精睿样本测试（16.1.9）

显示全部楼层 · 发表于 2016-1-9 15:00:26

这个就交给你了

显示全部楼层 · 发表于 2016-1-9 15:07:36

eset9.0 隔离35X
[mw_shl_code=css,true]日志
正在扫描日志
病毒库版本: 12841 (20160108)
日期: 2016/1/9  时间: 15:04:59
已扫描的磁盘、文件夹和文件: D:\Download\Virus\2016.1.9
D:\Download\Virus\2016.1.9\01.vir - MSIL/Injector.NMB 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\04.vir > ZIP > VhISUERWhtSRpJMZFNnUBdc/Jarizer.class - Java/Kryptik.C 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\04.vir > ZIP > VhISUERWhtSRpJMZFNnUBdc/Main.class - Java/Kryptik.B 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\06.vir - VBS/Obfuscated.G 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\07.vir - Win32/Injector.COXH 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\08.vir > ZIP > REF-0301120783doc.exe - MSIL/Kryptik.ESN 特洛伊木马的变种 - 已删除 - 已隔离
D:\Download\Virus\2016.1.9\09.vir > ZIP > Vessel Particulars.scr - MSIL/Injector.NME 特洛伊木马的变种 - 已删除 - 已隔离
D:\Download\Virus\2016.1.9\10.vir > ZIP > main/???????????prn.class - Java/Adwind.LL 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\10.vir > ZIP > main/Start.class - Java/Adwind.RL 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\11.vir - Win32/TrojanDownloader.Agent.BEI 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\14.vir > UPX v13_m8 > AUTOIT > script.au3 - Win32/Injector.Autoit.BZN 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\14.vir > AUTOIT - 正常
D:\Download\Virus\2016.1.9\16.vir > ZIP > Proforma Invoice.exe - MSIL/Autorun.Spy.Agent.AU 蠕虫 - 已删除 - 已隔离
D:\Download\Virus\2016.1.9\17.vir > ZIP > shipping_docs_047pdf.exe - MSIL/Injector.NME 特洛伊木马的变种 - 已删除 - 已隔离
D:\Download\Virus\2016.1.9\23.vir > ACE > _22,500    balance             payment.exe - MSIL/Autorun.Spy.Agent.AU 蠕虫 - 已删除 - 已隔离
D:\Download\Virus\2016.1.9\23.vir > ACE >  - 压缩文件已损坏
D:\Download\Virus\2016.1.9\24.vir - Win32/VB.OOB 蠕虫 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\25.vir - MSIL/TrojanDownloader.Tiny.AS 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\26.vir - VBA/TrojanDownloader.Agent.ANT 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\27.vir - VBA/TrojanDownloader.Agent.ANT 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\28.vir - Win32/PSW.Papras.EH 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\30.vir - VBA/TrojanDownloader.Agent.ANT 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\32.vir - Win32/Kryptik.EIAW 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\34.vir - VBA/TrojanDownloader.Agent.ANT 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\35.vir - Win32/TrojanDownloader.Agent.BEI 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\36.vir - JS/Kryptik.AYX 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\37.vir - Win32/TrojanDownloader.Agent.BEI 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\38.vir - VBA/TrojanDownloader.Agent.ANT 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\39.vir - VBA/TrojanDownloader.Agent.ANT 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\40.vir > ZIP > Proforma Invoice.exe - MSIL/Injector.NLF 特洛伊木马的变种 - 已删除 - 已隔离
D:\Download\Virus\2016.1.9\41.vir - JS/TrojanClicker.Agent.NFZ.Gen 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\42.vir - VBA/TrojanDownloader.Agent.ANT 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\43.vir > NSIS > Script.nsi - Win32/Adware.1ClickDownload.W 应用程序 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\44.vir > ZIP > f12/bZ.class - Java/Jacksbot.W 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\44.vir > ZIP > f12/dS.class - Java/Jacksbot.X 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\44.vir > ZIP > f12/ea.class - 正常
D:\Download\Virus\2016.1.9\45.vir > ZIP > PO invoice.exe - MSIL/Kryptik.ESX 特洛伊木马的变种 - 已删除 - 已隔离
D:\Download\Virus\2016.1.9\46.vir > BAT2EXE > vDos Rain BETA.bat - 文件校验和 (CRC) 错误；文件可能受密码保护。
D:\Download\Virus\2016.1.9\47.vir - Win32/Talmad.A 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\48.vir - VBA/TrojanDownloader.Agent.ANT 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\49.vir - Win32/Injector.COYV 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
D:\Download\Virus\2016.1.9\50.vir - Win32/Kryptik.AAHE 特洛伊木马的变种 - 通过删除清除 - 已隔离 [1]
已扫描的对象数: 479
发现的威胁数: 38
已清除对象数: 39
完成时间: 15:05:09  总扫描时间: 10 秒 (00:00:10)

备注:
[1] 由于对象中仅包含病毒主体，因此已被删除。
[/mw_shl_code]

显示全部楼层 · 发表于 2016-1-9 15:35:10

到底还能不能继续使用呢？？？

显示全部楼层 · 发表于 2016-1-9 16:15:24

百度好厉害！第一次查出来4个，没清，第二次一个也没有了！后来还是我的eset杀了36个

显示全部楼层 · 发表于 2016-1-9 17:00:55

BitDefender Log File
Product : Bitdefender Internet Security 2016
Scanning task : Contextual Scan
Log date : 2016年1月9日星期六 16:53:22
Log path : C:\Users\*\AppData\Roaming\Bitdefender\Desktop\Profiles\Logs\2ab858ed-450b-4bb6-b67c-8e3c45ec13ac\1452329453_1_02.xml

Scan Paths:
Path : D:\*\Desktop\2016.1.9

[-]Scan Results
Scanned items : 581
Infected items : 44
Suspicious items : 0 (no suspected items have been detected)
Resolved items : 45
Unresolved items : 0

[-]Advanced
Scan time : 0: 02: 11
Files per second : 4
Skipped items : 0
Password-protected items : 0
Overcompressed items : 0
Scanned archives : 11
Input-output errors : 0
Scanned boot sectors : 0
Scanned processes : 0
Infected processes : 0
Scanned registry keys : 0
Infected registry keys : 0
Scanned cookies : 0
Infected cookies : 0

[-]Resolved issues:
Object Path Threat Name Final Status

D:\*\Desktop\2016.1.9\07.vir Trojan.GenericKD.2943501 Deleted
D:\*\Desktop\2016.1.9\25.vir Gen:Variant.Kazy.737655 Deleted
D:\*\Desktop\2016.1.9\48.vir=>(REMOVED_NULLS)=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\49.vir Trojan.GenericKD.2945115 Deleted
D:\*\Desktop\2016.1.9\02.vir=>PlayCheat - PBBR (23-12)\PlayCheat - PBBR.exe Trojan.GenericKD.2947055 Moved to Quarantine
D:\*\Desktop\2016.1.9\47.vir Gen:Variant.Zusy.167461 Deleted
D:\*\Desktop\2016.1.9\01.vir Trojan.GenericKD.2970519 Deleted
D:\*\Desktop\2016.1.9\42.vir=>(REMOVED_NULLS)=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\45.vir=>PO invoice.exe Trojan.GenericKD.2968630 Deleted
D:\*\Desktop\2016.1.9\06.vir Trojan.VBS.Downloader.JS Moved to Quarantine
D:\*\Desktop\2016.1.9\24.vir Trojan.GenericKD.2971549 Deleted
D:\*\Desktop\2016.1.9\38.vir=>(REMOVED_NULLS)=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\14.vir Trojan.GenericKD.2971847 Deleted
D:\*\Desktop\2016.1.9\32.vir Trojan.GenericKD.2920720 Deleted
D:\*\Desktop\2016.1.9\50.vir Gen:Variant.Zusy.Elzob.5264 Deleted
D:\*\Desktop\2016.1.9\39.vir=>(REMOVED_NULLS)=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\08.vir=>REF-0301120783doc.exe Trojan.GenericKD.2969620 Deleted
D:\*\Desktop\2016.1.9\11.vir Gen:Variant.Zusy.171230 Deleted
D:\*\Desktop\2016.1.9\40.vir=>Proforma Invoice.exe Trojan.GenericKD.2967798 Deleted
D:\*\Desktop\2016.1.9\22.vir Trojan.GenericKD.2947055 Deleted
D:\*\Desktop\2016.1.9\37.vir Gen:Variant.Zusy.128573 Deleted
D:\*\Desktop\2016.1.9\18.vir HTML.Phishing.AK Moved to Quarantine
D:\*\Desktop\2016.1.9\36.vir Trojan.Downloader.JS.RX Deleted
D:\*\Desktop\2016.1.9\48.vir=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\09.vir=>Vessel Particulars.scr Trojan.GenericKD.2971808 Deleted
D:\*\Desktop\2016.1.9\42.vir=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\39.vir=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\35.vir Dropped:Trojan.GenericKD.2249655 Deleted
D:\*\Desktop\2016.1.9\34.vir=>(REMOVED_NULLS)=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\27.vir=>(REMOVED_NULLS)=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\31.vir Exploit.CVE-2009-3129.Gen Moved to Quarantine
D:\*\Desktop\2016.1.9\03.vir Trojan.GenericKD.2911599 Deleted
D:\*\Desktop\2016.1.9\21.vir W97M.Downloader.ANQ Deleted
D:\*\Desktop\2016.1.9\26.vir=>(REMOVED_NULLS)=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\38.vir=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\28.vir Trojan.GenericKD.2971542 Deleted
D:\*\Desktop\2016.1.9\23.vir=>_22,500 balance payment.exe Trojan.GenericKD.2971087 Moved to Quarantine
D:\*\Desktop\2016.1.9\26.vir=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\16.vir=>Proforma Invoice.exe Trojan.GenericKD.2970918 Deleted
D:\*\Desktop\2016.1.9\27.vir=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\34.vir=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\30.vir=>(REMOVED_NULLS)=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted
D:\*\Desktop\2016.1.9\17.vir=>shipping_docs_047pdf.exe Trojan.GenericKD.2971480 Deleted
D:\*\Desktop\2016.1.9\30.vir=>(application)=>(Active Mime) W97M.Downloader.ANR Deleted

显示全部楼层 · 发表于 2016-1-9 17:20:58

T.Yoshiyuki 发表于 2016-1-9 13:36
趋势日文版这皮肤……

快播看多了

显示全部楼层 · 发表于 2016-1-9 17:33:09

好久没测精睿样本了，看看金山官人今天上班没

嗯，果然没有上班

显示全部楼层 · 发表于 2016-1-9 19:40:43

windows7爱好者发表于 2016-1-9 15:00
这个就交给你了@275751198

360杀毒云+QVM 修改后缀后杀29个剩余21个

显示全部楼层 · 发表于 2016-1-9 19:58:47

T.Yoshiyuki 发表于 2016-1-9 13:04
FSCS
扫描杀29x 其中跳过7x（08 09 16 17 31 40 45）
[mw_shl_code=css,true]结果: 发现 45 个恶意软件

请问一下用什么工具能快速检测文件的实际后缀名？我搜到几个一点都不好用

显示全部楼层 · 发表于 2016-1-9 20:11:50

275751198 发表于 2016-1-9 19:58
请问一下用什么工具能快速检测文件的实际后缀名？我搜到几个一点都不好用

有结果记得@我

[病毒样本] 精睿样本测试（16.1.9）

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块