精睿样本测试（16.2.8）

显示全部楼层 · 发表于 2016-2-8 10:43:59

地址：
http://kuai.xunlei.com/d/zuh.AWEdDeu3VgQA3a2

http://pan.baidu.com/s/1hrnUP3u 提取密码 t66a

密码：bbs.vc52.cn
数量：60

年内最后一包，祝大家春节快乐，开心过好年！

显示全部楼层 · 发表于 2016-2-8 10:53:08

本帖最后由神迹般存在于 2016-2-8 11:00 编辑

卡巴斯基安全软件2016：
删除24个，清除11个。

已上报。

另：大家新年快乐~~

显示全部楼层 · 发表于 2016-2-8 10:59:50

补杀[mw_shl_code=css,true]时间;扫描程序;对象类型;对象;威胁;操作;用户;信息;哈希
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\60.vir;Win32/Kryptik.EMWM 特洛伊木马的变种;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;8B4E9496DA600109F56D73DE0906E41C2CDC0F7F
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\58.vir;Win32/Injector.CRPE 特洛伊木马的变种;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;558389860C9D5BB3F7B6E36A46646B70106D39C5
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\54.vir;Android/TrojanSMS.Agent.BLJ 特洛伊木马的变种;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;9ECEEC7C3CE946C0FE151FA882279B1B4735F1A7
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\51.vir;MSIL/TrojanDownloader.Banload.FX 特洛伊木马的变种;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;85C76C668327FFCB12B88147544080B6CFBD1024
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\52.vir;VBA/TrojanDownloader.Agent.ARP 特洛伊木马;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;3B1E9A4DCF3B4C8DEE5D5C3F1D6C27CE5CD6E942
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\50.vir;Win32/Trustezeb.K 特洛伊木马;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;9D16662FE12F034971D0DE9E4A71A7BE6C834DA2
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\42.vir;Win32/Injector.CRRP 特洛伊木马的变种;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;687FC8A2939A82FA82EE85684D13FAF2214B0171
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\47.vir;JS/TrojanDownloader.Nemucod.DX 特洛伊木马;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;193D4078DC4A5C88703282CF11E3966026045BA7
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\46.vir;JS/TrojanDownloader.Nemucod.DR 特洛伊木马;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;14C0513C20424CBE6C2054F0C9826420B88CB366
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\32.vir;多个威胁;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.;
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\45.vir;Win32/Filecoder.EQ 特洛伊木马;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;CF4DA31E035DAC0A00AB17CF1B2AE342B288C094
2016/2/8 星期一 10:56:07;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\55.vir;VBA/TrojanDownloader.Agent.ARN 特洛伊木马;已清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;2F76E644BB854206C0502D5B8028411F4E2DBE84
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\35.vir;Win32/TrojanDownloader.Banload.WXO 特洛伊木马的变种;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;4E32828198387A0C0C13727075BD90761374CCA8
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\41.vir;Win32/TrojanDownloader.Banload.WTY 特洛伊木马的变种;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;A058E231FE6D12E11AA4D48B2482C7BFE8B56C88
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\34.vir;JS/TrojanDownloader.Nemucod.DU 特洛伊木马;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;7F6E5CE536B9B260BE6720BF047E91954669265F
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\25.vir;Win32/Kryptik.EMWM 特洛伊木马的变种;通过删除清除;;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;EEC8FDEDBDDD51BA4A536FDE36CF35EC294512C4
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\48.vir;VBA/TrojanDownloader.Agent.ARO 特洛伊木马;已清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;2DE1726D4A3E906EB0B70FB7BD83B59F95C67730
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\22.vir;Win32/Injector.CRPZ 特洛伊木马的变种;通过删除清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;0F56654004D8C353736026FF4BDE1BA90A6C12A2
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\20.vir;Win32/TrojanDownloader.Banload.URO 特洛伊木马的变种;通过删除清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;319377B021FA57BF22BB92A202237521350D55C3
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\29.vir;Win32/Filecoder.DI 特洛伊木马;通过删除清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;1B35537E315EA2BFCFC932151A7C7800DEBCAF34
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\26.vir;MSIL/Injector.NCX 特洛伊木马的变种;通过删除清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;C56961E2A3F8639BE413B9BFFCE7397E7D4F81DE
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\19.vir;Win32/TrojanDownloader.Delf.BKF 特洛伊木马的变种;已删除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.;
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\40.vir;VBA/TrojanDownloader.Agent.ARR 特洛伊木马;已清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;2F17A84DED1540C4487588A69BAF0283727E1B8C
2016/2/8 星期一 10:56:06;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\36.vir;VBA/TrojanDownloader.Agent.ARO 特洛伊木马;已清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;48967446C42AB724E126F78D12AAFA269B4F0D0C
2016/2/8 星期一 10:56:05;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\07.vir;VBA/TrojanDownloader.Agent.ARR 特洛伊木马;已清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;3CEF38E8C22A0532560FA451A3DAFF8DEDD53746
2016/2/8 星期一 10:56:05;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\16.vir;Win32/Packed.VMProtect.ABO 特洛伊木马的变种;通过删除清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;DB6A0475B871826F358D019CEB94B490C3F99EC4
2016/2/8 星期一 10:56:05;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\12.vir;JS/TrojanDownloader.Nemucod.DX 特洛伊木马;通过删除清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;176291EB8DC82D48E5BB2A6AF6C2CC97AA5967E9
2016/2/8 星期一 10:56:05;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\03.vir;Win32/Farfli.AYO 特洛伊木马的变种;通过删除清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;10E4BA9B92F5E5333E8533C859615C4F93D756A3
2016/2/8 星期一 10:56:05;文件系统实时防护;文件;D:\个人文件\桌面\2016.2.8\2016.2.8\02.vir;VBA/TrojanDownloader.Agent.ARE 特洛伊木马;已清除;USER-0K84B09LCU\Administrator;在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe (BBC69E6E9459BCFCBED06768CF1EFA99F1FDB478).;007A27C0F13E2A67681D3FC89964E95F06CC3340
[/mw_shl_code]

显示全部楼层 · 发表于 2016-2-8 11:18:14

蜘蛛KILL25个，其中删除25个，修复0个

显示全部楼层 · 发表于 2016-2-8 11:23:45

火绒

统计结果

原始文件数量: 60

处理项目数量: 17

删除项目数量: 14

修复项目数量: 3

近似查杀率: 28.33 %

Huorong Network Security Suite v3.0.11.2 (Last update: 2016-02-05 13:19)
Copyright (C) Huorong Borui (Beijing) Technology Co., Ltd. All rights reserved.

Scan engine version:v2.0.3.0
Signature database fingerprint: 40162d0:96a63d3:965e05b:965e05b
Signature database timestamp: 2016-02-05 13:19

Scan started at: 2016-02-08 11:22:01

C:\Users\wuliao\Desktop\2016.2.8\06.vir >> word\document.xml: OMacro/Downloader.ci
C:\Users\wuliao\Desktop\2016.2.8\07.vir: OMacro/Downloader.dl
C:\Users\wuliao\Desktop\2016.2.8\08.vir: Trojan/HTML.IframeRef
C:\Users\wuliao\Desktop\2016.2.8\15.vir >> Inferno W0RM Builder.exe: HEUR:Trojan/Agent.ai
C:\Users\wuliao\Desktop\2016.2.8\14.vir: HEUR:DOC/MalBehav.a
C:\Users\wuliao\Desktop\2016.2.8\24.vir >> Scan012.pdf.........................................................exe >> 晙\nemerteans.dll: Trojan/Generic!7A3C073C472D09E8
C:\Users\wuliao\Desktop\2016.2.8\24.vir >> Scan011.pdf........................................................................exe: Trojan/Generic!4D261C2F75B51FB9
C:\Users\wuliao\Desktop\2016.2.8\25.vir: HVM:VirTool/Obfuscator.gen!B
C:\Users\wuliao\Desktop\2016.2.8\32.vir: Trojan/Generic!7A3C073C472D09E8
C:\Users\wuliao\Desktop\2016.2.8\20.vir: HVM:TrojanDownloader/Banload.f
C:\Users\wuliao\Desktop\2016.2.8\37.vir >> invoice_6307256.scr: VirTool/Obfuscator.z
C:\Users\wuliao\Desktop\2016.2.8\40.vir: OMacro/Downloader.dl
C:\Users\wuliao\Desktop\2016.2.8\43.vir: Trojan/JS.Agent.g
C:\Users\wuliao\Desktop\2016.2.8\42.vir: HVM:Trojan/Injector.gen
C:\Users\wuliao\Desktop\2016.2.8\44.vir >> install.exe: Trojan/Generic!0C381FD2EFE36F1F
C:\Users\wuliao\Desktop\2016.2.8\51.vir: TrojanDownloader/MSIL.Banload.a
C:\Users\wuliao\Desktop\2016.2.8\59.vir >> #589745411.exe >> 晙\sack.dll: Trojan/Generic!07E7502C5CC60CDE
C:\Users\wuliao\Desktop\2016.2.8\58.vir: HEUR:VirTool/Obfuscator.gen!C

Scan completed at: 2016-02-08 11:22:18

Total:          60 file(s), 549 objects(s)
Infected:       17 file(s), 18 objects(s)
Deleted:          0 file(s), 0 failure(s)
Disinfected:    0 file(s), 0 failure(s)
Duration:       00:00:17

显示全部楼层 · 发表于 2016-2-8 11:40:50

本帖最后由 Anqring 于 2016-2-8 15:06 编辑

360 Total Security扫描日志

扫描时间：2016-02-08 11:38:35
扫描用时：00:00:01
扫描项目总数：60
威胁总数：0
处理威胁数：0

扫描选项
----------------------
扫描压缩包：是
常规引擎设置：未开启小红伞和Bitdefender引擎

扫描内容
----------------------
D:\virustest\16-2-8\2016.2.8\

扫描结果
======================
未发现威胁

360 Total Security扫描日志

扫描时间：2016-02-08 11:38:47
扫描用时：00:00:04
扫描项目总数：60
威胁总数：29
处理威胁数：0

扫描选项
----------------------
扫描压缩包：是
常规引擎设置：Bitdefender引擎

扫描内容
----------------------
D:\virustest\16-2-8\2016.2.8\

扫描结果
======================
高风险项目
----------------------
D:\virustest\16-2-8\2016.2.8\04.vir Trojan.Java.Adwind.BZ 未处理
D:\virustest\16-2-8\2016.2.8\02.vir W97M.Downloader.ASO 未处理
D:\virustest\16-2-8\2016.2.8\05.vir Trojan.VBS.Downloader.KH 未处理
D:\virustest\16-2-8\2016.2.8\07.vir Trojan.Doc.Agent.AE 未处理
D:\virustest\16-2-8\2016.2.8\08.vir Trojan.HTML.Iframe.U 未处理
D:\virustest\16-2-8\2016.2.8\11.vir Exploit.RTF.CVE-2012-0158.G 未处理
D:\virustest\16-2-8\2016.2.8\12.vir JS:Trojan.JS.Agent.LO 未处理
D:\virustest\16-2-8\2016.2.8\14.vir Trojan.GenericKD.3027461 未处理
D:\virustest\16-2-8\2016.2.8\34.vir JS:Trojan.JS.Downloader.CB 未处理
D:\virustest\16-2-8\2016.2.8\36.vir X97M.Downloader.BC 未处理
D:\virustest\16-2-8\2016.2.8\38.vir Trojan.Java.Adwind.CA 未处理
D:\virustest\16-2-8\2016.2.8\40.vir Trojan.Doc.Agent.AE 未处理
D:\virustest\16-2-8\2016.2.8\03.vir Trojan.GenericKD.3027793 未处理
D:\virustest\16-2-8\2016.2.8\16.vir Gen:Variant.Kazy.698289 未处理
D:\virustest\16-2-8\2016.2.8\10.vir Trojan.Generic.15012661 未处理
D:\virustest\16-2-8\2016.2.8\20.vir Gen:Variant.Symmi.56310 未处理
D:\virustest\16-2-8\2016.2.8\26.vir Trojan.GenericKD.3028038 未处理
D:\virustest\16-2-8\2016.2.8\29.vir Trojan.Ransom.AOT 未处理
D:\virustest\16-2-8\2016.2.8\28.vir Gen:Trojan.Heur.wuZ@yT781agOi 未处理
D:\virustest\16-2-8\2016.2.8\41.vir Trojan.GenericKD.3027965 未处理
D:\virustest\16-2-8\2016.2.8\25.vir Trojan.GenericKD.3028072 未处理
D:\virustest\16-2-8\2016.2.8\50.vir Trojan.GenericKD.3027968 未处理
D:\virustest\16-2-8\2016.2.8\51.vir Trojan.GenericKD.3019574 未处理
D:\virustest\16-2-8\2016.2.8\35.vir Gen:Variant.Graftor.269443 未处理
D:\virustest\16-2-8\2016.2.8\60.vir Trojan.GenericKD.3028065 未处理
D:\virustest\16-2-8\2016.2.8\46.vir Trojan.Downloader.JS.SJ 未处理
D:\virustest\16-2-8\2016.2.8\48.vir X97M.Downloader.BC 未处理
D:\virustest\16-2-8\2016.2.8\49.vir JS:Trojan.JS.Downloader.BW 未处理
D:\virustest\16-2-8\2016.2.8\47.vir JS:Trojan.Script.CTX 未处理

analyzing 22 analyzed 22 no threats found

二扫：
360 Total Security扫描日志

扫描时间：2016-02-08 12:10:43
扫描用时：00:00:01
扫描项目总数：60
威胁总数：0
处理威胁数：0

扫描选项
----------------------
扫描压缩包：是
常规引擎设置：未开启小红伞和Bitdefender引擎

扫描内容
----------------------
D:\virustest\16-2-8\2016.2.8\

扫描结果
======================
未发现威胁

360 Total Security扫描日志

扫描时间：2016-02-08 12:10:59
扫描用时：00:00:01
扫描项目总数：60
威胁总数：0
处理威胁数：0

扫描选项
----------------------
扫描压缩包：是
常规引擎设置：Bitdefender引擎

扫描内容
----------------------
D:\virustest\16-2-8\2016.2.8\

扫描结果
======================
未发现威胁

先去上报

三扫
360 Total Security扫描日志

扫描时间：2016-02-08 15:04:50
扫描用时：00:00:01
扫描项目总数：60
威胁总数：2
处理威胁数：0

扫描选项
----------------------
扫描压缩包：是
常规引擎设置：未开启小红伞和Bitdefender引擎

扫描内容
----------------------
D:\virustest\16-2-8\2016.2.8\

扫描结果
======================
高风险项目
----------------------
D:\virustest\16-2-8\2016.2.8\13.vir HEUR/QVM03.0.Malware.Gen 未处理
D:\virustest\16-2-8\2016.2.8\44.vir HEUR/QVM06.2.Malware.Gen 未处理

360 Total Security扫描日志

扫描时间：2016-02-08 15:06:13
扫描用时：00:00:08
扫描项目总数：60
威胁总数：35
处理威胁数：0

扫描选项
----------------------
扫描压缩包：是
常规引擎设置：Bitdefender引擎

扫描内容
----------------------
D:\virustest\16-2-8\

扫描结果
======================
高风险项目
----------------------
D:\virustest\16-2-8\2016.2.8\13.vir HEUR/QVM03.0.Malware.Gen 未处理
D:\virustest\16-2-8\2016.2.8\44.vir HEUR/QVM06.2.Malware.Gen 未处理
D:\virustest\16-2-8\2016.2.8\02.vir W97M.Downloader.ASO 未处理
D:\virustest\16-2-8\2016.2.8\07.vir Trojan.Doc.Agent.AE 未处理
D:\virustest\16-2-8\2016.2.8\08.vir Trojan.HTML.Iframe.U 未处理
D:\virustest\16-2-8\2016.2.8\11.vir Exploit.RTF.CVE-2012-0158.G 未处理
D:\virustest\16-2-8\2016.2.8\12.vir JS:Trojan.JS.Downloader.CF 未处理
D:\virustest\16-2-8\2016.2.8\04.vir Trojan.Java.Adwind.BZ 未处理
D:\virustest\16-2-8\2016.2.8\14.vir Trojan.GenericKD.3027461 未处理
D:\virustest\16-2-8\2016.2.8\05.vir Trojan.VBS.Downloader.KH 未处理
D:\virustest\16-2-8\2016.2.8\38.vir Trojan.Java.Adwind.CA 未处理
D:\virustest\16-2-8\2016.2.8\34.vir JS:Trojan.JS.Downloader.CB 未处理
D:\virustest\16-2-8\2016.2.8\36.vir X97M.Downloader.BC 未处理
D:\virustest\16-2-8\2016.2.8\40.vir Trojan.Doc.Agent.AE 未处理
D:\virustest\16-2-8\2016.2.8\46.vir Trojan.Downloader.JS.SJ 未处理
D:\virustest\16-2-8\2016.2.8\49.vir JS:Trojan.JS.Downloader.BW 未处理
D:\virustest\16-2-8\2016.2.8\48.vir X97M.Downloader.BC 未处理
D:\virustest\16-2-8\2016.2.8\47.vir JS:Trojan.Script.CTX 未处理
D:\virustest\16-2-8\2016.2.8\03.vir Trojan.GenericKD.3027793 未处理
D:\virustest\16-2-8\2016.2.8\10.vir Trojan.Generic.15012661 未处理
D:\virustest\16-2-8\2016.2.8\16.vir Gen:Variant.Application.Kazy.698289 未处理
D:\virustest\16-2-8\2016.2.8\22.vir Trojan.GenericKD.3028527 未处理
D:\virustest\16-2-8\2016.2.8\25.vir Trojan.GenericKD.3028072 未处理
D:\virustest\16-2-8\2016.2.8\28.vir Gen:Trojan.Heur.wuZ@yT781agOi 未处理
D:\virustest\16-2-8\2016.2.8\20.vir Gen:Variant.Symmi.56310 未处理
D:\virustest\16-2-8\2016.2.8\26.vir Trojan.GenericKD.3028038 未处理
D:\virustest\16-2-8\2016.2.8\29.vir Trojan.GenericKD.3028602 未处理
D:\virustest\16-2-8\2016.2.8\35.vir Gen:Variant.Graftor.269443 未处理
D:\virustest\16-2-8\2016.2.8\45.vir Trojan.GenericKD.3028572 未处理
D:\virustest\16-2-8\2016.2.8\42.vir Trojan.GenericKD.3029092 未处理
D:\virustest\16-2-8\2016.2.8\41.vir Trojan.GenericKD.3027965 未处理
D:\virustest\16-2-8\2016.2.8\50.vir Trojan.GenericKD.3027968 未处理
D:\virustest\16-2-8\2016.2.8\51.vir Trojan.GenericKD.3019574 未处理
D:\virustest\16-2-8\2016.2.8\58.vir Trojan.GenericKD.3028683 未处理
D:\virustest\16-2-8\2016.2.8\60.vir Trojan.GenericKD.3028065 未处理

显示全部楼层 · 发表于 2016-2-8 11:47:26

CIS 12x

显示全部楼层 · 发表于 2016-2-8 11:57:19

Bitdefender killed 53
[mw_shl_code=xml,true]<?xml version="1.0" encoding="utf-8"?>
<?xml-stylesheet type="text/xsl" href="E:\Program Files\Bitdefender\Bitdefender 2016\ondemand.xsl"?>
<ScanSession creator="Bitdefender Internet Security 2016" name="Contextual Scan" installPath="E:\Program Files\Bitdefender\Bitdefender 2016\" creationDate="2016年2月8日星期一 11:56:12" originalPath="E:\Users\xyz11\AppData\Roaming\Bitdefender\Desktop\Profiles\Logs\2ab858ed-450b-4bb6-b67c-8e3c45ec13ac\1454903525_1_02.xml" >
<ScanSettings
statisticsRefreshInterval="1000"
scanSpeed="1.000000"
lowPriority="0"
enableExclusions="0"
enableTaskExclusions="0"
scanAdware="1"
scanSpyware="1"
scanApplications="1"
scanDialers="1"
scanKeyloggers="1"
scanFiles="1"
scanAllFiles="1"
scanProgramsOnly="0"
useCustomPrograms="0"
customPrograms=""
scanUserDefined="0"
scanPacked="1"
scanArchives="1"
useSmartScan="1"
scanEmails="1"
scanRootkits="0"
scanAllRootkits="0"
scanBoot="0"
scanMemory="0"
scanRegistry="0"
quickScan="0"
quickScanMemory="0"
quickScanAutoruns="0"
quickScanPlugins="0"
scanCookies="0"
shutdownAfter="0"
passwordPrompt="1"
onlyAllowedActions="1"
deepArchiveScan="1"
maxArchiveLevel="15"
maxArchiveSize="0"
infectedAction1="1"
infectedAction2="1"
suspectAction1="1"
suspectAction2="1"
rootkitAction="1"
userDefinedExtensions=""
scanPua="-1"
>

<ScanPaths>
<path>E:\Users\xyz11\Desktop\2016.2.8</path>
</ScanPaths>

<ExcludedPaths>
</ExcludedPaths>

<ExcludedExtensions>
</ExcludedExtensions>

</ScanSettings>

<EngineSummary
totalSignatures="6125117"
/>

<ScanSummary
scannedArchives="8"
scannedPacked="4"
startTime="1454903525"
duration="234469"
>

<TypeSummary type="1"
scanned="0"
infected="0"
suspicious="0"
disinfected="0"
deleted="0"
moved="0"
moved_reboot="0"
delete_reboot="0"
renamed="0"
hidden="0"
/>

<TypeSummary type="4"
scanned="0"
infected="0"
suspicious="0"
disinfected="0"
deleted="0"
moved="0"
moved_reboot="0"
delete_reboot="0"
renamed="0"
hidden="0"
/>

<TypeSummary type="0"
scanned="266"
infected="53"
suspicious="0"
disinfected="3"
deleted="36"
moved="13"
moved_reboot="0"
delete_reboot="0"
renamed="2"
hidden="0"
/>

<TypeSummary type="5"
scanned="0"
infected="0"
suspicious="0"
disinfected="0"
deleted="0"
moved="0"
moved_reboot="0"
delete_reboot="0"
renamed="0"
hidden="0"
/>

<TypeSummary type="2"
scanned="0"
infected="0"
suspicious="0"
disinfected="0"
deleted="0"
moved="0"
moved_reboot="0"
delete_reboot="0"
renamed="0"
hidden="0"
/>

<TypeSummary type="3"
scanned="0"
infected="0"
suspicious="0"
disinfected="0"
deleted="0"
moved="0"
moved_reboot="0"
delete_reboot="0"
renamed="0"
hidden="0"
/>

<TypeSummary type="6"
scanned="0"
infected="0"
suspicious="0"
disinfected="0"
deleted="0"
moved="0"
moved_reboot="0"
delete_reboot="0"
renamed="0"
hidden="0"
/>

</ScanSummary>

<ScanDetails>
<UnresolvedDetails>
</UnresolvedDetails>

<ResolvedDetails>
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\51.vir" threatType="0" threatName="Trojan.GenericKD.3019574" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\42.vir" threatType="0" threatName="Trojan.GenericKD.3029092" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\60.vir" threatType="0" threatName="Trojan.GenericKD.3028065" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\29.vir" threatType="0" threatName="Trojan.GenericKD.3028602" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\59.vir=>#589745411.exe" threatType="0" threatName="Trojan.GenericKD.3025802" action="5" allActions="1 3 5" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\15.vir=>Inferno W0RM Builder.exe" threatType="0" threatName="Gen:Variant.Kazy.504011" action="9" allActions="1 9 1 9" initialStatus="3" finalStatus="6" quarId="1dcb87a0-4adb-4a87-a79f-bef4fdf7ae7f" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\05.vir=>(SCRENC)" threatType="0" threatName="Trojan.VBS.Downloader.KH" action="5" allActions="1 3 5" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\32.vir=>(NSIS o)=>lzma_solid_nsis0003" threatType="0" threatName="Trojan.GenericKD.3007899" action="9" allActions="1 9 1 9" initialStatus="3" finalStatus="6" quarId="1732e25f-9fd5-4cb8-9058-96c7d447efc6" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\50.vir" threatType="0" threatName="Trojan.GenericKD.3027968" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\58.vir" threatType="0" threatName="Trojan.GenericKD.3028683" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\41.vir" threatType="0" threatName="Trojan.GenericKD.3027965" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\34.vir=>(INFECTED_JS)" threatType="0" threatName="JS:Trojan.JS.Downloader.CB" action="5" allActions="1 3 5" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\56.vir=>PO 400099844.scr" threatType="0" threatName="Trojan.GenericKD.3026459" action="9" allActions="1 9 1 9" initialStatus="3" finalStatus="6" quarId="263626b9-c79d-4934-869e-182fb28c8ec3" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\49.vir=>(INFECTED_JS)" threatType="0" threatName="JS:Trojan.JS.Downloader.BW" action="5" allActions="1 3 5" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\12.vir=>(INFECTED_JS)" threatType="0" threatName="JS:Trojan.JS.Downloader.CF" action="5" allActions="1 3 5" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\48.vir" threatType="0" threatName="X97M.Downloader.BC" action="3" allActions="1 3" initialStatus="3" finalStatus="2" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\47.vir=>(INFECTED_JS)" threatType="0" threatName="JS:Trojan.Script.CTX" action="5" allActions="1 3 5" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\08.vir=>(REMOVED_NULLS)=>(SCRIPT-EXTERNAL 1)" threatType="0" threatName="Trojan.JS.Redirector.QA" action="9" allActions="1 3 1 9 1 9" initialStatus="3" finalStatus="6" quarId="afe2bdea-4b28-4dc4-b2f8-dc926876c690" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\28.vir" threatType="0" threatName="Gen:Trojan.Heur.wuZ@yT781agOi" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\46.vir" threatType="0" threatName="Trojan.Downloader.JS.SJ" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\27.vir=>(NSIS o)=>lzma_solid_nsis0003" threatType="0" threatName="Trojan.GenericKD.3007890" action="9" allActions="1 9 1 9" initialStatus="3" finalStatus="6" quarId="23aca136-108f-47f6-aaf2-098e76f2a8cc" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\45.vir" threatType="0" threatName="Trojan.GenericKD.3028572" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\44.vir=>(RAR Sfx o)=>install.exe" threatType="0" threatName="Trojan.Generic.15341548" action="9" allActions="1 9 1 9" initialStatus="3" finalStatus="6" quarId="59e0c05f-f2b9-405e-9c6f-32963eb36eb4" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\26.vir" threatType="0" threatName="Trojan.GenericKD.3028038" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\08.vir=>(REMOVED_NULLS)=>(IFRAME 1)" threatType="0" threatName="Trojan.HTML.Iframe.U" action="9" allActions="9" initialStatus="3" finalStatus="1" quarId="" failReason="2" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\22.vir" threatType="0" threatName="Trojan.GenericKD.3028527" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\40.vir" threatType="0" threatName="Trojan.Doc.Agent.AE" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\37.vir=>invoice_6307256.scr" threatType="0" threatName="Trojan.GenericKD.3015909" action="5" allActions="1 3 5" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\19.vir=>(CAB Sfx r)=>TopCar.exe" threatType="0" threatName="Gen:Variant.Strictor.92189" action="9" allActions="1 9 1 9" initialStatus="3" finalStatus="6" quarId="754406c6-d58a-40c9-9b02-26d4ae3e3d24" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\38.vir=>????m.class" threatType="0" threatName="Trojan.Java.Adwind.CA" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\30.vir=>WebInject.exe" threatType="0" threatName="Trojan.GenericKD.3028118" action="9" allActions="1 9 1 9" initialStatus="3" finalStatus="6" quarId="b42fdaa7-d04d-42a1-8e78-d0732daa8427" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\04.vir=>compos/__?????????????????y.class" threatType="0" threatName="Trojan.Java.Adwind.BZ" action="5" allActions="1 3 1 5" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\36.vir" threatType="0" threatName="X97M.Downloader.BC" action="3" allActions="1 3" initialStatus="3" finalStatus="2" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\35.vir" threatType="0" threatName="Gen:Variant.Graftor.269443" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\38.vir=>????n.class" threatType="0" threatName="Trojan.Java.Adwind.CA" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\16.vir" threatType="6" threatName="Gen:Variant.Application.Kazy.698289" action="3" allActions="3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\33.vir=>WU_TOKEN_UPDATE_FILE_009803409239_docx.jar=>????m.class" threatType="0" threatName="Trojan.Java.Adwind.CA" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\33.vir=>WU_TOKEN_UPDATE_FILE_009803409239_docx.jar=>????n.class" threatType="0" threatName="Trojan.Java.Adwind.CA" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\07.vir" threatType="0" threatName="Trojan.Doc.Agent.AE" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\25.vir" threatType="0" threatName="Trojan.GenericKD.3028072" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\10.vir" threatType="0" threatName="Trojan.Generic.15012661" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\24.vir=>Scan012.pdf.........................................................exe=>(NSIS o)=>lzma_solid_nsis0003" threatType="0" threatName="Trojan.GenericKD.3007899" action="9" allActions="1 9 1 9" initialStatus="3" finalStatus="6" quarId="4921dc7c-c339-4742-947a-627c403daf6e" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\20.vir" threatType="0" threatName="Gen:Variant.Symmi.56310" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\24.vir=>Scan011.pdf........................................................................exe=>(NSIS o)=>lzma_solid_nsis0003" threatType="0" threatName="Trojan.GenericKD.3007890" action="9" allActions="1 9 1 9" initialStatus="3" finalStatus="6" quarId="4921dc7c-c339-4742-947a-627c403daf6e" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\04.vir=>compos/__?????????????????c.class" threatType="0" threatName="Trojan.Java.Adwind.BZ" action="5" allActions="1 3 1 5" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\11.vir" threatType="0" threatName="Exploit.RTF.CVE-2012-0158.G" action="7" allActions="1 3 7" initialStatus="3" finalStatus="6" quarId="3123209f-8d9d-4e47-af48-7dbd505c2983" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\04.vir=>compos/__?????????????????r.class" threatType="0" threatName="Trojan.Java.Adwind.BZ" action="5" allActions="1 3 1 5" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\08.vir=>(REMOVED_NULLS)=>(SCRIPT-EXTERNAL 2)" threatType="0" threatName="Trojan.JS.Redirector.QA" action="9" allActions="1 3 1 9 1 9" initialStatus="3" finalStatus="6" quarId="afe2bdea-4b28-4dc4-b2f8-dc926876c690" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\04.vir=>compos/__?????????????????n.class" threatType="0" threatName="Trojan.Java.Adwind.BZ" action="5" allActions="1 1 5" initialStatus="3" finalStatus="5" quarId="" failReason="6" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\14.vir=> " threatType="0" threatName="Trojan.GenericKD.3027461" action="5" allActions="1 3 5" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\02.vir" threatType="0" threatName="W97M.Downloader.ASO" action="3" allActions="1 3" initialStatus="3" finalStatus="2" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\03.vir" threatType="0" threatName="Trojan.GenericKD.3027793" action="3" allActions="1 3" initialStatus="3" finalStatus="5" quarId="" failReason="0" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\08.vir=>(REMOVED_NULLS)=>(IFRAME 2)" threatType="0" threatName="Trojan.HTML.Iframe.U" action="9" allActions="9" initialStatus="3" finalStatus="1" quarId="" failReason="2" />
<Item type="0" objectType="0" path="E:\Users\xyz11\Desktop\2016.2.8\08.vir=>(REMOVED_NULLS)" threatType="0" threatName="" action="9" allActions="9" initialStatus="0" finalStatus="6" quarId="afe2bdea-4b28-4dc4-b2f8-dc926876c690" failReason="0" />
</ResolvedDetails>

<IgnoredDetails>
</IgnoredDetails>

<QuickScanDetails>
</QuickScanDetails>
<NotScannedDetails
skipped="0"
ioerrors="0"
archiveBombs="0"
passwordProtected="0"
>

</NotScannedDetails>
</ScanDetails>

</ScanSession>
[/mw_shl_code]

显示全部楼层 · 发表于 2016-2-8 12:07:47

Anqring 发表于 2016-2-8 11:40
360 Total Security扫描日志

扫描时间：2016-02-08 11:38:35

过年云服务器也回家过年了

显示全部楼层 · 发表于 2016-2-8 12:31:28

红伞free。

[病毒样本] 精睿样本测试（16.2.8）

评分

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源