精睿样本测试（16.3.24）

轩夏

地址：

https://pan.baidu.com/s/1jHbX4fs  提取密码   aj1c

密码：bbs.vc52.cn
数量：50

MXCERILYF!

瑞星

轩夏

ESET

[mw_shl_code=css,true]Command line: C:\Users\XuanXia\Desktop\2016.3.24

Scan started at:   03/24/16 09:33:15
name="C:\Users\XuanXia\Desktop\2016.3.24\01.vir", threat="JS/TrojanDownloader.Nemucod.JP trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\02.vir", threat="a variant of Java/TrojanDownloader.Banload.AD trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\02.vir » ZIP » NeWlod.class", threat="a variant of Java/TrojanDownloader.Banload.AD trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\03.vir", threat="VBS/Kryptik.DN trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\04.vir", threat="a variant of OSX/Filecoder.KeRanger.A trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\05.vir", threat="a variant of MSIL/Injector.OOC trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\06.vir", threat="VBA/TrojanDownloader.Agent.AVU trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\06.vir » MIME » part002.bin", threat="VBA/TrojanDownloader.Agent.AVU trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\07.vir", threat="VBA/TrojanDownloader.Agent.AVU trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\09.vir", threat="a variant of MSIL/Kryptik.FOM trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\10.vir", threat="VBA/TrojanDownloader.Agent.AVU trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\10.vir » MIME » part002.bin", threat="VBA/TrojanDownloader.Agent.AVU trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\11.vir", threat="a variant of MSIL/Injector.ONZ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\11.vir » ZIP » P.O 6344710.scr", threat="a variant of MSIL/Injector.ONZ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\12.vir", threat="JS/TrojanDownloader.Nemucod.KF trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\13.vir", threat="Win32/Filecoder.TeslaCrypt.K trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\13.vir » ZIP » ultraiso_full_portable_mega.exe", threat="Win32/Filecoder.TeslaCrypt.K trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\14.vir", threat="JS/TrojanDownloader.Agent.OGF trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\16.vir", threat="a variant of Win32/ProxyChanger.QC trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\16.vir » RAR » pm.cpl", threat="a variant of Win32/ProxyChanger.QC trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\17.vir", threat="JS/TrojanDownloader.Nemucod.KR trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\19.vir", threat="VBA/TrojanDownloader.Agent.AVU trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\19.vir » MIME » part002.bin", threat="VBA/TrojanDownloader.Agent.AVU trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\20.vir", threat="JS/TrojanDownloader.Nemucod.KT trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\21.vir", threat="Win32/Injector.CUUJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\21.vir » NSIS » hydrosulphites.dll", threat="Win32/Injector.CUUJ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\23.vir", threat="a variant of MSIL/Injector.ONZ trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\24.vir", threat="Win32/Filecoder.TeslaCrypt.K trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\25.vir", threat="JS/TrojanDownloader.Nemucod.KR trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\27.vir", threat="VBA/TrojanDownloader.Agent.AVU trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\27.vir » MIME » part002.bin", threat="VBA/TrojanDownloader.Agent.AVU trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\28.vir", threat="a variant of Win32/Injector.CUUA trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\31.vir", threat="a variant of Win32/Expiro.CG virus", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\33.vir", threat="VBA/TrojanDownloader.Agent.AVU trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\33.vir » MIME » part002.bin", threat="VBA/TrojanDownloader.Agent.AVU trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\35.vir", threat="JS/TrojanDownloader.Nemucod.KT trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\36.vir", threat="VBA/Obfuscated.F trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\38.vir", threat="VBA/TrojanDownloader.Agent.AVY trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\38.vir » ZIP » word/vbaProject.bin", threat="VBA/TrojanDownloader.Agent.AVY trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\39.vir", threat="a variant of MSIL/Kryptik.FNX trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\41.vir", threat="MSIL/Agent.ABP trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\42.vir", threat="a variant of Win32/Injector.CUUO trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\44.vir", threat="a variant of Win32/Injector.CUQH trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\44.vir » ZIP » Order Confirmation.pdf.exe", threat="a variant of Win32/Injector.CUQH trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\45.vir", threat="JS/TrojanDownloader.Nemucod.KC trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\47.vir", threat="JS/TrojanDownloader.Nemucod.KT trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\48.vir", threat="a variant of Win32/Rozena.JI trojan", action="", info=""
name="C:\Users\XuanXia\Desktop\2016.3.24\50.vir", threat="JS/TrojanDownloader.Nemucod.KT trojan", action="", info=""

Scan completed at: 03/24/16 09:33:19[/mw_shl_code]

c68111c

微軟 X35










---------------------
原本31默認是隔離，但我選清除

再掃一次

發現選清除還是被掃到，這次選隔離

ymb668888

卡巴

sorom

KIS2017 自动删除20 修复10 显示21个对象未处理 手动执行删除后 删除26 修复4

蓝天二号

QQ电脑管家

蓝天二号

诺顿 KILL 17X

类别： 已解决的安全风险
日期和时间,风险,活动,状态,推荐的操作,活动
2016/3/24 15:25:49,高,检测到 Trojan.Gen (检测方: 病毒扫描程序),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/24 15:25:48,高,检测到 keygen.exe (Backdoor.Graybird) (检测方: 病毒扫描程序),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/24 15:25:28,高,49.vir (Trojan.Gen.2) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:25:24,高,检测到 38.vir (W97M.Downloader) (检测方: 自动防护),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/24 15:25:07,高,40.vir (Trojan.Gen.2) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:25:05,高,39.vir (Infostealer.Limitail) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:25:05,高,检测到 31.vir (W32.Xpiro.I) (检测方: 自动防护),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/24 15:24:43,高,33.vir (Trojan.Mdropper) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:24:36,高,检测到 09.vir (SAPE.Heur.98937) (检测方: 自动防护),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/24 15:24:34,高,27.vir (Trojan.Mdropper) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:24:34,高,26.vir (JS.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:24:32,高,检测到 16.vir (SAPE.Heur.9C4C7) (检测方: 自动防护),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/24 15:24:31,高,19.vir (Trojan.Mdropper) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:24:07,高,18.vir (Trojan.Gen) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:24:03,高,10.vir (Trojan.Mdropper) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:24:01,高,07.vir (Trojan.Mdropper) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:24:01,高,06.vir (Trojan.Mdropper) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:23:59,高,检测到 05.vir (Suspicious.Cloud.2) (检测方: 自动防护),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/24 15:23:36,高,04.vir (OSX.Keranger) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/24 15:23:36,高,02.vir (Java.Bozmub) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0

pkuyzy

ikarus 妖刀 kill29x

z2009

bg杀27，修复9个，共36个