精睿样本测试（15.9.10）

潘达达

http://pan.baidu.com/s/1qW3OUSW 提取密码  kfem

密码：bbs.vc52.cn
数量：50

MXCERILYF!

金山毒霸10

cxy密斯

[mw_shl_code=css,true]Dr.Web Scanner SE for Windows v9.1.3.08170
Scanning Engine version: 10.0.9.8310
Virus Finding Engine version: 7.0.15.8310
-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Object(s) to scan:
- C:\Users\Shiloh\Desktop\2015.9.10

>C:\Users\Shiloh\Desktop\2015.9.10\01.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.10\01.vir:Zone.Identifier - Ok - 8ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\02.vir:Zone.Identifier - Ok - 8ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\03.vir is PDF container
C:\Users\Shiloh\Desktop\2015.9.10\03.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.10\03.vir - container - 9ms, 135376 bytes
C:\Users\Shiloh\Desktop\2015.9.10\03.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\01.vir\sprawy-S-110549-87200811.DOCX.exe - infected with Trojan.Siggen.65341
C:\Users\Shiloh\Desktop\2015.9.10\01.vir\sprawy-S-110549-87200811.DOCX.exe - infected
C:\Users\Shiloh\Desktop\2015.9.10\01.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.10\01.vir - infected archive - 53ms, 56701 bytes
C:\Users\Shiloh\Desktop\2015.9.10\04.vir:Zone.Identifier - Ok - 13ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\04.vir - Ok - 150ms, 122306 bytes
C:\Users\Shiloh\Desktop\2015.9.10\05.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\06.vir is ZIP archive
>>C:\Users\Shiloh\Desktop\2015.9.10\06.vir\Document _U6e90_U7ba1_U7406_U5668.doc.scr is BINARYRES container
C:\Users\Shiloh\Desktop\2015.9.10\06.vir\Document _U6e90_U7ba1_U7406_U5668.doc.scr\data001 - Ok
>>>C:\Users\Shiloh\Desktop\2015.9.10\06.vir\Document _U6e90_U7ba1_U7406_U5668.doc.scr\data002 is NET container
C:\Users\Shiloh\Desktop\2015.9.10\06.vir\Document _U6e90_U7ba1_U7406_U5668.doc.scr\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.10\06.vir\Document _U6e90_U7ba1_U7406_U5668.doc.scr - Ok
C:\Users\Shiloh\Desktop\2015.9.10\06.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.10\06.vir - archive - 83ms, 605468 bytes
C:\Users\Shiloh\Desktop\2015.9.10\06.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\07.vir is JAR container
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\META-INF\MANIFEST.MF - Ok
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\b.txt - Ok
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\a.txt - Ok
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\a\MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMj.class - Ok
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\b\MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMj.class - Ok
C:\Users\Shiloh\Desktop\2015.9.10\02.vir - infected with Trojan.Encoder.514
C:\Users\Shiloh\Desktop\2015.9.10\02.vir - infected - 314ms, 266240 bytes
C:\Users\Shiloh\Desktop\2015.9.10\07.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\c\MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMj.class - Ok
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\c\MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMg.class - Ok
C:\Users\Shiloh\Desktop\2015.9.10\05.vir - infected with BackDoor.Poison.686
C:\Users\Shiloh\Desktop\2015.9.10\05.vir - infected - 275ms, 6656 bytes
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\d\MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMj.class - Ok
C:\Users\Shiloh\Desktop\2015.9.10\08.vir:Zone.Identifier - Ok - 9ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\d\MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMg.class - Ok
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\Main.class - Ok
>C:\Users\Shiloh\Desktop\2015.9.10\09.vir is ZIP archive
>C:\Users\Shiloh\Desktop\2015.9.10\08.vir is PDF container
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMj.class - Ok
C:\Users\Shiloh\Desktop\2015.9.10\07.vir\MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMMg.class - Ok
C:\Users\Shiloh\Desktop\2015.9.10\07.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.10\07.vir - container - 114ms, 100312 bytes
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000001][00000056] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\09.vir:Zone.Identifier - Ok - 9ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000002][00000108] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\09.vir\New-order-110.scr - infected with Trojan.Inject2.2882
C:\Users\Shiloh\Desktop\2015.9.10\09.vir\New-order-110.scr - infected
C:\Users\Shiloh\Desktop\2015.9.10\09.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.10\09.vir - infected archive - 63ms, 513593 bytes
C:\Users\Shiloh\Desktop\2015.9.10\10.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\11.vir - probably infected with BATCH.Virus
C:\Users\Shiloh\Desktop\2015.9.10\11.vir - infected - 10ms, 1230 bytes
C:\Users\Shiloh\Desktop\2015.9.10\11.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\12.vir is RTF container
>>C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000003][000003C7] is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.10\12.vir\OLEstream-1 - Ok
C:\Users\Shiloh\Desktop\2015.9.10\12.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.10\12.vir - container - 17ms, 99949 bytes
C:\Users\Shiloh\Desktop\2015.9.10\12.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000003][000003C7]\JSTag_1[3a4][a37] - probably infected with SCRIPT.Virus
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000003][000003C7]\JSTag_1[3a4][a37] - infected
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000003][000003C7] - infected container
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000004][00000F6B] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000005][00001133] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000006][000014A0] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000007][00001593] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000008][0000176C] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[00000009][00001886] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\EmbeddedStream[0000000A][00001989] - Ok
>>C:\Users\Shiloh\Desktop\2015.9.10\08.vir\JavaStream[00000001][00012A39] is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\JavaStream[00000001][00012A39]\JSTAG_1[20][5fe] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\JavaStream[00000001][00012A39] - Ok
>>C:\Users\Shiloh\Desktop\2015.9.10\08.vir\JavaStream[00000002][00012C24] is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\JavaStream[00000002][00012C24]\JSTAG_1[20][368] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\JavaStream[00000002][00012C24] - Ok
>>C:\Users\Shiloh\Desktop\2015.9.10\08.vir\JavaStream[00000003][00012D7E] is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\JavaStream[00000003][00012D7E]\JSTAG_1[20][aed] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\JavaStream[00000003][00012D7E] - Ok
>>C:\Users\Shiloh\Desktop\2015.9.10\08.vir\FormPacket[00000001][00000009] is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\FormPacket[00000001][00000009]\JSTag_1[9b3][a37] - probably infected with SCRIPT.Virus
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\FormPacket[00000001][00000009]\JSTag_1[9b3][a37] - infected
C:\Users\Shiloh\Desktop\2015.9.10\08.vir\FormPacket[00000001][00000009] - infected container
C:\Users\Shiloh\Desktop\2015.9.10\08.vir - infected container
C:\Users\Shiloh\Desktop\2015.9.10\08.vir - infected container - 335ms, 529300 bytes
C:\Users\Shiloh\Desktop\2015.9.10\13.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\14.vir is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.10\14.vir\JSTAG_1[a41][3f7] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\14.vir\JSTAG_2[e65][a7] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\13.vir - infected with BackDoor.Poison.686
C:\Users\Shiloh\Desktop\2015.9.10\13.vir - infected - 276ms, 6656 bytes
C:\Users\Shiloh\Desktop\2015.9.10\14.vir\JSTAG_3[12a6][398] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\14.vir:Zone.Identifier - Ok - 9ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\14.vir\JSTAG_4[167d][bcf] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\14.vir\JSTAG_5[22b3][1ca] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\14.vir\JSTAG_6[35b6][109] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\14.vir\JSTAG_7[3df9][602] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\14.vir\JSTAG_8[efb0][12d] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\14.vir\JSTAG_9[fa26][10db] - Ok
>C:\Users\Shiloh\Desktop\2015.9.10\10.vir is BINARYRES container
>>C:\Users\Shiloh\Desktop\2015.9.10\10.vir\data001 is NET container
C:\Users\Shiloh\Desktop\2015.9.10\14.vir\IFrame_10[39] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\14.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.10\14.vir - container - 142ms, 68792 bytes
C:\Users\Shiloh\Desktop\2015.9.10\15.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\10.vir\data001\Bad_Enjoy - Ok
C:\Users\Shiloh\Desktop\2015.9.10\10.vir\data001 - Ok
>>C:\Users\Shiloh\Desktop\2015.9.10\10.vir\data002 is NET container
C:\Users\Shiloh\Desktop\2015.9.10\10.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.10\10.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.10\10.vir - container - 420ms, 878592 bytes
C:\Users\Shiloh\Desktop\2015.9.10\16.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\15.vir - infected with Trojan.DownLoader16.20395
C:\Users\Shiloh\Desktop\2015.9.10\15.vir - infected - 330ms, 151552 bytes
C:\Users\Shiloh\Desktop\2015.9.10\17.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\18.vir - infected with Exploit.PDF.10715
C:\Users\Shiloh\Desktop\2015.9.10\18.vir - infected - 1ms, 76137 bytes
C:\Users\Shiloh\Desktop\2015.9.10\18.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\19.vir - Ok - 25ms, 81920 bytes
C:\Users\Shiloh\Desktop\2015.9.10\19.vir:Zone.Identifier - Ok - 8ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\17.vir - infected with Trojan.DownLoader15.9872
C:\Users\Shiloh\Desktop\2015.9.10\17.vir - infected - 338ms, 541696 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\16.vir - packed by FLY-CODE
C:\Users\Shiloh\Desktop\2015.9.10\20.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\16.vir - Ok - 424ms, 211968 bytes
C:\Users\Shiloh\Desktop\2015.9.10\21.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\21.vir - infected with Trojan.DownLoader15.50285
C:\Users\Shiloh\Desktop\2015.9.10\21.vir - infected - 283ms, 27648 bytes
C:\Users\Shiloh\Desktop\2015.9.10\22.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\23.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.10\23.vir\Paymentconfirmation.exe - infected with Trojan.PWS.Stealer.15120
C:\Users\Shiloh\Desktop\2015.9.10\23.vir\Paymentconfirmation.exe - infected
C:\Users\Shiloh\Desktop\2015.9.10\23.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.10\23.vir - infected archive - 28ms, 322049 bytes
C:\Users\Shiloh\Desktop\2015.9.10\23.vir:Zone.Identifier - Ok - 7ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\24.vir is PDF container
>C:\Users\Shiloh\Desktop\2015.9.10\20.vir is BINARYRES container
C:\Users\Shiloh\Desktop\2015.9.10\20.vir\data001 - Ok
C:\Users\Shiloh\Desktop\2015.9.10\20.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.10\22.vir - infected with Trojan.DownLoad3.30917
C:\Users\Shiloh\Desktop\2015.9.10\22.vir - infected - 289ms, 18433 bytes
C:\Users\Shiloh\Desktop\2015.9.10\20.vir\data003 - Ok
C:\Users\Shiloh\Desktop\2015.9.10\24.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\24.vir\JavaStream[00000001][000106DC] - probably infected with SCRIPT.Virus
>>C:\Users\Shiloh\Desktop\2015.9.10\24.vir\JavaStream[00000001][000106DC] is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.10\24.vir\JavaStream[00000001][000106DC]\JSTAG_1[20][1770] - probably infected with SCRIPT.Virus
C:\Users\Shiloh\Desktop\2015.9.10\20.vir\data004 - infected with Trojan.DownLoader6.56876
C:\Users\Shiloh\Desktop\2015.9.10\20.vir\data004 - infected
C:\Users\Shiloh\Desktop\2015.9.10\24.vir\JavaStream[00000001][000106DC]\JSTAG_1[20][1770] - infected
C:\Users\Shiloh\Desktop\2015.9.10\24.vir\JavaStream[00000001][000106DC] - infected container
>C:\Users\Shiloh\Desktop\2015.9.10\25.vir is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.10\24.vir\LaunchPacket[00000001][00000001] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\24.vir - infected container
C:\Users\Shiloh\Desktop\2015.9.10\24.vir - infected container - 101ms, 99938 bytes
C:\Users\Shiloh\Desktop\2015.9.10\25.vir\JSTAG_1[145][1ef] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\20.vir\data005 - infected with Trojan.DownLoader13.52830
C:\Users\Shiloh\Desktop\2015.9.10\20.vir\data005 - infected
C:\Users\Shiloh\Desktop\2015.9.10\20.vir - infected container
C:\Users\Shiloh\Desktop\2015.9.10\20.vir - infected container - 478ms, 254976 bytes
C:\Users\Shiloh\Desktop\2015.9.10\25.vir:Zone.Identifier - Ok - 9ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\25.vir\JSTAG_2[120f][290] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\26.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\25.vir\JSTAG_3[2773][2db] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\25.vir\JSTAG_4[6476][5a] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\25.vir\JSTAG_5[689a][12e] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\25.vir\JSTAG_6[6a35][4c] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\25.vir\JSTAG_7[af83][13b] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\25.vir\JSClick_8[4b] - Ok
C:\Users\Shiloh\Desktop\2015.9.10\25.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.10\25.vir - container - 113ms, 46347 bytes
C:\Users\Shiloh\Desktop\2015.9.10\27.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\27.vir - infected with Win32.Virut.56
C:\Users\Shiloh\Desktop\2015.9.10\27.vir - infected - 331ms, 864768 bytes
C:\Users\Shiloh\Desktop\2015.9.10\28.vir:Zone.Identifier - Ok - 15ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\28.vir - Ok - 313ms, 6656 bytes
C:\Users\Shiloh\Desktop\2015.9.10\29.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\30.vir is PDF container
C:\Users\Shiloh\Desktop\2015.9.10\30.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.10\30.vir - container - 13ms, 132023 bytes
C:\Users\Shiloh\Desktop\2015.9.10\30.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\26.vir - infected with Trojan.Encoder.514
C:\Users\Shiloh\Desktop\2015.9.10\26.vir - infected - 386ms, 330752 bytes
C:\Users\Shiloh\Desktop\2015.9.10\31.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\32.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.10\32.vir\Bendigo_Report__40751301.scr - infected with Trojan.DownLoader16.19857
C:\Users\Shiloh\Desktop\2015.9.10\32.vir\Bendigo_Report__40751301.scr - infected
C:\Users\Shiloh\Desktop\2015.9.10\32.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.10\32.vir - infected archive - 24ms, 20918 bytes
C:\Users\Shiloh\Desktop\2015.9.10\32.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\33.vir - Ok - 6ms, 4278 bytes
C:\Users\Shiloh\Desktop\2015.9.10\33.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\34.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.10\34.vir\Incoming Fax_701-240-7130.scr - infected with Trojan.DownLoader16.19857
C:\Users\Shiloh\Desktop\2015.9.10\34.vir\Incoming Fax_701-240-7130.scr - infected
C:\Users\Shiloh\Desktop\2015.9.10\34.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.10\34.vir - infected archive - 19ms, 20920 bytes
C:\Users\Shiloh\Desktop\2015.9.10\34.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\31.vir - Ok - 317ms, 19968 bytes
C:\Users\Shiloh\Desktop\2015.9.10\35.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\29.vir - infected with Trojan.Siggen6.33552
C:\Users\Shiloh\Desktop\2015.9.10\29.vir - infected - 434ms, 737627 bytes
C:\Users\Shiloh\Desktop\2015.9.10\36.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\35.vir - infected with Trojan.Dyre.588
C:\Users\Shiloh\Desktop\2015.9.10\35.vir - infected - 344ms, 592384 bytes
C:\Users\Shiloh\Desktop\2015.9.10\37.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\38.vir is PDF container
C:\Users\Shiloh\Desktop\2015.9.10\38.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.10\38.vir - container - 10ms, 207586 bytes
C:\Users\Shiloh\Desktop\2015.9.10\38.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\39.vir - infected with Linux.BackDoor.Tsunami.133
C:\Users\Shiloh\Desktop\2015.9.10\39.vir - infected - 1ms, 40936 bytes
C:\Users\Shiloh\Desktop\2015.9.10\39.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\40.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.10\40.vir\Incoming Fax_701-240-7130.scr - infected with Trojan.DownLoader16.19857
C:\Users\Shiloh\Desktop\2015.9.10\40.vir\Incoming Fax_701-240-7130.scr - infected
C:\Users\Shiloh\Desktop\2015.9.10\40.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.10\40.vir - infected archive - 22ms, 20920 bytes
C:\Users\Shiloh\Desktop\2015.9.10\40.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\41.vir is RAR archive
>>C:\Users\Shiloh\Desktop\2015.9.10\41.vir\scanned copy.zip is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.10\41.vir\scanned copy.zip\scanned copy.exe - infected with Trojan.Siggen6.32796
C:\Users\Shiloh\Desktop\2015.9.10\41.vir\scanned copy.zip\scanned copy.exe - infected
C:\Users\Shiloh\Desktop\2015.9.10\41.vir\scanned copy.zip - infected archive
C:\Users\Shiloh\Desktop\2015.9.10\41.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.10\41.vir - infected archive - 43ms, 225833 bytes
C:\Users\Shiloh\Desktop\2015.9.10\41.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\42.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.10\42.vir\Remittance_SwiftcopyTT.scr - infected with Trojan.PWS.Multi.1690
C:\Users\Shiloh\Desktop\2015.9.10\42.vir\Remittance_SwiftcopyTT.scr - infected
C:\Users\Shiloh\Desktop\2015.9.10\42.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.10\42.vir - infected archive - 65ms, 1140244 bytes
C:\Users\Shiloh\Desktop\2015.9.10\42.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\43.vir is PDF container
C:\Users\Shiloh\Desktop\2015.9.10\43.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.10\43.vir - container - 9ms, 121269 bytes
C:\Users\Shiloh\Desktop\2015.9.10\43.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\36.vir - infected with Trojan.PWS.Steam.2912
C:\Users\Shiloh\Desktop\2015.9.10\36.vir - infected - 308ms, 442368 bytes
C:\Users\Shiloh\Desktop\2015.9.10\44.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\45.vir is OPEN XML container
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\[Content_Types].xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\_rels\.rels - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\_rels\document.xml.rels - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\document.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\_rels\vbaProject.bin.rels - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\vbaProject.bin - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\theme\theme1.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\vbaData.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\settings.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\webSettings.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\styles.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\numbering.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\docProps\app.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\stylesWithEffects.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\word\fontTable.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir\docProps\core.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.10\45.vir - container - 141ms, 25581 bytes
C:\Users\Shiloh\Desktop\2015.9.10\45.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\46.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.10\46.vir\pi3.exe - infected with BackDoor.Poison.686
C:\Users\Shiloh\Desktop\2015.9.10\46.vir\pi3.exe - infected
C:\Users\Shiloh\Desktop\2015.9.10\46.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.10\46.vir - infected archive - 7ms, 4073 bytes
C:\Users\Shiloh\Desktop\2015.9.10\46.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\47.vir - Ok - 37ms, 145408 bytes
C:\Users\Shiloh\Desktop\2015.9.10\47.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\37.vir - Ok - 473ms, 261120 bytes
C:\Users\Shiloh\Desktop\2015.9.10\48.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\44.vir - infected with Trojan.DownLoader16.20401
C:\Users\Shiloh\Desktop\2015.9.10\44.vir - infected - 302ms, 173670 bytes
C:\Users\Shiloh\Desktop\2015.9.10\49.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.10\48.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.9.10\48.vir - probably infected with DLOADER.Trojan
C:\Users\Shiloh\Desktop\2015.9.10\48.vir - infected - 346ms, 10752 bytes
C:\Users\Shiloh\Desktop\2015.9.10\50.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.10\49.vir - Ok - 375ms, 105912 bytes
C:\Users\Shiloh\Desktop\2015.9.10\50.vir - Ok - 377ms, 462848 bytes

Total 11343949 bytes in 100 files scanned (190 objects, 9 containers)
Total 71 files (143 objects) are clean
Total 25 files (26 objects) are infected
Total 4 files (6 objects) are suspicious
Scan time is 00:00:03.291
-----------------------------------------------------------------------------
Start curing
-----------------------------------------------------------------------------
C:\Users\Shiloh\Desktop\2015.9.10\01.vir - quarantined - 940 ms
C:\Users\Shiloh\Desktop\2015.9.10\02.vir - quarantined - 59 ms
C:\Users\Shiloh\Desktop\2015.9.10\05.vir - quarantined - 36 ms
C:\Users\Shiloh\Desktop\2015.9.10\09.vir - quarantined - 48 ms
C:\Users\Shiloh\Desktop\2015.9.10\11.vir - quarantined - 38 ms
C:\Users\Shiloh\Desktop\2015.9.10\08.vir - quarantined - 47 ms
C:\Users\Shiloh\Desktop\2015.9.10\13.vir - quarantined - 35 ms
C:\Users\Shiloh\Desktop\2015.9.10\15.vir - quarantined - 49 ms
C:\Users\Shiloh\Desktop\2015.9.10\18.vir - quarantined - 35 ms
C:\Users\Shiloh\Desktop\2015.9.10\17.vir - quarantined - 65 ms
C:\Users\Shiloh\Desktop\2015.9.10\21.vir - quarantined - 44 ms
C:\Users\Shiloh\Desktop\2015.9.10\23.vir - quarantined - 41 ms
C:\Users\Shiloh\Desktop\2015.9.10\22.vir - quarantined - 41 ms
C:\Users\Shiloh\Desktop\2015.9.10\24.vir - quarantined - 34 ms
C:\Users\Shiloh\Desktop\2015.9.10\20.vir - quarantined - 38 ms
C:\Users\Shiloh\Desktop\2015.9.10\27.vir - quarantined - 88 ms
C:\Users\Shiloh\Desktop\2015.9.10\26.vir - quarantined - 77 ms
C:\Users\Shiloh\Desktop\2015.9.10\32.vir - quarantined - 37 ms
C:\Users\Shiloh\Desktop\2015.9.10\34.vir - quarantined - 37 ms
C:\Users\Shiloh\Desktop\2015.9.10\29.vir - quarantined - 96 ms
C:\Users\Shiloh\Desktop\2015.9.10\35.vir - quarantined - 116 ms
C:\Users\Shiloh\Desktop\2015.9.10\39.vir - quarantined - 35 ms
C:\Users\Shiloh\Desktop\2015.9.10\40.vir - quarantined - 33 ms
C:\Users\Shiloh\Desktop\2015.9.10\41.vir - quarantined - 37 ms
C:\Users\Shiloh\Desktop\2015.9.10\42.vir - quarantined - 59 ms
C:\Users\Shiloh\Desktop\2015.9.10\36.vir - quarantined - 59 ms
C:\Users\Shiloh\Desktop\2015.9.10\46.vir - quarantined - 36 ms
C:\Users\Shiloh\Desktop\2015.9.10\44.vir - quarantined - 56 ms
C:\Users\Shiloh\Desktop\2015.9.10\48.vir - quarantined - 29 ms

Total 11343949 bytes in 100 files scanned (190 objects, 9 containers)
Total 71 files (143 objects) are clean
Total 25 files (26 objects) are infected
Total 4 files (6 objects) are suspicious
Total 29 files (32 objects) are neutralized
Scan time is 00:00:03.291
[/mw_shl_code]

XywCloud

BAV Kill 26x

MXCERILYF!

360TS（只开启自主引擎）
文件后缀为vir时：杀21个

文件后缀为exe时：补杀8个

文件后缀为zip时：补杀10个

无后缀时：补杀2个

共查杀41个，剩余9个

liebesu

cxy密斯 发表于 2015-9-10 09:37
[mw_shl_code=css,true]Dr.Web Scanner SE for Windows v9.1.3.08170
Scanning Engine version: 10.0.9.83 ...

结果怎么搞出来的

huiranduyi

还以为熊猫IS有啥亮点来着，太不适合中国市场了。昨天21，今天16，好失望。。。。非专业人士或者无良好上网习惯的同仁，最好别用它。。。一味允许防护，啥时候中毒都不知道

欧阳宣

McAfee
检测27个，修复5个。
[mw_shl_code=css,true]9/9/2015        10:08:15 PM        "D:\Virus\2015.9.10\29.vir"        "Artemis!66982BDD5B9B"        "3"

9/9/2015        10:08:21 PM        "D:\Virus\2015.9.10\33.vir"        "Ransom-FOO!htm"        "2"

9/9/2015        10:08:21 PM        "D:\Virus\2015.9.10\08.vir"        "Exploit-PDF.pp!stream"        "2"

9/9/2015        10:08:21 PM        "D:\Virus\2015.9.10\18.vir"        "Exploit-PDF.pp!stream"        "2"

9/9/2015        10:08:22 PM        "D:\Virus\2015.9.10\14.vir"        "JS/Iframe.gen.ax"        "2"

9/9/2015        10:08:27 PM        "D:\Virus\2015.9.10\45.vir"        "W97M/Downloader.c"        "2"

9/9/2015        10:08:28 PM        "D:\Virus\2015.9.10\07.vir"        "BackDoor-FCRJ!Adwind"        "2"

9/9/2015        10:08:40 PM        "D:\Virus\2015.9.10\05.vir"        "BackDoor-DSS.gen.a"        "2"

9/9/2015        10:08:41 PM        "D:\Virus\2015.9.10\49.vir"        "Artemis!89A52F88942E"        "2"

9/9/2015        10:08:41 PM        "D:\Virus\2015.9.10\13.vir"        "BackDoor-DSS.gen.a"        "2"

9/9/2015        10:08:41 PM        "D:\Virus\2015.9.10\48.vir"        "Artemis!76B85A384BFC"        "2"

9/9/2015        10:08:42 PM        "D:\Virus\2015.9.10\17.vir"        "Artemis!AC84B834D11D"        "2"

9/9/2015        10:08:42 PM        "D:\Virus\2015.9.10\27.vir"        "W32/Yahlover.worm"        "1"

9/9/2015        10:08:43 PM        "D:\Virus\2015.9.10\10.vir"        "Artemis!31E1A0FEC72F"        "2"

9/9/2015        10:08:43 PM        "D:\Virus\2015.9.10\37.vir"        "Artemis!5B36C9D24A21"        "2"

9/9/2015        10:08:43 PM        "D:\Virus\2015.9.10\21.vir"        "Artemis!FB69FD19EE07"        "2"

9/9/2015        10:08:44 PM        "D:\Virus\2015.9.10\20.vir"        "Artemis!D61061AA4EBF"        "1"

9/9/2015        10:08:45 PM        "D:\Virus\2015.9.10\36.vir"        "Artemis!A06399E8BF18"        "2"

9/9/2015        10:08:45 PM        "D:\Virus\2015.9.10\26.vir"        "Artemis!6EBDE8414003"        "2"

9/9/2015        10:08:46 PM        "D:\Virus\2015.9.10\28.vir"        "Artemis!D3C172F15532"        "2"

9/9/2015        10:08:57 PM        "D:\Virus\2015.9.10\02.vir"        "Generic.xb"        "2"

9/9/2015        10:08:57 PM        "D:\Virus\2015.9.10\22.vir"        "BackDoor-FALR!1EDE2C69D50E"        "2"

9/9/2015        10:08:58 PM        "D:\Virus\2015.9.10\46.vir"        "BackDoor-DSS.gen.a"        "2"

9/9/2015        10:09:02 PM        "D:\Virus\2015.9.10\09.vir"        "Artemis!2C64DEA8C4CB"        "2"

9/9/2015        10:09:03 PM        "D:\Virus\2015.9.10\41.vir"        "Artemis!96408E98DC73"        "2"

9/9/2015        10:09:03 PM        "D:\Virus\2015.9.10\29.vir"        "Artemis!66982BDD5B9B"        "3"

9/9/2015        10:09:03 PM        "D:\Virus\2015.9.10\22.vir"        "BackDoor-FALR!1EDE2C69D50E"        "2"

9/9/2015        10:09:03 PM        "D:\Virus\2015.9.10\02.vir"        "Generic.xb"        "2"

9/9/2015        10:09:05 PM        "D:\Virus\2015.9.10\23.vir"        "Artemis!58D41D4D0A3E"        "2"[/mw_shl_code]

cxy密斯

liebesu 发表于 2015-9-10 09:51
结果怎么搞出来的

扫描日志啊

狐狸糊涂

BD杀37个(其中修复5),余13