精睿样本测试（15.11.8）

白露为霜

地址：
http://kuai.xunlei.com/d/zuh.ASo1ip8.VgQA52e

http://pan.baidu.com/s/1gdloAht 提取密码  r69d

   
密码：bbs.vc52.cn
数量：50

cxy密斯

[mw_shl_code=css,true]=============================================================================
Dr.Web Scanner SE for Windows v11.0.0.09070
=============================================================================
Scanning Engine version: 11.0.1.10200
Virus Finding Engine version: 7.0.16.10090
-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Object(s) to scan:
- C:\Users\Shiloh\Desktop\2015.11.8

C:\Users\Shiloh\Desktop\2015.11.8\02.vir:Zone.Identifier - Ok - 10ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\01.vir:Zone.Identifier - Ok - 16ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\02.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.11.8\03.vir:Zone.Identifier - Ok - 11ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\01.vir is MAIL container
C:\Users\Shiloh\Desktop\2015.11.8\04.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\01.vir\1.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\01.vir\5.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\01.vir\6.part - Ok
>>C:\Users\Shiloh\Desktop\2015.11.8\01.vir\7.part is ACTIVEMIME container
C:\Users\Shiloh\Desktop\2015.11.8\01.vir\7.part\Storage0 - infected with W97M.DownLoader.704
C:\Users\Shiloh\Desktop\2015.11.8\01.vir\7.part\Storage0 - infected
C:\Users\Shiloh\Desktop\2015.11.8\01.vir\7.part - infected container
C:\Users\Shiloh\Desktop\2015.11.8\01.vir\8.part - Ok
>C:\Users\Shiloh\Desktop\2015.11.8\05.vir is PDF container
C:\Users\Shiloh\Desktop\2015.11.8\01.vir - infected mail
C:\Users\Shiloh\Desktop\2015.11.8\01.vir - infected mail - 95ms, 23033 bytes
C:\Users\Shiloh\Desktop\2015.11.8\05.vir - Ok
C:\Users\Shiloh\Desktop\2015.11.8\05.vir - container - 69ms, 221751 bytes
C:\Users\Shiloh\Desktop\2015.11.8\05.vir:Zone.Identifier - Ok - 8ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\06.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\07.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.11.8\07.vir\Payment Swift Copy-pdf.exe - infected with Trojan.MulDrop6.12030
C:\Users\Shiloh\Desktop\2015.11.8\07.vir\Payment Swift Copy-pdf.exe - infected
C:\Users\Shiloh\Desktop\2015.11.8\07.vir - infected archive
C:\Users\Shiloh\Desktop\2015.11.8\07.vir - infected archive - 47ms, 399042 bytes
C:\Users\Shiloh\Desktop\2015.11.8\07.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\06.vir - Ok - 87ms, 301060 bytes
C:\Users\Shiloh\Desktop\2015.11.8\08.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\09.vir is GZIP archive
C:\Users\Shiloh\Desktop\2015.11.8\09.vir\gziped.gz - infected with Trojan.PWS.Siggen1.43350
C:\Users\Shiloh\Desktop\2015.11.8\09.vir\gziped.gz - infected
C:\Users\Shiloh\Desktop\2015.11.8\09.vir - infected archive
C:\Users\Shiloh\Desktop\2015.11.8\09.vir - infected archive - 55ms, 174933 bytes
C:\Users\Shiloh\Desktop\2015.11.8\09.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\10.vir - probably infected with SCRIPT.Virus
C:\Users\Shiloh\Desktop\2015.11.8\10.vir - infected - 33ms, 9545 bytes
C:\Users\Shiloh\Desktop\2015.11.8\10.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\03.vir - infected with Trojan.Swrort.1
C:\Users\Shiloh\Desktop\2015.11.8\03.vir - infected - 8ms, 73806 bytes
C:\Users\Shiloh\Desktop\2015.11.8\02.vir\653469703.exe - infected with Trojan.Upatre.9392
C:\Users\Shiloh\Desktop\2015.11.8\02.vir\653469703.exe - infected
C:\Users\Shiloh\Desktop\2015.11.8\02.vir - infected archive
C:\Users\Shiloh\Desktop\2015.11.8\02.vir - infected archive - 335ms, 16152 bytes
C:\Users\Shiloh\Desktop\2015.11.8\11.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\12.vir:Zone.Identifier - Ok - 8ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\11.vir - Ok - 58ms, 101892 bytes
C:\Users\Shiloh\Desktop\2015.11.8\13.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\14.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.11.8\04.vir - infected with Trojan.Encoder.514
C:\Users\Shiloh\Desktop\2015.11.8\04.vir - infected - 35ms, 220014 bytes
C:\Users\Shiloh\Desktop\2015.11.8\14.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\15.vir is MAIL container
C:\Users\Shiloh\Desktop\2015.11.8\15.vir\1.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\15.vir\5.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\15.vir\6.part - Ok
>>C:\Users\Shiloh\Desktop\2015.11.8\15.vir\7.part is ACTIVEMIME container
C:\Users\Shiloh\Desktop\2015.11.8\15.vir\7.part\Storage0 - infected with W97M.DownLoader.704
C:\Users\Shiloh\Desktop\2015.11.8\15.vir\7.part\Storage0 - infected
C:\Users\Shiloh\Desktop\2015.11.8\15.vir\7.part - infected container
C:\Users\Shiloh\Desktop\2015.11.8\15.vir\8.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\15.vir - infected mail
C:\Users\Shiloh\Desktop\2015.11.8\15.vir - infected mail - 61ms, 18092 bytes
C:\Users\Shiloh\Desktop\2015.11.8\15.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\14.vir\BANK SLIP AND DOCS..exe - infected with Trojan.PWS.Stealer.13025
C:\Users\Shiloh\Desktop\2015.11.8\14.vir\BANK SLIP AND DOCS..exe - infected
C:\Users\Shiloh\Desktop\2015.11.8\14.vir - infected archive
C:\Users\Shiloh\Desktop\2015.11.8\14.vir - infected archive - 112ms, 535008 bytes
C:\Users\Shiloh\Desktop\2015.11.8\16.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\17.vir is OPEN XML container
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\[Content_Types].xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\_rels\.rels - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\_rels\document.xml.rels - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\document.xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\_rels\vbaProject.bin.rels - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\vbaProject.bin - Ok
C:\Users\Shiloh\Desktop\2015.11.8\08.vir - infected with Trojan.PWS.Stealer.4118
C:\Users\Shiloh\Desktop\2015.11.8\08.vir - infected - 59ms, 285188 bytes
C:\Users\Shiloh\Desktop\2015.11.8\17.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\theme\theme1.xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\vbaData.xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\settings.xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\webSettings.xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\styles.xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\numbering.xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\docProps\app.xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\stylesWithEffects.xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\word\fontTable.xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir\docProps\core.xml - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir - Ok
C:\Users\Shiloh\Desktop\2015.11.8\17.vir - container - 154ms, 30080 bytes
C:\Users\Shiloh\Desktop\2015.11.8\18.vir:Zone.Identifier - Ok - 4ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\19.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.11.8\19.vir\100004982191091.exe - infected with Trojan.DownLoader17.39339
C:\Users\Shiloh\Desktop\2015.11.8\19.vir\100004982191091.exe - infected
C:\Users\Shiloh\Desktop\2015.11.8\19.vir - infected archive
C:\Users\Shiloh\Desktop\2015.11.8\19.vir - infected archive - 30ms, 214052 bytes
C:\Users\Shiloh\Desktop\2015.11.8\19.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\13.vir - Ok - 20ms, 1384 bytes
C:\Users\Shiloh\Desktop\2015.11.8\20.vir - infected with W97M.DownLoader.705
C:\Users\Shiloh\Desktop\2015.11.8\20.vir - infected - 13ms, 89604 bytes
C:\Users\Shiloh\Desktop\2015.11.8\20.vir:Zone.Identifier - Ok - 9ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\21.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\22.vir is RAR archive
C:\Users\Shiloh\Desktop\2015.11.8\22.vir - Ok
C:\Users\Shiloh\Desktop\2015.11.8\22.vir - ignored, password protected - 14ms, 311591 bytes
C:\Users\Shiloh\Desktop\2015.11.8\22.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\23.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.11.8\16.vir - infected with Trojan.Upatre.9270
C:\Users\Shiloh\Desktop\2015.11.8\16.vir - infected - 30ms, 41988 bytes
C:\Users\Shiloh\Desktop\2015.11.8\23.vir:Zone.Identifier - Ok - 9ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\24.vir is JAR container
C:\Users\Shiloh\Desktop\2015.11.8\24.vir\META-INF\MANIFEST.MF - Ok
C:\Users\Shiloh\Desktop\2015.11.8\24.vir\java\stubcito.opp - Ok
C:\Users\Shiloh\Desktop\2015.11.8\24.vir\java\textito.isn - Ok
C:\Users\Shiloh\Desktop\2015.11.8\24.vir\main\Start.class - Ok
C:\Users\Shiloh\Desktop\2015.11.8\12.vir - infected with Trojan.Encoder.514
C:\Users\Shiloh\Desktop\2015.11.8\12.vir - infected - 72ms, 291332 bytes
C:\Users\Shiloh\Desktop\2015.11.8\24.vir:Zone.Identifier - Ok - 6ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\24.vir\main\HJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTc.class - Ok
C:\Users\Shiloh\Desktop\2015.11.8\24.vir\main\HJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTz.class - Ok
C:\Users\Shiloh\Desktop\2015.11.8\24.vir\main\HJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTv.class - Ok
C:\Users\Shiloh\Desktop\2015.11.8\24.vir\main\HJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTf.class - Ok
C:\Users\Shiloh\Desktop\2015.11.8\24.vir\main\HJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTg.class - Ok
C:\Users\Shiloh\Desktop\2015.11.8\18.vir - infected with Trojan.Inject2.5291
C:\Users\Shiloh\Desktop\2015.11.8\18.vir - infected - 28ms, 196612 bytes
C:\Users\Shiloh\Desktop\2015.11.8\25.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\24.vir\main\HJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTx.class - Ok
C:\Users\Shiloh\Desktop\2015.11.8\24.vir\main\HJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTHJFFGFGERTRTd.class - Ok
C:\Users\Shiloh\Desktop\2015.11.8\24.vir - Ok
C:\Users\Shiloh\Desktop\2015.11.8\24.vir - container - 114ms, 116213 bytes
C:\Users\Shiloh\Desktop\2015.11.8\26.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>>C:\Users\Shiloh\Desktop\2015.11.8\23.vir\filedata - packed by UPX
C:\Users\Shiloh\Desktop\2015.11.8\21.vir - infected with Trojan.PWS.Panda.8839
C:\Users\Shiloh\Desktop\2015.11.8\21.vir - infected - 17ms, 360980 bytes
C:\Users\Shiloh\Desktop\2015.11.8\27.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\28.vir is MAIL container
C:\Users\Shiloh\Desktop\2015.11.8\28.vir\1.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\28.vir\5.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\28.vir\6.part - Ok
>>C:\Users\Shiloh\Desktop\2015.11.8\28.vir\7.part is ACTIVEMIME container
C:\Users\Shiloh\Desktop\2015.11.8\28.vir\7.part\Storage0 - Ok
C:\Users\Shiloh\Desktop\2015.11.8\28.vir\7.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\28.vir\8.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\28.vir - mail - 63ms, 17830 bytes
C:\Users\Shiloh\Desktop\2015.11.8\28.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\23.vir\filedata - Ok
C:\Users\Shiloh\Desktop\2015.11.8\23.vir\metadata - Ok
C:\Users\Shiloh\Desktop\2015.11.8\23.vir - Ok
C:\Users\Shiloh\Desktop\2015.11.8\23.vir - archive - 464ms, 119198 bytes
C:\Users\Shiloh\Desktop\2015.11.8\29.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\30.vir is MAIL container
C:\Users\Shiloh\Desktop\2015.11.8\30.vir\1.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\30.vir\5.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\25.vir - infected with BackDoor.Bladabindi.1056
C:\Users\Shiloh\Desktop\2015.11.8\25.vir - infected - 25ms, 92893 bytes
C:\Users\Shiloh\Desktop\2015.11.8\30.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\30.vir\6.part - Ok
>>C:\Users\Shiloh\Desktop\2015.11.8\30.vir\7.part is ACTIVEMIME container
C:\Users\Shiloh\Desktop\2015.11.8\30.vir\7.part\Storage0 - infected with W97M.DownLoader.704
C:\Users\Shiloh\Desktop\2015.11.8\30.vir\7.part\Storage0 - infected
C:\Users\Shiloh\Desktop\2015.11.8\30.vir\7.part - infected container
C:\Users\Shiloh\Desktop\2015.11.8\30.vir\8.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\30.vir - infected mail
C:\Users\Shiloh\Desktop\2015.11.8\30.vir - infected mail - 63ms, 18067 bytes
C:\Users\Shiloh\Desktop\2015.11.8\31.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\32.vir - Ok - 11ms, 4997 bytes
C:\Users\Shiloh\Desktop\2015.11.8\32.vir:Zone.Identifier - Ok - 7ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\33.vir is RAR archive
>C:\Users\Shiloh\Desktop\2015.11.8\26.vir - packed by FLY-CODE
C:\Users\Shiloh\Desktop\2015.11.8\33.vir\PI 0712.exe - infected with Trojan.DownLoader17.41903
C:\Users\Shiloh\Desktop\2015.11.8\33.vir\PI 0712.exe - infected
C:\Users\Shiloh\Desktop\2015.11.8\33.vir - infected archive
C:\Users\Shiloh\Desktop\2015.11.8\33.vir - infected archive - 67ms, 405596 bytes
C:\Users\Shiloh\Desktop\2015.11.8\33.vir:Zone.Identifier - Ok - 7ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\34.vir is MAIL container
C:\Users\Shiloh\Desktop\2015.11.8\27.vir - Ok - 121ms, 221188 bytes
C:\Users\Shiloh\Desktop\2015.11.8\34.vir\1.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\34.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\34.vir\5.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\34.vir\6.part - Ok
>>C:\Users\Shiloh\Desktop\2015.11.8\34.vir\7.part is ACTIVEMIME container
C:\Users\Shiloh\Desktop\2015.11.8\34.vir\7.part\Storage0 - infected with W97M.DownLoader.704
C:\Users\Shiloh\Desktop\2015.11.8\34.vir\7.part\Storage0 - infected
C:\Users\Shiloh\Desktop\2015.11.8\34.vir\7.part - infected container
C:\Users\Shiloh\Desktop\2015.11.8\34.vir\8.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\34.vir - infected mail
C:\Users\Shiloh\Desktop\2015.11.8\34.vir - infected mail - 68ms, 17902 bytes
C:\Users\Shiloh\Desktop\2015.11.8\35.vir:Zone.Identifier - Ok - 5ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\26.vir - Ok - 200ms, 335876 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\36.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.11.8\36.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\37.vir is RTF container
C:\Users\Shiloh\Desktop\2015.11.8\37.vir - probably infected with Exploit.Rtf.CVE2012-0158
C:\Users\Shiloh\Desktop\2015.11.8\37.vir - Ok
C:\Users\Shiloh\Desktop\2015.11.8\37.vir - infected container - 14ms, 51369 bytes
C:\Users\Shiloh\Desktop\2015.11.8\37.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\38.vir is PDF container
C:\Users\Shiloh\Desktop\2015.11.8\38.vir - Ok
C:\Users\Shiloh\Desktop\2015.11.8\38.vir - container - 12ms, 142382 bytes
C:\Users\Shiloh\Desktop\2015.11.8\38.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\36.vir\filedata - is adware program Adware.Downware.11113
C:\Users\Shiloh\Desktop\2015.11.8\36.vir\filedata - is adware program Adware.Downware.5905
C:\Users\Shiloh\Desktop\2015.11.8\36.vir\filedata - infected
C:\Users\Shiloh\Desktop\2015.11.8\36.vir\metadata - Ok
C:\Users\Shiloh\Desktop\2015.11.8\36.vir - infected archive
C:\Users\Shiloh\Desktop\2015.11.8\36.vir - infected archive - 88ms, 275498 bytes
C:\Users\Shiloh\Desktop\2015.11.8\39.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\40.vir is MAIL container
C:\Users\Shiloh\Desktop\2015.11.8\40.vir\1.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\40.vir\5.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\40.vir\6.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\29.vir - Ok - 152ms, 368644 bytes
>>C:\Users\Shiloh\Desktop\2015.11.8\40.vir\7.part is ACTIVEMIME container
C:\Users\Shiloh\Desktop\2015.11.8\40.vir:Zone.Identifier - Ok - 9ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\31.vir is BINARYRES container
C:\Users\Shiloh\Desktop\2015.11.8\41.vir - infected with Perl.Ircbot.93
C:\Users\Shiloh\Desktop\2015.11.8\41.vir - infected - 9ms, 67759 bytes
C:\Users\Shiloh\Desktop\2015.11.8\40.vir\7.part\Storage0 - infected with W97M.DownLoader.704
C:\Users\Shiloh\Desktop\2015.11.8\40.vir\7.part\Storage0 - infected
C:\Users\Shiloh\Desktop\2015.11.8\40.vir\7.part - infected container
>>C:\Users\Shiloh\Desktop\2015.11.8\31.vir\data001 is NET container
C:\Users\Shiloh\Desktop\2015.11.8\31.vir\data001 - Ok
C:\Users\Shiloh\Desktop\2015.11.8\41.vir:Zone.Identifier - Ok - 10ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\40.vir\8.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\40.vir - infected mail
C:\Users\Shiloh\Desktop\2015.11.8\40.vir - infected mail - 87ms, 23041 bytes
C:\Users\Shiloh\Desktop\2015.11.8\31.vir\data002 - Ok
C:\Users\Shiloh\Desktop\2015.11.8\31.vir - Ok
C:\Users\Shiloh\Desktop\2015.11.8\31.vir - container - 82ms, 57348 bytes
C:\Users\Shiloh\Desktop\2015.11.8\42.vir - infected with W97M.MulDrop.69
C:\Users\Shiloh\Desktop\2015.11.8\42.vir - infected - 14ms, 102404 bytes
C:\Users\Shiloh\Desktop\2015.11.8\42.vir:Zone.Identifier - Ok - 11ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\43.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\44.vir:Zone.Identifier - Ok - 5ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\35.vir - packed by FLY-CODE
C:\Users\Shiloh\Desktop\2015.11.8\39.vir - infected with Trojan.PWS.Siggen1.43593
C:\Users\Shiloh\Desktop\2015.11.8\39.vir - infected - 97ms, 662156 bytes
C:\Users\Shiloh\Desktop\2015.11.8\45.vir:Zone.Identifier - Ok - 4ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\43.vir - Ok - 104ms, 204804 bytes
C:\Users\Shiloh\Desktop\2015.11.8\46.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\47.vir is MAIL container
C:\Users\Shiloh\Desktop\2015.11.8\47.vir\1.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\47.vir\5.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\47.vir\6.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\45.vir - Ok - 144ms, 73220 bytes
>>C:\Users\Shiloh\Desktop\2015.11.8\47.vir\7.part is ACTIVEMIME container
C:\Users\Shiloh\Desktop\2015.11.8\47.vir:Zone.Identifier - Ok - 6ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\48.vir is ZIP archive
C:\Users\Shiloh\Desktop\2015.11.8\47.vir\7.part\Storage0 - infected with W97M.DownLoader.704
C:\Users\Shiloh\Desktop\2015.11.8\47.vir\7.part\Storage0 - infected
C:\Users\Shiloh\Desktop\2015.11.8\47.vir\7.part - infected container
C:\Users\Shiloh\Desktop\2015.11.8\47.vir\8.part - Ok
C:\Users\Shiloh\Desktop\2015.11.8\47.vir - infected mail
C:\Users\Shiloh\Desktop\2015.11.8\47.vir - infected mail - 79ms, 17885 bytes
C:\Users\Shiloh\Desktop\2015.11.8\48.vir:Zone.Identifier - Ok - 8ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\48.vir\Shipping documents.exe - infected with Trojan.PWS.Steam.8234
C:\Users\Shiloh\Desktop\2015.11.8\48.vir\Shipping documents.exe - infected
C:\Users\Shiloh\Desktop\2015.11.8\49.vir - Ok - 59ms, 147460 bytes
C:\Users\Shiloh\Desktop\2015.11.8\49.vir:Zone.Identifier - Ok - 7ms, 26 bytes
C:\Users\Shiloh\Desktop\2015.11.8\48.vir\Shipped Invoice.exe - Ok
C:\Users\Shiloh\Desktop\2015.11.8\48.vir - infected archive
C:\Users\Shiloh\Desktop\2015.11.8\48.vir - infected archive - 111ms, 238162 bytes
C:\Users\Shiloh\Desktop\2015.11.8\50.vir:Zone.Identifier - Ok - 8ms, 26 bytes
>C:\Users\Shiloh\Desktop\2015.11.8\44.vir - packed by PECOMPACT
>C:\Users\Shiloh\Desktop\2015.11.8\46.vir - packed by FLY-CODE
C:\Users\Shiloh\Desktop\2015.11.8\44.vir - Ok - 513ms, 98308 bytes
>>C:\Users\Shiloh\Desktop\2015.11.8\46.vir - packed by PESTUB
C:\Users\Shiloh\Desktop\2015.11.8\46.vir - Ok - 413ms, 57348 bytes
C:\Users\Shiloh\Desktop\2015.11.8\50.vir - infected with Trojan.Encoder.2139
C:\Users\Shiloh\Desktop\2015.11.8\50.vir - infected - 11ms, 72708 bytes
C:\Users\Shiloh\Desktop\2015.11.8\35.vir - Ok - 1055ms, 36356 bytes
-----------------------------------------------------------------------------
Start curing
-----------------------------------------------------------------------------
C:\Users\Shiloh\Desktop\2015.11.8\01.vir - quarantined - 1172 ms
C:\Users\Shiloh\Desktop\2015.11.8\07.vir - quarantined - 40 ms
C:\Users\Shiloh\Desktop\2015.11.8\09.vir - quarantined - 34 ms
C:\Users\Shiloh\Desktop\2015.11.8\10.vir - quarantined - 30 ms
C:\Users\Shiloh\Desktop\2015.11.8\03.vir - quarantined - 36 ms
C:\Users\Shiloh\Desktop\2015.11.8\02.vir - quarantined - 31 ms
C:\Users\Shiloh\Desktop\2015.11.8\04.vir - quarantined - 55 ms
C:\Users\Shiloh\Desktop\2015.11.8\15.vir - quarantined - 31 ms
C:\Users\Shiloh\Desktop\2015.11.8\14.vir - quarantined - 42 ms
C:\Users\Shiloh\Desktop\2015.11.8\08.vir - quarantined - 74 ms
C:\Users\Shiloh\Desktop\2015.11.8\19.vir - quarantined - 35 ms
C:\Users\Shiloh\Desktop\2015.11.8\20.vir - quarantined - 42 ms
C:\Users\Shiloh\Desktop\2015.11.8\16.vir - quarantined - 46 ms
C:\Users\Shiloh\Desktop\2015.11.8\12.vir - quarantined - 70 ms
C:\Users\Shiloh\Desktop\2015.11.8\18.vir - quarantined - 54 ms
C:\Users\Shiloh\Desktop\2015.11.8\21.vir - quarantined - 54 ms
C:\Users\Shiloh\Desktop\2015.11.8\25.vir - quarantined - 52 ms
C:\Users\Shiloh\Desktop\2015.11.8\30.vir - quarantined - 38 ms
C:\Users\Shiloh\Desktop\2015.11.8\33.vir - quarantined - 42 ms
C:\Users\Shiloh\Desktop\2015.11.8\34.vir - quarantined - 33 ms
C:\Users\Shiloh\Desktop\2015.11.8\37.vir - quarantined - 35 ms
C:\Users\Shiloh\Desktop\2015.11.8\36.vir - quarantined - 39 ms
C:\Users\Shiloh\Desktop\2015.11.8\41.vir - quarantined - 41 ms
C:\Users\Shiloh\Desktop\2015.11.8\40.vir - quarantined - 33 ms
C:\Users\Shiloh\Desktop\2015.11.8\42.vir - quarantined - 43 ms
C:\Users\Shiloh\Desktop\2015.11.8\39.vir - quarantined - 127 ms
C:\Users\Shiloh\Desktop\2015.11.8\47.vir - quarantined - 36 ms
C:\Users\Shiloh\Desktop\2015.11.8\48.vir - quarantined - 43 ms
C:\Users\Shiloh\Desktop\2015.11.8\50.vir - quarantined - 46 ms

Total 7965051 bytes in 100 files scanned (183 objects, 8 containers)
Total 71 files (135 objects) are clean
Total 27 files (28 objects) are infected
Total 2 files are suspicious
Total 29 files (30 objects) are neutralized
Total 1 file is raised error condition
Scan time is 00:00:02.755[/mw_shl_code]

xyz0703

蓝天二号

GD 右键 37X

nick20010117

蓝天二号 发表于 2015-11-8 09:50
GD 右键 37X

为何已扫描选项是49个

狐狸糊涂

BD杀35,余15

蓝天二号

nick20010117 发表于 2015-11-8 09:52
为何已扫描选项是49个

自动隔离一个，，

nick20010117

@cxy密斯 @驭龙
双击结果  DPH kill3x

ericdj

EIS　
剩余16，kill 34

扫描日志

毛豆新人

CIS kill 6x， repair 0x