫描时间: 26 秒
  扫描目标: C:\Users\housirvip\Downloads\2015.9.1
计数:
  扫描的项目总数: 64
  - 文件和目录: 64
  - 注册表条目: 0
  - 进程和启动项目: 0
  - 网络和浏览器项目: 0
  - 其他: 0
  - 受信任文件: 0
  - 跳过的文件: 0

  检测到的安全风险总数: 28
  已解决的项目总数: 28
  需要注意的项目总数: 0


已解决的威胁:
Packed.Generic.350
类型: 压缩
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
- 已删除


Trojan.Zbot
类型: 压缩
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
- 已删除


Trojan.Nancrat
类型: 压缩
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
- 已删除


Trojan.Zbot
类型: 压缩
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
- 已删除


W32.Ramnit!inf
类型: 压缩
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
- 已删除


Trojan.Maljava
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\25.vir - 已删除
1 个浏览器缓存



Trojan.Mdropper
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
2 个文件
c:\users\housirvip\downloads\2015.9.1\27.vir - 已删除
c:\users\housirvip\downloads\2015.9.1\49.vir - 已删除
1 个浏览器缓存



VBS.Downloader.Trojan
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\28.vir - 已删除
1 个浏览器缓存



Trojan.Swifi
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\32.vir - 已删除
1 个浏览器缓存



Suspicious.Cloud.5
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 启发式病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\11.vir - 已删除
1 个浏览器缓存



Linux.Chikdos.B!gen2
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\14.vir - 已删除
1 个浏览器缓存



Trojan.Gen.2
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
7 个文件
c:\users\housirvip\downloads\2015.9.1\01.vir - 已删除
c:\users\housirvip\downloads\2015.9.1\22.vir - 已删除
c:\users\housirvip\downloads\2015.9.1\34.vir - 已删除
c:\users\housirvip\downloads\2015.9.1\45.vir - 已删除
c:\users\housirvip\downloads\2015.9.1\46.vir - 已删除
c:\users\housirvip\downloads\2015.9.1\50.vir - 已删除
c:\users\housirvip\downloads\2015.9.1\04.vir - 已删除
1 个浏览器缓存



W32.Pilleuz
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\15.vir - 已删除
1 个浏览器缓存



Suspicious.Cloud.2
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 启发式病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\15.vir - 不需要操作
1 个浏览器缓存



W32.Spyrat
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 需要重新启动
-----------
22 个注册表项
HKEY_USERS\S-1-5-21-952814967-1775552893-638994780-1000\Software\INFCT K.L - 需要重新启动
HKEY_USERS\S-1-5-19\Software\INFCT K.L - 需要重新启动
HKEY_USERS\S-1-5-20\Software\INFCT K.L - 需要重新启动
HKEY_USERS\.DEFAULT\Software\INFCT K.L - 需要重新启动
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{XHIY7M7P-0CD3-6O7E-G1JR-5IQV0C3J3D2P} - 需要重新启动
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{5257J270-BCY8-B212-I8RM-O658CNV82K28} - 需要重新启动
HKEY_USERS\S-1-5-21-952814967-1775552893-638994780-1000\Software\Louka78 - 需要重新启动
HKEY_USERS\S-1-5-19\Software\Louka78 - 需要重新启动
HKEY_USERS\S-1-5-20\Software\Louka78 - 需要重新启动
HKEY_USERS\.DEFAULT\Software\Louka78 - 需要重新启动
HKEY_USERS\S-1-5-21-952814967-1775552893-638994780-1000\Software\lolzer - 需要重新启动
HKEY_USERS\S-1-5-19\Software\lolzer - 需要重新启动
HKEY_USERS\S-1-5-20\Software\lolzer - 需要重新启动
HKEY_USERS\.DEFAULT\Software\lolzer - 需要重新启动
HKEY_USERS\S-1-5-21-952814967-1775552893-638994780-1000\Software\--((Mutex))-- - 需要重新启动
HKEY_USERS\S-1-5-19\Software\--((Mutex))-- - 需要重新启动
HKEY_USERS\S-1-5-20\Software\--((Mutex))-- - 需要重新启动
HKEY_USERS\.DEFAULT\Software\--((Mutex))-- - 需要重新启动
HKEY_USERS\S-1-5-21-952814967-1775552893-638994780-1000\Software\XtremeRAT - 需要重新启动
HKEY_USERS\S-1-5-19\Software\XtremeRAT - 需要重新启动
HKEY_USERS\S-1-5-20\Software\XtremeRAT - 需要重新启动
HKEY_USERS\.DEFAULT\Software\XtremeRAT - 需要重新启动
2 个文件
c:\users\housirvip\downloads\2015.9.1\19.vir - 已删除
c:\users\housirvip\downloads\2015.9.1\20.vir - 已删除
1 个浏览器缓存



Trojan.Gen
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
2 个文件
c:\users\housirvip\downloads\2015.9.1\24.vir - 已删除
c:\users\housirvip\downloads\2015.9.1\29.vir - 已删除
1 个浏览器缓存



Backdoor.Ratenjay
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
2 个文件
c:\users\housirvip\downloads\2015.9.1\33.vir - 已删除
c:\users\housirvip\downloads\2015.9.1\36.vir - 已删除
1 个浏览器缓存



Trojan.Randsom.A
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\40.vir - 已删除
1 个浏览器缓存



Trojan.Gen.SMH.2
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\41.vir - 已删除
1 个浏览器缓存



Trojan Horse
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\42.vir - 已删除
1 个浏览器缓存



Suspicious.Epi.2
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 启发式病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\43.vir - 已删除
1 个浏览器缓存



Trojan.Cridex
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\44.vir - 已删除
1 个浏览器缓存



Suspicious.Cloud.2
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 启发式病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\44.vir - 不需要操作
1 个浏览器缓存



Downloader.Upatre
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
24 个注册表项
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusDisableNotify:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusDisableNotify:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirewallDisableNotify:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirewallDisableNotify:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusOverride:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->AntiVirusOverride:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirewallOverride:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirewallOverride:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirstRunDisabled:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\->FirstRunDisabled:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc->AntiVirusDisableNotify:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc->AntiVirusDisableNotify:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc->FirewallDisableNotify:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc->FirewallDisableNotify:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc->AntiVirusOverride:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc->FirewallOverride:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc->FirstRunDisabled:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc->FirstRunDisabled:0 - 已修复
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->DoNotAllowExceptions:1 - 已修复
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile->DoNotAllowExceptions:1 - 已修复
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile->DoNotAllowExceptions:1 - 已修复
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile->DoNotAllowExceptions:1 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc->AntiVirusOverride:0 - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc->FirewallOverride:0 - 已修复
5 个文件
c:\users\housirvip\appdata\local\temp\3605cef.tmp - 已删除
c:\users\housirvip\appdata\local\temp\cro5468.tmp - 已删除
c:\users\housirvip\appdata\local\temp\~df87676d585606587b.tmp - 已删除
c:\users\housirvip\appdata\local\temp\~dfbfd3350e0dc7b210.tmp - 已删除
c:\users\housirvip\downloads\2015.9.1\48.vir - 已删除
1 个浏览器缓存



Suspicious.Epi.2
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 启发式病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\05.vir - 已删除
1 个浏览器缓存



Suspicious.Epi.2
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 启发式病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\13.vir - 已删除
1 个浏览器缓存



Infostealer
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
11 个注册表项
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main->Enable Browser Extensions:yes - 已修复
HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main->Enable Browser Extensions:yes - 已修复
HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main->Enable Browser Extensions:yes - 已修复
HKEY_USERS\S-1-5-21-952814967-1775552893-638994780-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced->Hidden:1 - 已修复
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced->Hidden:1 - 已修复
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced->Hidden:1 - 已修复
HKEY_USERS\S-1-5-21-952814967-1775552893-638994780-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced->ShowSuperHidden:1 - 已修复
HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced->ShowSuperHidden:1 - 已修复
HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced->ShowSuperHidden:1 - 已修复
HKEY_USERS\S-1-5-21-952814967-1775552893-638994780-1000\Software\Microsoft\Internet Explorer\Main->Enable Browser Extensions:yes - 已修复
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL->CheckedValue:1 - 已修复
1 个文件
c:\users\housirvip\downloads\2015.9.1\08.vir - 已删除
1 个浏览器缓存



Trojan.Asprox.B
类型: 异常
风险: 高 (高 隐藏, 高 删除, 高 性能, 高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 个文件
c:\users\housirvip\downloads\2015.9.1\10.vir - 已删除
1 个浏览器缓存


[/mw_shl_code]

Llano_心情

1518589226 发表于 2015-9-1 19:44
[mw_shl_code=html,true]时间  文件路径  威胁类型  结果  对应进程  
2015-09-01 19: 43: 11  C:\Doc ...

v16+查杀确实不错啊
只可惜v16+没全功能版

神迹般存在

KIS 2015 killed 27x, fixed 5x, missed 18x.

家最美

赛门铁克SEP12 Kill31，剩余19