精睿样本测试（15.9.15）

潘达达

http://kuai.xunlei.com/d/zuh.AWWAXG33VQQA97b

http://pan.baidu.com/s/1kT4FrYv 提取密码  i1yd

密码：bbs.vc52.cn
数量：50

MXCERILYF!

金山毒霸10

XywCloud

BAV Kill 28x

MXCERILYF!

360TS（只开启自主引擎）
文件后缀为vir时：杀32个

文件后缀为exe时：补杀5个

文件后缀为zip时：补杀5个

实际共查杀41个，剩余9个

狐狸糊涂

楼上每天都那么屌呀
BD杀32（其中修复4），余18

MXCERILYF!

卡巴斯基
杀24，修复5，剩余21

cxy密斯

[mw_shl_code=css,true]Dr.Web Scanner SE for Windows v9.1.3.08170
Scanning Engine version: 10.0.9.8310
Virus Finding Engine version: 7.0.15.8310
-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Object(s) to scan:
- C:\Users\Shiloh\Desktop\2015.9.15

C:\Users\Shiloh\Desktop\2015.9.15\01.vir:Zone.Identifier - Ok - 11ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\02.vir:Zone.Identifier - Ok - 8ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\02.vir - infected with Trojan.PWS.Stealer.1932
C:\Users\Shiloh\Desktop\2015.9.15\02.vir - infected - 303ms, 91648 bytes
C:\Users\Shiloh\Desktop\2015.9.15\03.vir:Zone.Identifier - Ok - 17ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\01.vir - infected with Trojan.PWS.Stealer.13336
C:\Users\Shiloh\Desktop\2015.9.15\01.vir - infected - 351ms, 328192 bytes
C:\Users\Shiloh\Desktop\2015.9.15\04.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\03.vir - infected with Trojan.Siggen4.32473
C:\Users\Shiloh\Desktop\2015.9.15\03.vir - infected - 358ms, 26112 bytes
C:\Users\Shiloh\Desktop\2015.9.15\05.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\05.vir - infected with Trojan.DownLoader16.26314
C:\Users\Shiloh\Desktop\2015.9.15\05.vir - infected - 346ms, 238592 bytes
C:\Users\Shiloh\Desktop\2015.9.15\06.vir:Zone.Identifier - Ok - 7ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\06.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.9.15\04.vir - Ok - 487ms, 475136 bytes
C:\Users\Shiloh\Desktop\2015.9.15\07.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\08.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.15\06.vir - infected with BackDoor.Siggen.56198
C:\Users\Shiloh\Desktop\2015.9.15\06.vir - infected - 462ms, 49664 bytes
C:\Users\Shiloh\Desktop\2015.9.15\08.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\08.vir\Homicide-case_0725810.scr - infected with Trojan.DownLoader16.22940
C:\Users\Shiloh\Desktop\2015.9.15\08.vir\Homicide-case_0725810.scr - infected
C:\Users\Shiloh\Desktop\2015.9.15\08.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.15\08.vir - infected archive - 45ms, 39685 bytes
C:\Users\Shiloh\Desktop\2015.9.15\09.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\07.vir is BINARYRES container
>>C:\Users\Shiloh\Desktop\2015.9.15\07.vir\data001 is NET container
C:\Users\Shiloh\Desktop\2015.9.15\07.vir\data001 - Ok
C:\Users\Shiloh\Desktop\2015.9.15\07.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.15\07.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\07.vir - container - 391ms, 293888 bytes
C:\Users\Shiloh\Desktop\2015.9.15\10.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\09.vir is BINARYRES container
C:\Users\Shiloh\Desktop\2015.9.15\09.vir\data001 - Ok
C:\Users\Shiloh\Desktop\2015.9.15\09.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.15\09.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\09.vir - container - 299ms, 27136 bytes
C:\Users\Shiloh\Desktop\2015.9.15\11.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\12.vir - infected with JS.Redirector.252
C:\Users\Shiloh\Desktop\2015.9.15\12.vir - infected - 2ms, 270170 bytes
C:\Users\Shiloh\Desktop\2015.9.15\12.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\10.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.9.15\10.vir - Ok - 553ms, 286208 bytes
C:\Users\Shiloh\Desktop\2015.9.15\13.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\11.vir is BINARYRES container
C:\Users\Shiloh\Desktop\2015.9.15\11.vir\data001 - Ok
>>C:\Users\Shiloh\Desktop\2015.9.15\11.vir\data002 is NET container
C:\Users\Shiloh\Desktop\2015.9.15\11.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.15\11.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\11.vir - container - 378ms, 340992 bytes
C:\Users\Shiloh\Desktop\2015.9.15\14.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\15.vir is RAR archive
C:\Users\Shiloh\Desktop\2015.9.15\15.vir\Minecraft FlyHack MP\Install dlls\Core.dll - Ok
>C:\Users\Shiloh\Desktop\2015.9.15\13.vir - packed by FLY-CODE
>>C:\Users\Shiloh\Desktop\2015.9.15\13.vir - packed by VMPROTECT
>>C:\Users\Shiloh\Desktop\2015.9.15\15.vir\Minecraft FlyHack MP\Install dlls\core.exe is BINARYRES container
C:\Users\Shiloh\Desktop\2015.9.15\15.vir\Minecraft FlyHack MP\Install dlls\core.exe\data001 - Ok
>>>C:\Users\Shiloh\Desktop\2015.9.15\15.vir\Minecraft FlyHack MP\Install dlls\core.exe\data002 is NET container
C:\Users\Shiloh\Desktop\2015.9.15\15.vir\Minecraft FlyHack MP\Install dlls\core.exe\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.15\15.vir\Minecraft FlyHack MP\Install dlls\core.exe - Ok
C:\Users\Shiloh\Desktop\2015.9.15\15.vir\Minecraft FlyHack MP\Install dlls\Install.dll - Ok
C:\Users\Shiloh\Desktop\2015.9.15\15.vir\Minecraft FlyHack MP\Minecraft MP FlyHack.lnk - Ok
C:\Users\Shiloh\Desktop\2015.9.15\15.vir\Minecraft FlyHack MP\Read Me.txt - Ok
C:\Users\Shiloh\Desktop\2015.9.15\15.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\15.vir - archive - 196ms, 491024 bytes
C:\Users\Shiloh\Desktop\2015.9.15\15.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\14.vir - Ok - 295ms, 30208 bytes
C:\Users\Shiloh\Desktop\2015.9.15\16.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>>>C:\Users\Shiloh\Desktop\2015.9.15\13.vir - packed by FLY-CODE
C:\Users\Shiloh\Desktop\2015.9.15\13.vir - Ok - 645ms, 285184 bytes
C:\Users\Shiloh\Desktop\2015.9.15\17.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\18.vir - packed by BINARY PACKAGE
>>C:\Users\Shiloh\Desktop\2015.9.15\18.vir is BINARYRES container
C:\Users\Shiloh\Desktop\2015.9.15\18.vir\data001 - infected with Win32.HLLW.Bumble
C:\Users\Shiloh\Desktop\2015.9.15\18.vir\data001 - infected
C:\Users\Shiloh\Desktop\2015.9.15\18.vir - infected container
C:\Users\Shiloh\Desktop\2015.9.15\18.vir - infected container - 40ms, 65538 bytes
C:\Users\Shiloh\Desktop\2015.9.15\18.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\16.vir - infected with Trojan.PWS.Stealer.1932
C:\Users\Shiloh\Desktop\2015.9.15\16.vir - infected - 312ms, 91648 bytes
C:\Users\Shiloh\Desktop\2015.9.15\19.vir:Zone.Identifier - Ok - 7ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\17.vir is BINARYRES container
C:\Users\Shiloh\Desktop\2015.9.15\17.vir\data001 - Ok
>>C:\Users\Shiloh\Desktop\2015.9.15\17.vir\data002 is NET container
C:\Users\Shiloh\Desktop\2015.9.15\17.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.15\17.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\17.vir - container - 327ms, 29184 bytes
C:\Users\Shiloh\Desktop\2015.9.15\20.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\19.vir - Ok - 303ms, 5129 bytes
C:\Users\Shiloh\Desktop\2015.9.15\21.vir:Zone.Identifier - Ok - 9ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\20.vir - infected with Trojan.PWS.Stealer.1932
C:\Users\Shiloh\Desktop\2015.9.15\20.vir - infected - 308ms, 91648 bytes
C:\Users\Shiloh\Desktop\2015.9.15\22.vir:Zone.Identifier - Ok - 9ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\21.vir - infected with Trojan.DownLoader16.25875
C:\Users\Shiloh\Desktop\2015.9.15\21.vir - infected - 329ms, 602112 bytes
C:\Users\Shiloh\Desktop\2015.9.15\23.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\23.vir is PDF container
>C:\Users\Shiloh\Desktop\2015.9.15\24.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.15\23.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\23.vir - container - 64ms, 95429 bytes
C:\Users\Shiloh\Desktop\2015.9.15\24.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\24.vir\Payslip_60051205170820151_39245.scr - infected with Trojan.Upatre.8046
C:\Users\Shiloh\Desktop\2015.9.15\24.vir\Payslip_60051205170820151_39245.scr - infected
C:\Users\Shiloh\Desktop\2015.9.15\24.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.15\24.vir - infected archive - 36ms, 26832 bytes
C:\Users\Shiloh\Desktop\2015.9.15\25.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\25.vir - infected with BackDoor.Bebloh.47
C:\Users\Shiloh\Desktop\2015.9.15\25.vir - infected - 322ms, 270336 bytes
C:\Users\Shiloh\Desktop\2015.9.15\26.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\26.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.9.15\26.vir - infected with Trojan.PWS.Stealer.1932
C:\Users\Shiloh\Desktop\2015.9.15\26.vir - infected - 459ms, 35328 bytes
C:\Users\Shiloh\Desktop\2015.9.15\27.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\27.vir - packed by UPX
>C:\Users\Shiloh\Desktop\2015.9.15\28.vir is BASE64 container
C:\Users\Shiloh\Desktop\2015.9.15\28.vir\0.part - Ok
C:\Users\Shiloh\Desktop\2015.9.15\28.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\28.vir - mail - 228ms, 155621 bytes
C:\Users\Shiloh\Desktop\2015.9.15\28.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\29.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.15\27.vir - infected with Trojan.PWS.Stealer.1932
C:\Users\Shiloh\Desktop\2015.9.15\27.vir - infected - 447ms, 34816 bytes
C:\Users\Shiloh\Desktop\2015.9.15\29.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\30.vir is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.15\30.vir\JSFile_1[0][101b] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\30.vir\JSEval_2[752] - infected with JS.DownLoader.499
C:\Users\Shiloh\Desktop\2015.9.15\30.vir\JSEval_2[752] - infected
C:\Users\Shiloh\Desktop\2015.9.15\30.vir - infected container
C:\Users\Shiloh\Desktop\2015.9.15\30.vir - infected container - 49ms, 4123 bytes
C:\Users\Shiloh\Desktop\2015.9.15\30.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\31.vir - infected with BackDoor.NJRat.355
C:\Users\Shiloh\Desktop\2015.9.15\31.vir - infected - 278ms, 10240 bytes
C:\Users\Shiloh\Desktop\2015.9.15\31.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\29.vir\___馹_.scr - Ok
C:\Users\Shiloh\Desktop\2015.9.15\29.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\29.vir - archive - 499ms, 332621 bytes
C:\Users\Shiloh\Desktop\2015.9.15\32.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\33.vir is RAR archive
C:\Users\Shiloh\Desktop\2015.9.15\33.vir\Comprovante_DOC_.vbs - infected with VBS.DownLoader.388
C:\Users\Shiloh\Desktop\2015.9.15\33.vir\Comprovante_DOC_.vbs - infected
C:\Users\Shiloh\Desktop\2015.9.15\33.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.15\33.vir - infected archive - 22ms, 2404 bytes
C:\Users\Shiloh\Desktop\2015.9.15\33.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\32.vir - infected with BackDoor.NJRat.355
C:\Users\Shiloh\Desktop\2015.9.15\32.vir - infected - 275ms, 13312 bytes
C:\Users\Shiloh\Desktop\2015.9.15\34.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\35.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.15\35.vir\Fax-800312316.scr - infected with Trojan.PWS.Panda.8013
C:\Users\Shiloh\Desktop\2015.9.15\35.vir\Fax-800312316.scr - infected
C:\Users\Shiloh\Desktop\2015.9.15\35.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.15\35.vir - infected archive - 26ms, 20367 bytes
C:\Users\Shiloh\Desktop\2015.9.15\35.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\36.vir - infected with Trojan.Dridex.191
C:\Users\Shiloh\Desktop\2015.9.15\36.vir - infected - 296ms, 224768 bytes
C:\Users\Shiloh\Desktop\2015.9.15\36.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\22.vir - packed by FLY-CODE
>C:\Users\Shiloh\Desktop\2015.9.15\37.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.9.15\37.vir - Ok - 670ms, 206336 bytes
C:\Users\Shiloh\Desktop\2015.9.15\37.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\38.vir is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.15\38.vir\JSTAG_1[b2][203] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\38.vir\JSTAG_2[368][547] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\38.vir\JSTAG_3[8f6][1c6] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\38.vir\JSTAG_4[efe][4b] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\38.vir\JSTAG_5[fd6][5ec] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\38.vir\JSTAG_6[2638][84] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\38.vir\JSTag_7[36d][542] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\38.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\38.vir - container - 152ms, 23954 bytes
C:\Users\Shiloh\Desktop\2015.9.15\38.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\39.vir - infected with BackDoor.Tdss.11228
C:\Users\Shiloh\Desktop\2015.9.15\39.vir - infected - 318ms, 175616 bytes
C:\Users\Shiloh\Desktop\2015.9.15\39.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\40.vir - Ok - 34ms, 116224 bytes
C:\Users\Shiloh\Desktop\2015.9.15\40.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\41.vir - packed by RLPACK
>>C:\Users\Shiloh\Desktop\2015.9.15\41.vir is ZLIB container
C:\Users\Shiloh\Desktop\2015.9.15\41.vir\data001 - Ok
C:\Users\Shiloh\Desktop\2015.9.15\41.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.9.15\41.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\41.vir - container - 542ms, 54040 bytes
C:\Users\Shiloh\Desktop\2015.9.15\41.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\34.vir - packed by FLY-CODE
>C:\Users\Shiloh\Desktop\2015.9.15\42.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.9.15\42.vir - infected with Trojan.PWS.Stealer.1932
C:\Users\Shiloh\Desktop\2015.9.15\42.vir - infected - 422ms, 34816 bytes
C:\Users\Shiloh\Desktop\2015.9.15\42.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\43.vir is JS-HTML container
C:\Users\Shiloh\Desktop\2015.9.15\43.vir\JSTAG_1[922][5e8] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\43.vir\JSWrite_2[47c] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\43.vir\JSWrite_3[332] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\43.vir\JSWrite_4[20a] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\43.vir\JSWrite_5[fc] - Ok
C:\Users\Shiloh\Desktop\2015.9.15\43.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\43.vir - container - 92ms, 6155 bytes
C:\Users\Shiloh\Desktop\2015.9.15\43.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\44.vir is OPEN XML container
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\[Content_Types].xml - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\_rels\.rels - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\_rels\document.xml.rels - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\document.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\media\image1.png - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\theme\theme1.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\media\image10.png - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\media\image8.png - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\media\image7.png - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\media\image9.jpeg - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\media\image5.jpeg - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\media\image6.png - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\media\image3.png - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\media\image2.gif - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\media\image4.png - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\settings.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\fontTable.xml - Ok
>>C:\Users\Shiloh\Desktop\2015.9.15\22.vir - packed by BINARYRES
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\webSettings.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\docProps\app.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\docProps\core.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir\word\styles.xml - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir - Ok
C:\Users\Shiloh\Desktop\2015.9.15\44.vir - container - 212ms, 848042 bytes
C:\Users\Shiloh\Desktop\2015.9.15\44.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\45.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.9.15\45.vir\Fax-800312316.scr - infected with Trojan.Upatre.7993
C:\Users\Shiloh\Desktop\2015.9.15\45.vir\Fax-800312316.scr - infected
C:\Users\Shiloh\Desktop\2015.9.15\45.vir - infected archive
C:\Users\Shiloh\Desktop\2015.9.15\45.vir - infected archive - 37ms, 27912 bytes
C:\Users\Shiloh\Desktop\2015.9.15\45.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>>>C:\Users\Shiloh\Desktop\2015.9.15\22.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.9.15\22.vir - infected with Win32.Sector.22
C:\Users\Shiloh\Desktop\2015.9.15\22.vir - infected - 4582ms, 77824 bytes
C:\Users\Shiloh\Desktop\2015.9.15\46.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\46.vir - infected with Trojan.Inject1.42975
C:\Users\Shiloh\Desktop\2015.9.15\46.vir - infected - 348ms, 52736 bytes
C:\Users\Shiloh\Desktop\2015.9.15\47.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.9.15\47.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.9.15\47.vir - infected with Trojan.PWS.Stealer.1932
C:\Users\Shiloh\Desktop\2015.9.15\47.vir - infected - 440ms, 34816 bytes
C:\Users\Shiloh\Desktop\2015.9.15\48.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\48.vir - infected with Win32.Parite.3
C:\Users\Shiloh\Desktop\2015.9.15\48.vir - infected - 322ms, 199646 bytes
C:\Users\Shiloh\Desktop\2015.9.15\49.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\49.vir - infected with BackDoor.Tdss.11228
C:\Users\Shiloh\Desktop\2015.9.15\49.vir - infected - 334ms, 134144 bytes
C:\Users\Shiloh\Desktop\2015.9.15\50.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.9.15\50.vir - Ok - 533ms, 574464 bytes
>>C:\Users\Shiloh\Desktop\2015.9.15\34.vir - packed by BINARYRES
>>>C:\Users\Shiloh\Desktop\2015.9.15\34.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.9.15\34.vir - infected with Win32.Sector.22
C:\Users\Shiloh\Desktop\2015.9.15\34.vir - infected - 4436ms, 70656 bytes

Total 8023976 bytes in 100 files scanned (160 objects, 5 containers)
Total 70 files (123 objects) are clean
Total 30 files are infected
Scan time is 00:00:08.110
-----------------------------------------------------------------------------
Start curing
-----------------------------------------------------------------------------
C:\Users\Shiloh\Desktop\2015.9.15\02.vir - quarantined - 961 ms
C:\Users\Shiloh\Desktop\2015.9.15\01.vir - quarantined - 58 ms
C:\Users\Shiloh\Desktop\2015.9.15\03.vir - quarantined - 60 ms
C:\Users\Shiloh\Desktop\2015.9.15\05.vir - quarantined - 63 ms
C:\Users\Shiloh\Desktop\2015.9.15\06.vir - quarantined - 165 ms
C:\Users\Shiloh\Desktop\2015.9.15\08.vir - quarantined - 28 ms
C:\Users\Shiloh\Desktop\2015.9.15\12.vir - quarantined - 35 ms
C:\Users\Shiloh\Desktop\2015.9.15\18.vir - quarantined - 31 ms
C:\Users\Shiloh\Desktop\2015.9.15\16.vir - quarantined - 43 ms
C:\Users\Shiloh\Desktop\2015.9.15\20.vir - quarantined - 41 ms
C:\Users\Shiloh\Desktop\2015.9.15\21.vir - quarantined - 64 ms
C:\Users\Shiloh\Desktop\2015.9.15\24.vir - quarantined - 27 ms
C:\Users\Shiloh\Desktop\2015.9.15\25.vir - quarantined - 63 ms
C:\Users\Shiloh\Desktop\2015.9.15\26.vir - quarantined - 178 ms
C:\Users\Shiloh\Desktop\2015.9.15\27.vir - quarantined - 159 ms
C:\Users\Shiloh\Desktop\2015.9.15\30.vir - quarantined - 30 ms
C:\Users\Shiloh\Desktop\2015.9.15\31.vir - quarantined - 33 ms
C:\Users\Shiloh\Desktop\2015.9.15\33.vir - quarantined - 27 ms
C:\Users\Shiloh\Desktop\2015.9.15\32.vir - quarantined - 33 ms
C:\Users\Shiloh\Desktop\2015.9.15\35.vir - quarantined - 28 ms
C:\Users\Shiloh\Desktop\2015.9.15\36.vir - quarantined - 43 ms
C:\Users\Shiloh\Desktop\2015.9.15\39.vir - quarantined - 67 ms
C:\Users\Shiloh\Desktop\2015.9.15\42.vir - quarantined - 152 ms
C:\Users\Shiloh\Desktop\2015.9.15\45.vir - quarantined - 30 ms
C:\Users\Shiloh\Desktop\2015.9.15\22.vir - quarantined - 3235 ms
C:\Users\Shiloh\Desktop\2015.9.15\46.vir - quarantined - 79 ms
C:\Users\Shiloh\Desktop\2015.9.15\47.vir - quarantined - 154 ms
C:\Users\Shiloh\Desktop\2015.9.15\48.vir - quarantined - 124 ms
C:\Users\Shiloh\Desktop\2015.9.15\49.vir - quarantined - 83 ms
C:\Users\Shiloh\Desktop\2015.9.15\34.vir - quarantined - 3217 ms

Total 8023976 bytes in 100 files scanned (160 objects, 5 containers)
Total 70 files (123 objects) are clean
Total 30 files are infected
Total 30 files are neutralized
Scan time is 00:00:08.110
[/mw_shl_code]

huiranduyi

AVG2015个人版，右键30，清除30无修复，未改后缀

欧阳宣

mcafee28个，修复3个。
[mw_shl_code=css,true]9/14/2015        10:43:35 PM        "D:\Virus\2015.9.15\35.vir"        "Upatre-FADK!4DBDF9E73DB4"        "2"

9/14/2015        10:43:35 PM        "D:\Virus\2015.9.15\31.vir"        "Artemis!70AC22372570"        "3"

9/14/2015        10:43:35 PM        "D:\Virus\2015.9.15\08.vir"        "Upatre-FADN!C8A73551D31D"        "2"

9/14/2015        10:43:36 PM        "D:\Virus\2015.9.15\45.vir"        "GenericR-ELL!FCF13179DA6C"        "2"

9/14/2015        10:43:36 PM        "D:\Virus\2015.9.15\28.vir"        "W97M/Bartallex.al"        "2"

9/14/2015        10:42:48 PM        "D:\Virus\2015.9.15\31.vir"        "Artemis!70AC22372570"        "3"

9/14/2015        10:42:54 PM        "D:\Virus\2015.9.15\30.vir"        "JS/Nemucod.h"        "2"

9/14/2015        10:42:56 PM        "D:\Virus\2015.9.15\40.vir"        "W97M/Downloader.act"        "2"

9/14/2015        10:43:04 PM        "D:\Virus\2015.9.15\48.vir"        "W32/Pate.c"        "1"

9/14/2015        10:43:12 PM        "D:\Virus\2015.9.15\20.vir"        "PWS-Zbot.gen.atz"        "2"

9/14/2015        10:43:13 PM        "D:\Virus\2015.9.15\10.vir"        "Artemis!D1E6F145F47D"        "2"

9/14/2015        10:43:14 PM        "D:\Virus\2015.9.15\02.vir"        "PWS-Zbot.gen.atz"        "2"

9/14/2015        10:43:14 PM        "D:\Virus\2015.9.15\16.vir"        "PWS-Zbot.gen.atz"        "2"

9/14/2015        10:43:14 PM        "D:\Virus\2015.9.15\27.vir"        "Artemis!3D2EF62F927B"        "2"

9/14/2015        10:43:14 PM        "D:\Virus\2015.9.15\06.vir"        "Artemis!66D6412C7858"        "2"

9/14/2015        10:43:14 PM        "D:\Virus\2015.9.15\36.vir"        "Generic Downloader.g"        "2"

9/14/2015        10:43:15 PM        "D:\Virus\2015.9.15\25.vir"        "Artemis!DD5D07E770DB"        "2"

9/14/2015        10:43:15 PM        "D:\Virus\2015.9.15\14.vir"        "Artemis!2725C5C2B008"        "2"

9/14/2015        10:43:16 PM        "D:\Virus\2015.9.15\01.vir"        "BackDoor-FCTD!1B3254548F8A"        "2"

9/14/2015        10:43:16 PM        "D:\Virus\2015.9.15\39.vir"        "Artemis!6937609DF01A"        "2"

9/14/2015        10:43:16 PM        "D:\Virus\2015.9.15\46.vir"        "BackDoor-CEP.gen.g"        "2"

9/14/2015        10:43:17 PM        "D:\Virus\2015.9.15\26.vir"        "Artemis!7B5D069FDCF7"        "2"

9/14/2015        10:43:17 PM        "D:\Virus\2015.9.15\03.vir"        "Artemis!5D8EA6894292"        "2"

9/14/2015        10:43:17 PM        "D:\Virus\2015.9.15\49.vir"        "Artemis!EFCB0636E429"        "2"

9/14/2015        10:43:18 PM        "D:\Virus\2015.9.15\42.vir"        "Artemis!6CCDFE350BF9"        "2"

9/14/2015        10:43:18 PM        "D:\Virus\2015.9.15\22.vir"        "Artemis!5BEE509304FA"        "1"

9/14/2015        10:43:18 PM        "D:\Virus\2015.9.15\47.vir"        "Artemis!80598C24C14E"        "2"

9/14/2015        10:43:22 PM        "D:\Virus\2015.9.15\32.vir"        "Artemis!2CB7C35BBCA5"        "2"

9/14/2015        10:43:22 PM        "D:\Virus\2015.9.15\41.vir"        "Artemis!C90C66017E44"        "2"[/mw_shl_code]

欧阳宣

MXCERILYF! 发表于 2015-9-15 09:28
360TS（只开启自主引擎）
文件后缀为vir时：杀33个

你有没有想过在你改后缀的那段时间里有些样本已经被迅速入库了