精睿样本测试（16.3.29）

轩夏

地址：

http://pan.baidu.com/s/1pLSVyUv  提取密码  pnxt

密码：bbs.vc52.cn
数量：50

Virtualization

Bitdefender
删除35，修复4，剩余11

sorom

KIS 2017 右键扫描删除23 修复7 显示两个对象未处理，手动删除后 删除25 修复7

Luca.l

电脑管家

cxy密斯

Vipre修复6x，剩余12x

狐狸糊涂

AVG

[mw_shl_code=css,true]"";"发现病毒 FakeAlert, C:\Users\qiu\Desktop\2016.3.29\12.vir";"未解决"
"";"发现病毒 JS/Downloader.Agent, C:\Users\qiu\Desktop\2016.3.29\33.vir";"未解决"
"";"发现病毒 JS/Downloader.Agent, C:\Users\qiu\Desktop\2016.3.29\13.vir";"未解决"
"";"发现病毒 JS/Downloader.Agent, C:\Users\qiu\Desktop\2016.3.29\27.vir";"未解决"
"";"发现病毒 JS/Downloader.Agent, C:\Users\qiu\Desktop\2016.3.29\46.vir";"未解决"
"";"发现病毒 JS/Downloader.Agent, C:\Users\qiu\Desktop\2016.3.29\09.vir";"未解决"
"";"发现病毒 JS/Downloader.Agent, C:\Users\qiu\Desktop\2016.3.29\42.vir";"未解决"
"";"发现病毒 JS/Downloader.Agent, C:\Users\qiu\Desktop\2016.3.29\11.vir";"未解决"
"";"发现病毒 JS/Downloader.Agent, C:\Users\qiu\Desktop\2016.3.29\38.vir";"未解决"
"";"发现病毒 JS/Heur, C:\Users\qiu\Desktop\2016.3.29\41.vir";"未解决"
"";"发现病毒 JS/Heur, C:\Users\qiu\Desktop\2016.3.29\30.vir";"未解决"
"";"发现病毒 JS/Heur, C:\Users\qiu\Desktop\2016.3.29\29.vir";"未解决"
"";"发现病毒 JS/Phish, C:\Users\qiu\Desktop\2016.3.29\24.vir";"未解决"
"";"发现病毒 PowerShell/Downloader, C:\Users\qiu\Desktop\2016.3.29\39.vir";"未解决"
"";"发现病毒 VBS/Downloader.Agent, C:\Users\qiu\Desktop\2016.3.29\03.vir";"未解决"
"";"发现病毒 W97M/Downloader, C:\Users\qiu\Desktop\2016.3.29\37.vir";"未解决"
"";"发现病毒 W97M/Downloader, C:\Users\qiu\Desktop\2016.3.29\05.vir";"未解决"
"";"发现病毒 W97M/Downloader, C:\Users\qiu\Desktop\2016.3.29\26.vir";"未解决"
"";"发现病毒 W97M/Downloader, C:\Users\qiu\Desktop\2016.3.29\22.vir";"未解决"
"";"可能是特洛伊木马 Java/Downloader, C:\Users\qiu\Desktop\2016.3.29\48.vir";"未解决"
"";"特洛伊木马 BackDoor.Generic_r.ING, C:\Users\qiu\Desktop\2016.3.29\19.vir";"未解决"
"";"特洛伊木马 Crypt5.ARTU, C:\Users\qiu\Desktop\2016.3.29\50.vir";"未解决"
"";"特洛伊木马 Crypt5.ARZP, C:\Users\qiu\Desktop\2016.3.29\36.vir";"未解决"
"";"特洛伊木马 Crypt5.ASJX, C:\Users\qiu\Desktop\2016.3.29\23.vir";"未解决"
"";"特洛伊木马 Downloader.Generic_c.ALDY, C:\Users\qiu\Desktop\2016.3.29\34.vir";"未解决"
"";"特洛伊木马 Downloader.Generic_c.ALET, C:\Users\qiu\Desktop\2016.3.29\43.vir";"未解决"
"";"特洛伊木马 Downloader.Generic_c.ALET, C:\Users\qiu\Desktop\2016.3.29\18.vir";"未解决"
"";"特洛伊木马 FileCryptor.IYA, C:\Users\qiu\Desktop\2016.3.29\01.vir";"未解决"
"";"特洛伊木马 FileCryptor.IZB, C:\Users\qiu\Desktop\2016.3.29\16.vir";"未解决"
"";"特洛伊木马 FileCryptor.IZW, C:\Users\qiu\Desktop\2016.3.29\28.vir";"未解决"
"";"特洛伊木马 Generic14_c.CIYT, C:\Users\qiu\Desktop\2016.3.29\31.vir";"未解决"
"";"特洛伊木马 Generic37.ASLG, C:\Users\qiu\Desktop\2016.3.29\04.vir";"未解决"
"";"特洛伊木马 Inject3.AFYR, C:\Users\qiu\Desktop\2016.3.29\35.vir";"未解决"
"";"特洛伊木马 Inject3.AFZQ, C:\Users\qiu\Desktop\2016.3.29\32.vir";"未解决"
"";"特洛伊木马 MSIL9.CJHF, C:\Users\qiu\Desktop\2016.3.29\06.vir";"未解决"
"";"特洛伊木马 MSIL9.CJUI, C:\Users\qiu\Desktop\2016.3.29\15.vir";"未解决"
"";"特洛伊木马 MSIL9.CJXP, C:\Users\qiu\Desktop\2016.3.29\20.vir";"未解决"
"";"特洛伊木马 Pakes2_c.CAZC, C:\Users\qiu\Desktop\2016.3.29\45.vir";"未解决"
"";"特洛伊木马 Pakes2_c.CBAO, C:\Users\qiu\Desktop\2016.3.29\25.vir";"未解决"
"";"特洛伊木马 PSW.MSIL.AYGQ, C:\Users\qiu\Desktop\2016.3.29\17.vir";"未解决"
"";"特洛伊木马 Ransom_r.CU, C:\Users\qiu\Desktop\2016.3.29\49.vir";"未解决"
"";"可能不需要的应用程序 RemoteAdmin.DEQ, C:\Users\qiu\Desktop\2016.3.29\02.vir";"未解决"
[/mw_shl_code]

Eset小粉絲

Avira 37X
剩余已上报

[mw_shl_code=css,true]Start of the scan: Tuesday, March 29, 2016  09:42

Starting the file scan:

Begin scan in '2016.3.29'
2016.3.29\01.vir
  [DETECTION] Is the TR/FileCoder.Locky.63778 Trojan
2016.3.29\04.vir
  [DETECTION] Is the TR/Crypt.Xpack.mlzf Trojan
2016.3.29\06.vir
    [0] Archive type: ZIP
    --> Halkbank,pdf.exe
        [DETECTION] Is the TR/Dropper.MSIL.277019 Trojan
        [WARNING]   Infected files in archives cannot be repaired
2016.3.29\08.vir
  [DETECTION] Contains code of the W97M/Dldr.Agent.AM.966614 Word macro virus
2016.3.29\10.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.344 macro virus
2016.3.29\12.vir
    [0] Archive type: ZIP
    --> pr0399887740012.PDF.exe
        [DETECTION] Is the TR/Crypt.ZPACK.zdld Trojan
        [WARNING]   Infected files in archives cannot be repaired
2016.3.29\16.vir
  [DETECTION] Is the TR/Locky.B.99 Trojan
2016.3.29\17.vir
  [DETECTION] Is the TR/Spy.Gen Trojan
2016.3.29\18.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.344 macro virus
2016.3.29\19.vir
    [0] Archive type: RAR SFX (self extracting)
    --> xpr122.dll
        [DETECTION] Contains a recognition pattern of the (harmful) BDS/Farfli.52224 back-door program
        [WARNING]   Infected files in archives cannot be repaired
    --> mso.exe
        [DETECTION] Is the TR/Jaik.2367.6 Trojan
        [WARNING]   Infected files in archives cannot be repaired
2016.3.29\20.vir
  [DETECTION] Is the TR/Crypt.ZPACK.ytft Trojan
2016.3.29\22.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.19573 macro virus
2016.3.29\23.vir
  [DETECTION] Is the TR/Crypt.ZPACK.jocw Trojan
2016.3.29\25.vir
    [0] Archive type: 7-Zip SFX (self extracting)
    --> os.exe
        [DETECTION] Is the TR/ATRAPS.ghus Trojan
        [WARNING]   Infected files in archives cannot be repaired
2016.3.29\26.vir
    [0] Archive type: MIME
    --> AV00000007.AV$
        [1] Archive type: OLE
      --> Object
          [DETECTION] Contains code of the W2000M/Donoff.AQ macro virus
          [WARNING]   Infected files in archives cannot be repaired
2016.3.29\28.vir
  [DETECTION] Is the TR/Crypt.Xpack.clhs Trojan
2016.3.29\31.vir
  [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
2016.3.29\32.vir
    [0] Archive type: ACE
    --> CCF18032016.scr
        [DETECTION] Is the TR/VB.Downloader.fnev Trojan
        [WARNING]   Infected files in archives cannot be repaired
2016.3.29\34.vir
  [DETECTION] Contains code of the W2000M/Dldr.Dridex.fdh macro virus
2016.3.29\35.vir
  [DETECTION] Is the TR/Dropper.VB.nfhj Trojan
2016.3.29\36.vir
  [DETECTION] Is the TR/Crypt.ZPACK.zdld Trojan
2016.3.29\37.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.19573 macro virus
2016.3.29\43.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.344 macro virus
2016.3.29\45.vir
  [DETECTION] Is the TR/Dropper.MSIL.bnum Trojan
2016.3.29\46.vir
    [0] Archive type: OLE
    --> AV0000000f.AV$
        [1] Archive type: ZIP
      --> details - 0a90c00.js
          [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.jj Java script virus
          [WARNING]   Infected files in archives cannot be repaired
      --> document - 1ba9a - copy.js
          [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.jj Java script virus
          [WARNING]   Infected files in archives cannot be repaired
      --> document - 1ba9a.js
          [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.jj Java script virus
          [WARNING]   Infected files in archives cannot be repaired
2016.3.29\48.vir
    [0] Archive type: ZIP
    --> NjpsvzyW.class
        [DETECTION] Contains recognition pattern of the JAVA/Agent.35353 Java virus
        [WARNING]   Infected files in archives cannot be repaired
2016.3.29\49.vir
  [DETECTION] Is the TR/Agent.topn Trojan
2016.3.29\50.vir
  [DETECTION] Is the TR/Crypt.ZPACK.239333 Trojan
09.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.jj Java script virus
13.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.jj Java script virus
27.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.jj Java script virus
29.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.AM.1 Java script virus
30.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.AM.1 Java script virus
38.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.jj Java script virus
41.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.AM.1 Java script virus
02.vir
  [DETECTION] Contains recognition pattern of the SPR/RemoteAdmin.765952 program[/mw_shl_code]

蓝天二号

诺顿 KILL 18X

类别： 已解决的安全风险
日期和时间,风险,活动,状态,推荐的操作,活动
2016/3/29 10:08:36,高,"检测到 压缩文件 \"46.vir\" 中存在风险 (检测方: 病毒扫描程序)",已隔离,已解决 - 不需要操作,已执行的威胁操作: 3
2016/3/29 10:08:31,高,检测到 Trojan Horse (检测方: 病毒扫描程序),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/29 10:08:31,高,检测到 Trojan.Gen (检测方: 病毒扫描程序),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1
2016/3/29 10:08:15,高,50.vir (Trojan.Gen.2) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:14,高,49.vir (Trojan.Gen) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:13,高,44.vir (W97M.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:13,高,43.vir (W97M.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:11,高,37.vir (W97M.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:10,高,35.vir (Downloader.Ponik) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:09,高,34.vir (W97M.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:09,高,26.vir (W97M.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:07,高,25.vir (Backdoor.Trojan) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:04,高,23.vir (Infostealer.Limitail) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:02,高,22.vir (W97M.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:02,高,20.vir (Infostealer.Limitail) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:08:01,高,18.vir (W97M.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:07:58,高,15.vir (Trojan.Gen) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:07:57,高,10.vir (W97M.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:07:57,高,08.vir (W97M.Downloader) 检测方 自动防护,已阻止,已解决 - 不需要操作,已执行的威胁操作: 0
2016/3/29 10:07:52,高,检测到 02.vir (SAPE.Heur.AA7A7) (检测方: 自动防护),已隔离,已解决 - 不需要操作,已执行的威胁操作: 1

c68111c

微軟X37

欧阳宣

cxy密斯 发表于 2016-3-29 09:43
Vipre修复6x，剩余12x

能贴下查杀日志么？想看看自主引擎占多少