楼主: 轩夏
收起左侧

[病毒样本] 精睿样本测试(16.5.27)

  [复制链接]
wajika
发表于 2016-5-27 17:05:08 | 显示全部楼层
我的 macfee
C:\Users\Administrator\Desktop\2016.5.27\01.vir\MV Hyopsung_pdf.exe ... Found the Fareit.dx trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\03.vir [MD5:759221abeeaf03898ccab1814c47eb41] ... Found the RDN/Generic PWS.y trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\05.vir [MD5:c905d3e6ad6c6b50f38fe1dea9babd92] ... Found the JS/Nemucod.jt trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\07.vir\Order List.exe ... Found the RDN/Generic PWS.y trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\09.vir [MD5:aecc7a1ca9e73a1c678e598c2a7c73f8] ... Found the RDN/Ransom trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\12.vir [MD5:8b7166bee73e32c05f7a151028662597] ... Found the RDN/Generic PWS.y trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\14.vir [MD5:bfeed609eb8444b12710da17d2e30bd3] ... Found the JS/Nemucod.jt trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\15.vir [MD5:e754cbf86da23f52f17c4ddace0ee888] ... Found the JS/Nemucod.jt trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\16.vir [MD5:773eddd534bb0696d0afa2500e4b8bc4] ... Found the RDN/Generic PWS.y trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\17.vir\17.vir ... Found the VBS/Downloader.sysinf trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\18.vir [MD5:3eb02d3cb3481f9851b38694f74b3e12] ... Found the RDN/Ransom trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\21.vir [MD5:bf61bc4d8984255d7dbc1362b40615fe] ... Found the JS/Nemucod.jt trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\22.vir [MD5:b0a2cf1ca9f221921444afcd8eee873c] ... Found the RDN/Generic.mem trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\23.vir\WordDocument ... Found the W97M/Downloader.bdx trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\28.vir [MD5:1f225e393d9b0cf39a25adc0748c5227] ... Found the JS/Nemucod.jt trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\29.vir\nimm6.exe ... Found the RDN/Generic.com trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\30.vir [MD5:2da3eea5ce8e9c60724e5f13f3e3a6d8] ... Found the JS/Nemucod.jt trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\32.vir [MD5:c523b2d58e497ca3682bb4867426743e] ... Found the RDN/Generic.bfr trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\33.vir\_VBA_PROJECT ... Found the W97M/Dropper.bi trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\37.vir\WordDocument ... Found the W97M/Downloader.bdx trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\38.vir [MD5:f7ec09e4cc6f5e94dc7c135fd4aafeec] ... Found the JS/Nemucod.jt trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\39.vir [MD5:51c968c67344adff3cee686ac1dbb9c9] ... Found the RDN/Generic PWS.y trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\40.vir [MD5:dd5e68288c4c3a9ba5d52d50a7e56cb6] ... Found the VBS/Downloader.cs virus !!!
C:\Users\Administrator\Desktop\2016.5.27\41.vir [MD5:ced954b4e76fe6e71f56a68635c156ad] ... Found the Linux64/GetShell.gen.a trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\42.vir [MD5:295f6d9d73022241fb0bcadc408b6bcf] ... Found the JS/Nemucod.jt trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\44.vir [MD5:3b8f893c07742311ee2d511b53abe785] ... Found the RDN/Ransom trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\45.vir [MD5:215535a70243bbfb51c9e1121375dda1] ... Found the JS/Nemucod.jt trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\47.vir [MD5:486253835f9fadbbaf97bec7ae76b214] ... Found the RDN/Generic Downloader.x trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\48.vir [MD5:2130777a454a8f78b9d3a730f8e6d72e] ... Found the RDN/Generic.hbg trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\49.vir\__substg1.0_37010102\history.7783.js.js ... Found the JS/Nemucod.in trojan !!!
C:\Users\Administrator\Desktop\2016.5.27\50.vir [MD5:afbf76a302259eb67402eceff67e002f] ... Found the Fareit-FEH!AFBF76A30225 trojan !!!


Summary Report on C:\Users\Administrator\Desktop\2016.5.27
File(s)
        Total files:...................     50
        Clean:.........................     19
        Not Scanned:...................     0
        Possibly Infected:.............     31



Time: 00:00.05
zq19861019
发表于 2016-5-27 17:51:59 | 显示全部楼层
gdata 34个
云自游
发表于 2016-5-27 19:15:40 | 显示全部楼层
瑞星云端版右键24/50
好想用EMSI
发表于 2016-5-27 19:59:51 | 显示全部楼层
轩夏 发表于 2016-5-27 09:47
微软

[mw_shl_code=css,true]Scan started on Fri May 27 09:46:51 2016

CSS是怎么打出来的?
马云波波波
头像被屏蔽
发表于 2016-5-27 22:20:24 | 显示全部楼层
wajika 发表于 2016-5-27 17:05
我的 macfee
C:%users\Administrator\Desktop\2016.5.27\01.vir\MV Hyopsung_pdf.exe ... Found the Farei ...

你用的麦咖啡是什么版本?
wajika
发表于 2016-5-28 10:10:35 | 显示全部楼层
马云波波波 发表于 2016-5-27 22:20
你用的麦咖啡是什么版本?

命令版
275751198
发表于 2016-5-28 10:26:42 | 显示全部楼层
轩夏 发表于 2016-5-27 10:51
怪不得好久没见你了

啦啦啦。头像是萌萌的小僵尸,这个漫画还更新吗?
时间@
发表于 2016-5-28 11:03:29 | 显示全部楼层
没有乐[:08:]
wajika
发表于 2016-5-28 14:40:36 | 显示全部楼层

Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\01.vir,(nimm6.exe)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\01.vir,(x)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\01.vir,(MV Hyopsung_pdf.exe)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\01.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\02.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\03.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\04.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\05.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\06.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\07.vir,(Order List.exe)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\07.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\08.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\09.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\10.vir
Found [       Mal_Hifrm](    1) in D:\360安全浏览器下载\2016.5.27\11.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\12.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\13.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\14.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\15.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\16.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\17.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\18.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\19.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\20.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\21.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\22.vir
Found [W2KM_DR.1EA0C31B](    1) in D:\360安全浏览器下载\2016.5.27\23.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\24.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\25.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\26.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\27.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\28.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\29.vir,(nimm6.exe)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\29.vir,(x)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\29.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\30.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\31.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\32.vir
Found [ W2KM_DRIDEX.YVD](    1) in D:\360安全浏览器下载\2016.5.27\33.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\34.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\35.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\36.vir
Found [W2KM_DR.1EA0C31B](    1) in D:\360安全浏览器下载\2016.5.27\37.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\38.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\39.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\40.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\41.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\42.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\43.vir,(NONAMEFL)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\43.vir,(NONAMEFL)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\43.vir,(NONAMEFL)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\43.vir,(NONAMEFL)
Found [ W2KM_DRIDEX.YVD](    1) in D:\360安全浏览器下载\2016.5.27\43.vir,(Security Report ID(12093937).doc)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\43.vir,(NONAMEFL)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\44.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\45.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\46.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\47.vir,($PLUGINSDIR\ip.dll)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\47.vir,($PLUGINSDIR\IpConfig.dll)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\47.vir,($PLUGINSDIR\md5dll.dll)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\47.vir,($PLUGINSDIR\NsisCrypt.dll)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\47.vir,($PLUGINSDIR\inetc.dll)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\47.vir,(NONAMEFL)
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\47.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\48.vir
Found [     JS_LOCKY.EU](    1) in D:\360安全浏览器下载\2016.5.27\49.vir
Undet [                ](     ) in D:\360安全浏览器下载\2016.5.27\50.vir
50 files have been read.
50 files have been checked.
50 files have been scanned.
67 files have been scanned. (including files in archived)
6 files containing viruses.
Found 6 viruses totally.
Maybe 0 viruses totally.
Stop At: 5/28/2016 14:40:05        1 second (1.81 seconds) has elapsed.(36.180 msec/file)
wajika
发表于 2016-5-28 14:42:46 | 显示全部楼层
IKARUS - T3SCAN V1.32.36.0 (WIN32)
         Engine version: 2.00.08
         VDB: 27.05.2016 16:06:12 (Build: 98274)
         Copyright ?IKARUS Security Software GmbH 2015.
         All rights reserved.

D:\360安全浏览器下载\2016.5.27\01.vir:MV Hyopsung_pdf.exe:nimm6.exe - Signature 1809128 'Virus.Win32.DelfInject ' found
D:\360安全浏览器下载\2016.5.27\01.vir:MV Hyopsung_pdf.exe - Signature 1809128 'Virus.Win32.DelfInject ' found
D:\360安全浏览器下载\2016.5.27\01.vir - Signature 1809128 'Virus.Win32.DelfInject ' found
D:\360安全浏览器下载\2016.5.27\05.vir - Signature 3066743 'Trojan.Script' found
D:\360安全浏览器下载\2016.5.27\07.vir:Order List.exe - Signature 202401906 'Trojan.Win32.Injector' found
D:\360安全浏览器下载\2016.5.27\07.vir - Signature 202401906 'Trojan.Win32.Injector' found
D:\360安全浏览器下载\2016.5.27\09.vir - Signature 3066388 'Trojan-Ransom.Locky' found
D:\360安全浏览器下载\2016.5.27\13.vir - Signature 3042464 'Trojan.VBS.Obfuscated' found
D:\360安全浏览器下载\2016.5.27\14.vir - Signature 3066743 'Trojan.Script' found
D:\360安全浏览器下载\2016.5.27\15.vir - Signature 3066743 'Trojan.Script' found
D:\360安全浏览器下载\2016.5.27\18.vir - Signature 3066387 'Trojan-Ransom.Locky' found
D:\360安全浏览器下载\2016.5.27\21.vir - Signature 3066743 'Trojan.Script' found
D:\360安全浏览器下载\2016.5.27\23.vir - Signature 3066664 'Trojan-Downloader.VBA.Agent' found
D:\360安全浏览器下载\2016.5.27\28.vir - Signature 3066743 'Trojan.Script' found
D:\360安全浏览器下载\2016.5.27\29.vir:nimm6.exe - Signature 1809128 'Virus.Win32.DelfInject ' found
D:\360安全浏览器下载\2016.5.27\29.vir - Signature 1809128 'Virus.Win32.DelfInject ' found
D:\360安全浏览器下载\2016.5.27\30.vir - Signature 3066743 'Trojan.Script' found
D:\360安全浏览器下载\2016.5.27\33.vir - Signature 3066664 'Trojan-Downloader.VBA.Agent' found
D:\360安全浏览器下载\2016.5.27\34.vir - Signature 2921111 'Trojan.Agent' found
D:\360安全浏览器下载\2016.5.27\35.vir - Adware Signature 2894914 'not-a-virus:Hacktool.AutoKMS' found
D:\360安全浏览器下载\2016.5.27\37.vir - Signature 3066664 'Trojan-Downloader.VBA.Agent' found
D:\360安全浏览器下载\2016.5.27\38.vir - Signature 3066743 'Trojan.Script' found
D:\360安全浏览器下载\2016.5.27\40.vir - Signature 3059179 'Trojan-Downloader.VBS.Agent' found
D:\360安全浏览器下载\2016.5.27\42.vir - Signature 3066743 'Trojan.Script' found
D:\360安全浏览器下载\2016.5.27\43.vir:Security Notification.zip:Security Report ID(12093937).doc - Signature 3066664 'Trojan-Downloader.VBA.Agent' found
D:\360安全浏览器下载\2016.5.27\43.vir:Security Notification.zip - Signature 3066664 'Trojan-Downloader.VBA.Agent' found
D:\360安全浏览器下载\2016.5.27\43.vir - Signature 3066664 'Trojan-Downloader.VBA.Agent' found
D:\360安全浏览器下载\2016.5.27\45.vir - Signature 3066743 'Trojan.Script' found
D:\360安全浏览器下载\2016.5.27\46.vir - Signature 2454173 'Virus.Win32.Vundo' found
D:\360安全浏览器下载\2016.5.27\49.vir:MSG:history.7783.js.js - Signature 3065930 'Trojan-Ransom.Script.Locky' found
D:\360安全浏览器下载\2016.5.27\49.vir:MSG - Signature 3065930 'Trojan-Ransom.Script.Locky' found
D:\360安全浏览器下载\2016.5.27\49.vir - Signature 3065930 'Trojan-Ransom.Script.Locky' found

  Summary:
  ==========================================================
    50 files scanned
    24 files infected
      (50 files contained 18 items, 8 infected)

    Used time: 0:19.484
  ==========================================================
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-14 23:18 , Processed in 0.094145 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表