精睿样本测试（16.3.22）

轩夏

地址：

http://pan.baidu.com/s/1c0JlYvA 提取密码  wf56

密码：bbs.vc52.cn
数量：50

蓝天二号

诺顿 KILL 17X

类别： 已解决的安全风险
日期和时间,风险,活动,状态,推荐的操作,活动
2016/3/22 9:30:23,高,检测到 Trojan.Gen.2 (检测方: 病毒扫描程序),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/22 9:30:21,高,检测到 Trojan.Nancrat (检测方: 病毒扫描程序),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/22 9:30:21,高,检测到 at2.exe (Trojan.Gen.2) (检测方: 病毒扫描程序),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/22 9:30:20,高,检测到 arinv10175.rtf (W97M.Downloader) (检测方: 病毒扫描程序),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/22 9:30:20,高,检测到 doinv27398.rtf (W97M.Downloader) (检测方: 病毒扫描程序),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/22 9:30:01,高,检测到 14.vir (W97M.Downloader) (检测方: 自动防护),已隔离,已解决 - 不需要操作,已执行的威胁操作: 6
2016/3/22 9:29:47,高,检测到 42.vir (SAPE.Heur.BB997) (检测方: 自动防护),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/22 9:29:18,高,38.vir (Trojan Horse) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/22 9:29:17,高,34.vir (Trojan Horse) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/22 9:29:14,高,28.vir (Trojan.Cryptolocker) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/22 9:29:13,高,27.vir (JS.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/22 9:29:13,高,25.vir (Trojan.Gen) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/22 9:29:12,高,24.vir (Trojan.Zbot) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/22 9:29:04,高,21.vir (Trojan.Gen) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/22 9:29:01,高,20.vir (JS.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/22 9:28:51,高,03.vir (Trojan.Dropper) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/22 9:28:42,高,02.vir (JS.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0

轩夏

eset

[mw_shl_code=css,true]Scan started at:   03/22/16 09:41:17
name="C:\Users\XuanXia\Desktop\2016.3.22\02.vir", threat="JS/TrojanDownloader.Nemucod.JT trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\03.vir", threat="VBS/TrojanDropper.Agent.NDD trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\04.vir", threat="", action="", info="error - password-protected file"
name="C:\Users\XuanXia\Desktop\2016.3.22\04.vir » ZIP » ynhres.exe", threat="", action="", info="error - password-protected file"
name="C:\Users\XuanXia\Desktop\2016.3.22\05.vir", threat="JS/TrojanDownloader.Nemucod.KT trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\06.vir", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\06.vir » 7ZIP » DOINV27398.rtf", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\06.vir » 7ZIP » DOINV27398.rtf » MSOXML » P3hATzCJWAQPBeZEiVwR1FmH.mso", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\07.vir", threat="a variant of MSIL/Agent.LR worm", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\08.vir", threat="a variant of Win32/Kryptik.ERPJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\08.vir » OLEDATA »     ", threat="a variant of Win32/Kryptik.ERPJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\10.vir", threat="JS/TrojanDownloader.Nemucod.KR trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\11.vir", threat="JS/TrojanDownloader.Nemucod.KT trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\12.vir", threat="JS/TrojanDownloader.Nemucod.KG trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\13.vir", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\13.vir » 7ZIP » ARINV10175.rtf", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\13.vir » 7ZIP » ARINV10175.rtf » MSOXML » UGIXaVvPmoW3DTuNLMV.mso", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\14.vir", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\14.vir » MSOXML » P3hATzCJWAQPBeZEiVwR1FmH.mso", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\16.vir", threat="a variant of Win32/Injector.CUUO trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\17.vir", threat="JS/TrojanDownloader.Nemucod.KT trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\18.vir", threat="a variant of MSIL/Injector.OPC trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\18.vir » ZIP » PURCHASE-ORDER.exe", threat="a variant of MSIL/Injector.OPC trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\19.vir", threat="a variant of Win32/Injector.CUUQ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\19.vir » ZIP » PurchaseOr.exe", threat="a variant of Win32/Injector.CUUQ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\19.vir » ZIP » PurchaseOr.exe » RAR » 28y01.exe", threat="a variant of Win32/Injector.CUUQ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\20.vir", threat="a variant of Win32/Kryptik.ERTO trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\21.vir", threat="Win32/Neurevt.B trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\23.vir", threat="a variant of MSIL/Injector.OKZ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\24.vir", threat="a variant of Win32/Injector.CUWX trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\25.vir", threat="a variant of MSIL/Spy.Agent.AES trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\28.vir", threat="Win32/Filecoder.NFV trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\30.vir", threat="NSIS/TrojanDropper.Agent.CF trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\31.vir", threat="", action="", info="archive damaged - the file could not be extracted."
name="C:\Users\XuanXia\Desktop\2016.3.22\31.vir » MIME » part002.bin", threat="", action="", info="archive damaged - the file could not be extracted."
name="C:\Users\XuanXia\Desktop\2016.3.22\33.vir", threat="VBA/TrojanDownloader.Agent.AVR trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\33.vir » ZIP » word/vbaProject.bin", threat="VBA/TrojanDownloader.Agent.AVR trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\34.vir", threat="PHP/Small.NAY.Gen trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\35.vir", threat="VBA/TrojanDownloader.Agent.AVR trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\35.vir » ZIP » word/vbaProject.bin", threat="VBA/TrojanDownloader.Agent.AVR trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\36.vir", threat="JS/TrojanDownloader.Nemucod.KQ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\37.vir", threat="JS/TrojanDownloader.Nemucod.KR trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\38.vir", threat="Win32/TrojanDownloader.Agent.BYT trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\40.vir", threat="JS/TrojanDownloader.Nemucod.KR trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\41.vir", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\41.vir » MSOXML » ilzZb7XblYRH1PRPBpdoi.mso", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\42.vir", threat="a variant of MSIL/Injector.OOG trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\43.vir", threat="JS/TrojanDownloader.Nemucod.KR trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\44.vir", threat="a variant of MSIL/Injector.ONZ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\45.vir", threat="a variant of MSIL/Injector.OOI trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\46.vir", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\46.vir » MSOXML » VP5eAFOQZBY8BcM2G97p1WDg.mso", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\47.vir", threat="", action="", info="unsupported option"
name="C:\Users\XuanXia\Desktop\2016.3.22\47.vir » DOTNETREACTOR", threat="", action="", info="unsupported option"
name="C:\Users\XuanXia\Desktop\2016.3.22\48.vir", threat="JS/TrojanDownloader.Nemucod.KR trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\49.vir", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\49.vir » MSOXML » x85QGdIdRyWOdQeVyahofhbcI.mso", threat="VBA/TrojanDropper.Agent.GJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\50.vir", threat="multiple threats", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\50.vir » NSIS » Script.nsi", threat="Win32/Kovter.D trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.22\50.vir » NSIS » arthroscopy.dll", threat="Win32/Injector.CUQN trojan", action="", info=""

Scan completed at: 03/22/16 09:41:19[/mw_shl_code]

蓝天二号

轩夏 发表于 2016-3-22 09:42
eset

[mw_shl_code=css,true]Scan started at:   03/22/16 09:41:17

你的ESS出现了，，，

轩夏

蓝天二号 发表于 2016-3-22 09:51
你的ESS出现了，，，

eav~~~

蓝天二号

轩夏 发表于 2016-3-22 09:54
eav~~~

难怪~~~~那么神秘。。。

sorom

KIS 2017 自动删除25 修复3 手动删除2

ericdj

GD

右键kill x41，修复两个，生育2（fixed）+9（missed）=11

MXCERILYF!

BD

卡巴补杀

ESET补杀

共删除42个，修复3个，剩余5个

sorom

MXCERILYF! 发表于 2016-3-22 10:13
BD

卡巴补杀

也是强呀，卡巴+大BD，，剩下那5个vir也是不容易呀