收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 精睿样本测试（15.10.31）
12345下一页
返回列表 发新帖
查看: 4866|回复: 45
收起左侧

[病毒样本] 精睿样本测试（15.10.31）

  [复制链接]
833754
发表于 2015-10-31 10:10:41 | 显示全部楼层 |阅读模式
地址：

http://kuai.xunlei.com/d/zuh.AZAqoxc0VgQAefa

http://pan.baidu.com/s/1dDdk9Yp 提取密码  w2dz

  
密码：bbs.vc52.cn
数量：50
回复

举报

MXCERILYF!
发表于 2015-10-31 10:12:14 | 显示全部楼层
本帖最后由 MXCERILYF! 于 2015-10-31 10:23 编辑

360 Total Security（全引擎）
文件后缀不变：杀34个

文件后缀为zip：补杀8个

文件后缀为doc：补杀2个

共查杀44个，（排除1个修复）剩余6个

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

cxy密斯
发表于 2015-10-31 10:16:14 | 显示全部楼层
[mw_shl_code=css,true]=============================================================================
Dr.Web Scanner SE for Windows v11.0.0.09070
=============================================================================
Scanning Engine version: 11.0.1.10200
Virus Finding Engine version: 7.0.16.10090
-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Object(s) to scan:
- C:\Users\Shiloh\Desktop\2015.10.31

C:\Users\Shiloh\Desktop\2015.10.31\01.vir:Zone.Identifier - Ok - 19ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\02.vir:Zone.Identifier - Ok - 23ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\03.vir is SWF container
C:\Users\Shiloh\Desktop\2015.10.31\03.vir:Zone.Identifier - Ok - 12ms, 26 bytes
>>C:\Users\Shiloh\Desktop\2015.10.31\03.vir\Data is SWF container
C:\Users\Shiloh\Desktop\2015.10.31\04.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\03.vir\Data\Code[1487] - Ok
C:\Users\Shiloh\Desktop\2015.10.31\03.vir\Data\Code[819] - Ok
C:\Users\Shiloh\Desktop\2015.10.31\03.vir\Data\Code[823] - Ok
C:\Users\Shiloh\Desktop\2015.10.31\03.vir\Data\Code[1193] - Ok
C:\Users\Shiloh\Desktop\2015.10.31\03.vir\Data\Code[929] - Ok
C:\Users\Shiloh\Desktop\2015.10.31\03.vir\Data\Code[386] - Ok
C:\Users\Shiloh\Desktop\2015.10.31\03.vir\Data - Ok
C:\Users\Shiloh\Desktop\2015.10.31\03.vir - Ok
C:\Users\Shiloh\Desktop\2015.10.31\03.vir - container - 74ms, 3166 bytes
C:\Users\Shiloh\Desktop\2015.10.31\05.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\06.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.10.31\06.vir\DOC117407-pdf.exe - infected with Trojan.MulDrop6.11547
C:\Users\Shiloh\Desktop\2015.10.31\06.vir\DOC117407-pdf.exe - infected
C:\Users\Shiloh\Desktop\2015.10.31\06.vir - infected archive
C:\Users\Shiloh\Desktop\2015.10.31\06.vir - infected archive - 37ms, 649434 bytes
C:\Users\Shiloh\Desktop\2015.10.31\06.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\05.vir - infected with BackDoor.Siggen.57760
C:\Users\Shiloh\Desktop\2015.10.31\05.vir - infected - 20ms, 147460 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\04.vir - infected with Trojan.Dridex.245
C:\Users\Shiloh\Desktop\2015.10.31\04.vir - infected - 62ms, 157188 bytes
C:\Users\Shiloh\Desktop\2015.10.31\08.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\01.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.10.31\02.vir - Ok - 143ms, 651268 bytes
C:\Users\Shiloh\Desktop\2015.10.31\09.vir:Zone.Identifier - Ok - 7ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\07.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\META-INF\MANIFEST.MF - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\PKBotNetInstaller$1.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\PKBotNetInstaller.class - infected with Trojan.DownLoad3.37896
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\PKBotNetInstaller.class - infected
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\META-INF\LICENSE.txt - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\META-INF\NOTICE.txt - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\ByteOrderMark.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\01.vir - infected with Trojan.PWS.Stealer.1932
C:\Users\Shiloh\Desktop\2015.10.31\01.vir - infected - 260ms, 35332 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\Charsets.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\10.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\comparator\AbstractFileComparator.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\comparator\CompositeFileComparator.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\comparator\DefaultFileComparator.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\comparator\DirectoryFileComparator.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\comparator\ExtensionFileComparator.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\comparator\LastModifiedFileComparator.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\comparator\NameFileComparator.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\comparator\PathFileComparator.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\comparator\ReverseComparator.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\comparator\SizeFileComparator.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\CopyUtils.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\DirectoryWalker$CancelException.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\DirectoryWalker.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\EndianUtils.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\FileCleaner.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\FileCleaningTracker$Reaper.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\FileCleaningTracker$Tracker.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\FileCleaningTracker.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\FileDeleteStrategy$ForceFileDeleteStrategy.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\FileDeleteStrategy.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\08.vir - infected with Trojan.Inject2.7029
C:\Users\Shiloh\Desktop\2015.10.31\08.vir - infected - 12ms, 81928 bytes
C:\Users\Shiloh\Desktop\2015.10.31\11.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\FileExistsException.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\AbstractFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\AgeFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\AndFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\CanReadFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\CanWriteFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\ConditionalFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\DelegateFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\DirectoryFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\EmptyFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\FalseFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\FileFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\FileFilterUtils.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\09.vir - probably infected with DLOADER.IRC.Trojan
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\HiddenFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\IOFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\MagicNumberFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\NameFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\NotFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\09.vir - infected - 101ms, 175108 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\OrFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\12.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\PrefixFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\RegexFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\SizeFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\SuffixFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\TrueFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\WildcardFileFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\filefilter\WildcardFilter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\FilenameUtils.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\FileSystemUtils.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\FileUtils.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\HexDump.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\AutoCloseInputStream.class - Ok
>C:\Users\Shiloh\Desktop\2015.10.31\10.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\BOMInputStream$1.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\BOMInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\BoundedInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\BrokenInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\CharSequenceInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\CharSequenceReader.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\ClassLoaderObjectInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\ClosedInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\CloseShieldInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\CountingInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\DemuxInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\NullInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\NullReader.class - Ok
>C:\Users\Shiloh\Desktop\2015.10.31\11.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\ProxyInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\10.vir - infected with BackDoor.Siggen.56198
C:\Users\Shiloh\Desktop\2015.10.31\10.vir - infected - 268ms, 49668 bytes
C:\Users\Shiloh\Desktop\2015.10.31\13.vir:Zone.Identifier - Ok - 9ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\ProxyReader.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\ReaderInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\ReversedLinesFileReader$1.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\ReversedLinesFileReader$FilePart.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\ReversedLinesFileReader.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\SwappedDataInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\TaggedInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\Tailer.class - Ok
>C:\Users\Shiloh\Desktop\2015.10.31\12.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\TailerListener.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\TailerListenerAdapter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\11.vir - infected with BackDoor.Siggen.56198
C:\Users\Shiloh\Desktop\2015.10.31\11.vir - infected - 323ms, 50692 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\TeeInputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\14.vir:Zone.Identifier - Ok - 10ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\XmlStreamReader.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\input\XmlStreamReaderException.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\IOCase.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\IOExceptionWithCause.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\IOUtils.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\LineIterator.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\monitor\FileAlterationListener.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\monitor\FileAlterationListenerAdaptor.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\monitor\FileAlterationMonitor.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\monitor\FileAlterationObserver.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\monitor\FileEntry.class - Ok
>C:\Users\Shiloh\Desktop\2015.10.31\13.vir - packed by FLY-CODE
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\BrokenOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\ByteArrayOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\ClosedOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\CloseShieldOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\CountingOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\DeferredFileOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\DemuxOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\FileWriterWithEncoding.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\12.vir - infected with Trojan.PWS.Stealer.13104
C:\Users\Shiloh\Desktop\2015.10.31\12.vir - infected - 444ms, 35332 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\LockableFileWriter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\15.vir:Zone.Identifier - Ok - 12ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\NullOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\NullWriter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\ProxyOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\14.vir - infected with Trojan.Upatre.9162
C:\Users\Shiloh\Desktop\2015.10.31\14.vir - infected - 104ms, 48644 bytes
C:\Users\Shiloh\Desktop\2015.10.31\16.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\ProxyWriter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\StringBuilderWriter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\TaggedOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\TeeOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\ThresholdingOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\WriterOutputStream.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\output\XmlStreamWriter.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\TaggedIOException.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\org\apache\commons\io\ThreadMonitor.class - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\META-INF\maven\commons-io\commons-io\pom.xml - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir\META-INF\maven\commons-io\commons-io\pom.properties - Ok
C:\Users\Shiloh\Desktop\2015.10.31\07.vir - infected archive
C:\Users\Shiloh\Desktop\2015.10.31\07.vir - infected archive - 1145ms, 268159 bytes
C:\Users\Shiloh\Desktop\2015.10.31\17.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\15.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.10.31\15.vir - infected with BackDoor.Siggen.56198
C:\Users\Shiloh\Desktop\2015.10.31\15.vir - infected - 211ms, 49668 bytes
C:\Users\Shiloh\Desktop\2015.10.31\18.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\19.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.10.31\19.vir\7048764639855.exe - infected with Trojan.Upatre.9161
C:\Users\Shiloh\Desktop\2015.10.31\19.vir\7048764639855.exe - infected
C:\Users\Shiloh\Desktop\2015.10.31\19.vir - infected archive
C:\Users\Shiloh\Desktop\2015.10.31\19.vir - infected archive - 33ms, 39258 bytes
C:\Users\Shiloh\Desktop\2015.10.31\19.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\16.vir is BINARYRES container
C:\Users\Shiloh\Desktop\2015.10.31\16.vir\data001 - Ok
C:\Users\Shiloh\Desktop\2015.10.31\16.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.10.31\16.vir\data003 - Ok
C:\Users\Shiloh\Desktop\2015.10.31\16.vir\data004 - Ok
C:\Users\Shiloh\Desktop\2015.10.31\17.vir - Ok - 125ms, 358916 bytes
>>C:\Users\Shiloh\Desktop\2015.10.31\16.vir\data005 is NET container
C:\Users\Shiloh\Desktop\2015.10.31\16.vir\data005 - Ok
C:\Users\Shiloh\Desktop\2015.10.31\20.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\16.vir\data006 - Ok
>>C:\Users\Shiloh\Desktop\2015.10.31\16.vir\data007 is NET container
C:\Users\Shiloh\Desktop\2015.10.31\16.vir\data007 - Ok
C:\Users\Shiloh\Desktop\2015.10.31\16.vir\data008 - Ok
C:\Users\Shiloh\Desktop\2015.10.31\16.vir\data009 - Ok
C:\Users\Shiloh\Desktop\2015.10.31\16.vir - Ok
C:\Users\Shiloh\Desktop\2015.10.31\16.vir - container - 192ms, 238084 bytes
C:\Users\Shiloh\Desktop\2015.10.31\21.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\18.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.10.31\18.vir - infected with Trojan.PWS.Stealer.4118
C:\Users\Shiloh\Desktop\2015.10.31\18.vir - infected - 182ms, 36356 bytes
C:\Users\Shiloh\Desktop\2015.10.31\22.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\20.vir - infected with Trojan.Betabot.3
C:\Users\Shiloh\Desktop\2015.10.31\20.vir - infected - 19ms, 303620 bytes
C:\Users\Shiloh\Desktop\2015.10.31\23.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\24.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.10.31\24.vir\New Order.exe - infected with Trojan.PWS.Panda.2401
C:\Users\Shiloh\Desktop\2015.10.31\24.vir\New Order.exe - infected
C:\Users\Shiloh\Desktop\2015.10.31\24.vir - infected archive
C:\Users\Shiloh\Desktop\2015.10.31\24.vir - infected archive - 41ms, 570926 bytes
C:\Users\Shiloh\Desktop\2015.10.31\24.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\21.vir - infected with Trojan.Packed.33446
C:\Users\Shiloh\Desktop\2015.10.31\21.vir - infected - 14ms, 260536 bytes
C:\Users\Shiloh\Desktop\2015.10.31\25.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\23.vir - infected with Trojan.PWS.Stealer.4118
C:\Users\Shiloh\Desktop\2015.10.31\23.vir - infected - 20ms, 95748 bytes
C:\Users\Shiloh\Desktop\2015.10.31\26.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\22.vir - infected with BackDoor.Cybergate.1
C:\Users\Shiloh\Desktop\2015.10.31\22.vir - infected - 274ms, 479748 bytes
C:\Users\Shiloh\Desktop\2015.10.31\27.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\28.vir - infected with W97M.DownLoader.697
C:\Users\Shiloh\Desktop\2015.10.31\28.vir - infected - 20ms, 100868 bytes
C:\Users\Shiloh\Desktop\2015.10.31\28.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\26.vir - probably infected with DLOADER.Trojan
>C:\Users\Shiloh\Desktop\2015.10.31\25.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.10.31\26.vir - infected - 110ms, 108036 bytes
C:\Users\Shiloh\Desktop\2015.10.31\29.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\27.vir - infected with BackDoor.Siggen.59967
C:\Users\Shiloh\Desktop\2015.10.31\27.vir - infected - 17ms, 131076 bytes
C:\Users\Shiloh\Desktop\2015.10.31\30.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\25.vir - infected with BackDoor.Siggen.56198
C:\Users\Shiloh\Desktop\2015.10.31\25.vir - infected - 261ms, 49668 bytes
C:\Users\Shiloh\Desktop\2015.10.31\31.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\29.vir - probably infected with MULDROP.Trojan
>C:\Users\Shiloh\Desktop\2015.10.31\30.vir - packed by UPX
>C:\Users\Shiloh\Desktop\2015.10.31\29.vir - packed by BINARYRES
>C:\Users\Shiloh\Desktop\2015.10.31\32.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.10.31\29.vir - infected with Trojan.DownLoader9.11247
C:\Users\Shiloh\Desktop\2015.10.31\29.vir - infected - 297ms, 426970 bytes
C:\Users\Shiloh\Desktop\2015.10.31\32.vir:Zone.Identifier - Ok - 9ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\31.vir - packed by UPX
C:\Users\Shiloh\Desktop\2015.10.31\33.vir - infected with W97M.DownLoader.697
C:\Users\Shiloh\Desktop\2015.10.31\33.vir - infected - 24ms, 102916 bytes
C:\Users\Shiloh\Desktop\2015.10.31\33.vir:Zone.Identifier - Ok - 7ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\34.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.10.31\30.vir - infected with BackDoor.Siggen.56198
C:\Users\Shiloh\Desktop\2015.10.31\30.vir - infected - 290ms, 49668 bytes
C:\Users\Shiloh\Desktop\2015.10.31\34.vir:Zone.Identifier - Ok - 11ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\34.vir\E-ZPass_Invoice_000932970.doc.js - probably infected with SCRIPT.Virus
>>C:\Users\Shiloh\Desktop\2015.10.31\34.vir\E-ZPass_Invoice_000932970.doc.js is JS-HTML container
C:\Users\Shiloh\Desktop\2015.10.31\35.vir - Ok - 61ms, 131076 bytes
C:\Users\Shiloh\Desktop\2015.10.31\35.vir:Zone.Identifier - Ok - 8ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\34.vir\E-ZPass_Invoice_000932970.doc.js\JSFile_1[0][25d8] - Ok
C:\Users\Shiloh\Desktop\2015.10.31\31.vir - infected with BackDoor.Siggen.56198
C:\Users\Shiloh\Desktop\2015.10.31\31.vir - infected - 345ms, 50180 bytes
C:\Users\Shiloh\Desktop\2015.10.31\36.vir:Zone.Identifier - Ok - 9ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\34.vir\E-ZPass_Invoice_000932970.doc.js\JSEval_2[2ff] - Ok
C:\Users\Shiloh\Desktop\2015.10.31\34.vir\E-ZPass_Invoice_000932970.doc.js - Ok
C:\Users\Shiloh\Desktop\2015.10.31\34.vir - Ok
C:\Users\Shiloh\Desktop\2015.10.31\34.vir - infected archive - 149ms, 2710 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\37.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.10.31\37.vir:Zone.Identifier - Ok - 8ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\36.vir - Ok - 55ms, 314884 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\38.vir is RAR archive
C:\Users\Shiloh\Desktop\2015.10.31\38.vir:Zone.Identifier - Ok - 8ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\37.vir\Internal_Only.exe - infected with Trojan.Upatre.9161
C:\Users\Shiloh\Desktop\2015.10.31\37.vir\Internal_Only.exe - infected
C:\Users\Shiloh\Desktop\2015.10.31\37.vir - infected archive
C:\Users\Shiloh\Desktop\2015.10.31\37.vir - infected archive - 60ms, 38850 bytes
C:\Users\Shiloh\Desktop\2015.10.31\39.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\32.vir - infected with Trojan.PWS.Stealer.origin
C:\Users\Shiloh\Desktop\2015.10.31\32.vir - infected, incurable - 428ms, 35332 bytes
C:\Users\Shiloh\Desktop\2015.10.31\40.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\41.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.10.31\41.vir\Documents.exe - infected with Trojan.Upatre.9161
C:\Users\Shiloh\Desktop\2015.10.31\41.vir\Documents.exe - infected
C:\Users\Shiloh\Desktop\2015.10.31\41.vir - infected archive
C:\Users\Shiloh\Desktop\2015.10.31\41.vir - infected archive - 35ms, 38740 bytes
C:\Users\Shiloh\Desktop\2015.10.31\41.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>>C:\Users\Shiloh\Desktop\2015.10.31\38.vir\NewUCPCheat.exe - packed by UPX
C:\Users\Shiloh\Desktop\2015.10.31\38.vir\NewUCPCheat.exe - infected with BackDoor.Siggen.56198
C:\Users\Shiloh\Desktop\2015.10.31\38.vir\NewUCPCheat.exe - infected
C:\Users\Shiloh\Desktop\2015.10.31\38.vir - infected archive
C:\Users\Shiloh\Desktop\2015.10.31\38.vir - infected archive - 252ms, 48487 bytes
C:\Users\Shiloh\Desktop\2015.10.31\42.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\39.vir - infected with Trojan.Upatre.9161
C:\Users\Shiloh\Desktop\2015.10.31\39.vir - infected - 19ms, 67076 bytes
C:\Users\Shiloh\Desktop\2015.10.31\43.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\40.vir - infected with Trojan.Encoder.514
C:\Users\Shiloh\Desktop\2015.10.31\40.vir - infected - 38ms, 233476 bytes
C:\Users\Shiloh\Desktop\2015.10.31\44.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\42.vir - infected with BackDoor.Siggen.56198
C:\Users\Shiloh\Desktop\2015.10.31\42.vir - infected - 14ms, 140292 bytes
C:\Users\Shiloh\Desktop\2015.10.31\45.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\43.vir is BINARYRES container
C:\Users\Shiloh\Desktop\2015.10.31\43.vir\data001 - Ok
C:\Users\Shiloh\Desktop\2015.10.31\43.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.10.31\43.vir - Ok
C:\Users\Shiloh\Desktop\2015.10.31\43.vir - container - 36ms, 26116 bytes
C:\Users\Shiloh\Desktop\2015.10.31\46.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\47.vir - Ok - 36ms, 65540 bytes
C:\Users\Shiloh\Desktop\2015.10.31\47.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\48.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.10.31\44.vir - infected with Trojan.Inject2.7649
C:\Users\Shiloh\Desktop\2015.10.31\44.vir - infected - 18ms, 281094 bytes
C:\Users\Shiloh\Desktop\2015.10.31\48.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\48.vir\Swift Payment.doc .com - infected with Trojan.PWS.Siggen1.43362
C:\Users\Shiloh\Desktop\2015.10.31\48.vir\Swift Payment.doc .com - infected
C:\Users\Shiloh\Desktop\2015.10.31\48.vir - infected archive
C:\Users\Shiloh\Desktop\2015.10.31\48.vir - infected archive - 45ms, 84921 bytes
C:\Users\Shiloh\Desktop\2015.10.31\49.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.10.31\49.vir is RAR archive
C:\Users\Shiloh\Desktop\2015.10.31\50.vir - Ok - 28ms, 86020 bytes
C:\Users\Shiloh\Desktop\2015.10.31\50.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.10.31\45.vir - infected with BackDoor.Siggen.56198
C:\Users\Shiloh\Desktop\2015.10.31\45.vir - infected - 22ms, 140292 bytes
>>C:\Users\Shiloh\Desktop\2015.10.31\49.vir\Scanned Copy.exe - packed by FLY-CODE
>C:\Users\Shiloh\Desktop\2015.10.31\46.vir - packed by FLY-CODE
C:\Users\Shiloh\Desktop\2015.10.31\49.vir\Scanned Copy.exe - Ok
C:\Users\Shiloh\Desktop\2015.10.31\49.vir - Ok
C:\Users\Shiloh\Desktop\2015.10.31\49.vir - archive - 225ms, 285087 bytes
C:\Users\Shiloh\Desktop\2015.10.31\13.vir - Ok - 8515ms, 515076 bytes
C:\Users\Shiloh\Desktop\2015.10.31\46.vir - Ok - 7230ms, 515076 bytes
-----------------------------------------------------------------------------
Start curing
-----------------------------------------------------------------------------
C:\Users\Shiloh\Desktop\2015.10.31\06.vir - quarantined - 1326 ms
C:\Users\Shiloh\Desktop\2015.10.31\05.vir - quarantined - 53 ms
C:\Users\Shiloh\Desktop\2015.10.31\04.vir - quarantined - 66 ms
C:\Users\Shiloh\Desktop\2015.10.31\01.vir - quarantined - 221 ms
C:\Users\Shiloh\Desktop\2015.10.31\08.vir - quarantined - 58 ms
C:\Users\Shiloh\Desktop\2015.10.31\09.vir - quarantined - 42 ms
C:\Users\Shiloh\Desktop\2015.10.31\10.vir - quarantined - 226 ms
C:\Users\Shiloh\Desktop\2015.10.31\11.vir - quarantined - 218 ms
C:\Users\Shiloh\Desktop\2015.10.31\12.vir - quarantined - 197 ms
C:\Users\Shiloh\Desktop\2015.10.31\14.vir - quarantined - 55 ms
C:\Users\Shiloh\Desktop\2015.10.31\07.vir - quarantined - 37 ms
C:\Users\Shiloh\Desktop\2015.10.31\15.vir - quarantined - 176 ms
C:\Users\Shiloh\Desktop\2015.10.31\19.vir - quarantined - 32 ms
C:\Users\Shiloh\Desktop\2015.10.31\18.vir - quarantined - 143 ms
C:\Users\Shiloh\Desktop\2015.10.31\20.vir - quarantined - 56 ms
C:\Users\Shiloh\Desktop\2015.10.31\24.vir - quarantined - 44 ms
C:\Users\Shiloh\Desktop\2015.10.31\21.vir - quarantined - 50 ms
C:\Users\Shiloh\Desktop\2015.10.31\23.vir - quarantined - 44 ms
C:\Users\Shiloh\Desktop\2015.10.31\22.vir - quarantined - 200 ms
C:\Users\Shiloh\Desktop\2015.10.31\28.vir - quarantined - 43 ms
C:\Users\Shiloh\Desktop\2015.10.31\26.vir - quarantined - 33 ms
C:\Users\Shiloh\Desktop\2015.10.31\27.vir - quarantined - 45 ms
C:\Users\Shiloh\Desktop\2015.10.31\25.vir - quarantined - 239 ms
C:\Users\Shiloh\Desktop\2015.10.31\29.vir - quarantined - 241 ms
C:\Users\Shiloh\Desktop\2015.10.31\33.vir - quarantined - 45 ms
C:\Users\Shiloh\Desktop\2015.10.31\30.vir - quarantined - 179 ms
C:\Users\Shiloh\Desktop\2015.10.31\31.vir - quarantined - 189 ms
C:\Users\Shiloh\Desktop\2015.10.31\34.vir - quarantined - 30 ms
C:\Users\Shiloh\Desktop\2015.10.31\37.vir - quarantined - 31 ms
C:\Users\Shiloh\Desktop\2015.10.31\32.vir - quarantined - 212 ms
C:\Users\Shiloh\Desktop\2015.10.31\41.vir - quarantined - 31 ms
C:\Users\Shiloh\Desktop\2015.10.31\38.vir - quarantined - 35 ms
C:\Users\Shiloh\Desktop\2015.10.31\39.vir - quarantined - 49 ms
C:\Users\Shiloh\Desktop\2015.10.31\40.vir - quarantined - 61 ms
C:\Users\Shiloh\Desktop\2015.10.31\42.vir - quarantined - 45 ms
C:\Users\Shiloh\Desktop\2015.10.31\44.vir - quarantined - 52 ms
C:\Users\Shiloh\Desktop\2015.10.31\48.vir - quarantined - 36 ms
C:\Users\Shiloh\Desktop\2015.10.31\45.vir - quarantined - 49 ms

Total 8857066 bytes in 100 files scanned (246 objects, 9 containers)
Total 62 files (201 objects) are clean
Total 35 files are infected
Total 3 files (4 objects) are suspicious
Total 38 files (39 objects) are neutralized
Scan time is 00:00:11.506[/mw_shl_code]
回复

举报

蓝天二号
发表于 2015-10-31 10:19:56 | 显示全部楼层
GD 右键 KILL 42X

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

毛豆新人
发表于 2015-10-31 10:25:40 | 显示全部楼层
本帖最后由 毛豆新人 于 2015-10-31 10:29 编辑

CIS  kill  8x

18.vir         TrojWare.Win32.PWS.Fareit.GS@351459011        
34.vir|E-ZPass_Invoice_000932970.doc.js         Heur.Dual.Extensions@4294967295        
22.vir         TrojWare.Win32.MalPack.~ULR@104900093        
08.vir         TrojWare.MSIL.Droma.A@360788366
12.vir         TrojWare.Win32.PWS.Fareit.GS@351459011        
23.vir         TrojWare.Win32.PWS.Fareit.GS@351459011        
32.vir         TrojWare.Win32.PWS.Fareit.GS@351459011        
01.vir         TrojWare.Win32.PWS.Fareit.GS@351459011
回复

举报

nick20010117
发表于 2015-10-31 10:27:29 | 显示全部楼层
本帖最后由 nick20010117 于 2015-10-31 10:31 编辑

avg

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

送信Y
发表于 2015-10-31 10:41:33 | 显示全部楼层
卡巴2016 33个，2016好流畅啊啊！

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

蓝天二号
发表于 2015-10-31 10:43:29 | 显示全部楼层
送信Y 发表于 2015-10-31 10:41
卡巴2016 33个，2016好流畅啊啊！

16版 占CPU好像大了不少，，
回复

举报

送信Y
发表于 2015-10-31 10:45:16 | 显示全部楼层
蓝天二号 发表于 2015-10-31 10:43
16版 占CPU好像大了不少，，

还好，我没怎么在意。昨天刚试用。再用几天看看
回复

举报

蓝天二号
发表于 2015-10-31 10:46:44 | 显示全部楼层
送信Y 发表于 2015-10-31 10:45
还好，我没怎么在意。昨天刚试用。再用几天看看

我那个三年正版 用到windows平板了，，
回复

举报

下一页 »
12345下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-20 19:18 , Processed in 0.135885 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表