精睿样本测试（16.5.31）

轩夏

地址：

http://pan.baidu.com/s/1c2wQUli  提取密码  5nf6

密码：bbs.vc52.cn
数量：50

轩夏

微软
[mw_shl_code=css,true]Scan started on Tue May 31 09:40:13 2016

C:\Users\XuanXia\Desktop\2016.5.31\01.vir                                               Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.5.31\02.vir                                               Infected: TrojanDownloader:O97M/Donoff.BM
C:\Users\XuanXia\Desktop\2016.5.31\03.vir                                               Infected: Ransom:Win32/Locky
C:\Users\XuanXia\Desktop\2016.5.31\04.vir->(part0002:18339_14117.zip)->???????18686.doc Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.5.31\05.vir                                               Infected: Backdoor:Win32/Drixed
C:\Users\XuanXia\Desktop\2016.5.31\06.vir                                               Infected: Backdoor:Win32/Drixed
C:\Users\XuanXia\Desktop\2016.5.31\07.vir->[WsfCmtOut]->(SCRIPT0000)                    Infected: TrojanDownloader:JS/Nemucod[non_writable_container]
C:\Users\XuanXia\Desktop\2016.5.31\09.vir                                               Infected: Trojan:Win32/Swrort.A
C:\Users\XuanXia\Desktop\2016.5.31\10.vir->[HtmlCmtOut]->(ScriptSrc)                    Infected: Trojan:HTML/Scrinject [non_writable_container]
C:\Users\XuanXia\Desktop\2016.5.31\11.vir->(Ole Stream 2)                               Infected: TrojanDownloader:O97M/Donoff.BL
C:\Users\XuanXia\Desktop\2016.5.31\13.vir                                               Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.5.31\14.vir                                               Infected: TrojanDownloader:JS/Nemucod.FJ
C:\Users\XuanXia\Desktop\2016.5.31\15.vir                                               Infected: Ransom:Win32/Critroni
C:\Users\XuanXia\Desktop\2016.5.31\16.vir                                               Infected: TrojanDownloader:Win32/Terdot.A
C:\Users\XuanXia\Desktop\2016.5.31\18.vir                                               Infected: Ransom:Win32/Locky
C:\Users\XuanXia\Desktop\2016.5.31\20.vir->Purchase Order....exe                        Infected: Trojan:Win32/Dacic.A!rfn [non_writable_container]
C:\Users\XuanXia\Desktop\2016.5.31\21.vir->[HtmlCmtOut]->(SCRIPT0005)                   Infected: Trojan:JS/Redirector.QE [non_writable_container]
C:\Users\XuanXia\Desktop\2016.5.31\23.vir->(Ole Stream 2)->details_cedeab.js            Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\2016.5.31\23.vir->(Ole Stream 2)->urgent_27492.js              Infected: TrojanDownloader:JS/Swabfex.P
C:\Users\XuanXia\Desktop\2016.5.31\26.vir                                               Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.5.31\33.vir->(part0002:Bill Payment_000010818.xls)        Infected: TrojanDownloader:O97M/Adnel
C:\Users\XuanXia\Desktop\2016.5.31\34.vir                                               Infected: Ransom:Win32/Locky
C:\Users\XuanXia\Desktop\2016.5.31\35.vir->(Ole Stream 2)                               Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.5.31\36.vir                                               Infected: Trojan:Win32/Skeeyah.A!bit
C:\Users\XuanXia\Desktop\2016.5.31\39.vir                                               Infected: Trojan:O97M/Madeba.A!det
C:\Users\XuanXia\Desktop\2016.5.31\40.vir->word/vbaProject.bin                          Infected: TrojanDropper:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.5.31\41.vir                                               Infected: Ransom:Win32/Exxroute.A
C:\Users\XuanXia\Desktop\2016.5.31\42.vir                                               Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.5.31\43.vir                                               Infected: TrojanDropper:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.5.31\45.vir                                               Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.5.31\46.vir                                               Infected: TrojanDownloader:O97M/Poseket.A
C:\Users\XuanXia\Desktop\2016.5.31\48.vir                                               Infected: Ransom:Win32/Locky
Successfully checked: C:\Users\XuanXia\Desktop\2016.5.31

Scan ended on Tue May 31 09:40:29 2016[/mw_shl_code]

XZ8SM7Sx0bVkoUV

火绒 24/50

蓝天二号

哥们，以后能不能不要上传者度娘网盘，，，，那个速度。。。好蛋疼。。。

McAfee  目前 20X

蓝天二号

dr.web 未更新 库  15X

心醉咖啡

360 12X

轩夏

蓝天二号 发表于 2016-5-31 09:55
哥们，以后能不能不要上传者度娘网盘，，，，那个速度。。。好蛋疼。。。

McAfee  目前 20X

不是我传的

Eset小粉絲

Avira 29/50

[mw_shl_code=css,true]Start of the scan: Tuesday, 31 May, 2016  10:05

Starting the file scan:

Begin scan in 'C:\Users\User\Desktop\2016.5.31'
C:\Users\User\Desktop\2016.5.31\01.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.86290 macro virus
C:\Users\User\Desktop\2016.5.31\02.vir
  [DETECTION] Contains code of the W2000M/Agent.924935 macro virus
C:\Users\User\Desktop\2016.5.31\04.vir
    [0] Archive type: MIME
    --> 18339_14117.zip
        [1] Archive type: ZIP
      --> Ñ„D°DoтурD°18686.doc
          [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.86290 macro virus
          [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.5.31\05.vir
  [DETECTION] Is the TR/Crypt.ZPACK.rrww Trojan
C:\Users\User\Desktop\2016.5.31\09.vir
  [DETECTION] Is the TR/Taranis.2919 Trojan
C:\Users\User\Desktop\2016.5.31\11.vir
  [DETECTION] Contains code of the W2000M/Agent.60162624 macro virus
C:\Users\User\Desktop\2016.5.31\13.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.86290 macro virus
C:\Users\User\Desktop\2016.5.31\16.vir
  [DETECTION] Is the TR/Crypt.Xpack.jzcu Trojan
C:\Users\User\Desktop\2016.5.31\18.vir
  [DETECTION] Is the TR/Crypt.ZPACK.aqtz Trojan
C:\Users\User\Desktop\2016.5.31\20.vir
    [0] Archive type: ACE
    --> Purchase Order....exe
        [DETECTION] Is the TR/Dropper.MSIL.aeno Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.5.31\22.vir
  [DETECTION] Is the TR/AD.Injector.M.smvb Trojan
C:\Users\User\Desktop\2016.5.31\23.vir
    [0] Archive type: OLE
    --> AV0000000c.AV$
        [1] Archive type: ZIP
      --> details_cedeab.js
          [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.5555194 Java script virus
          [WARNING]   Infected files in archives cannot be repaired
      --> urgent_27492.js
          [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.555132 Java script virus
          [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.5.31\26.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.86290 macro virus
C:\Users\User\Desktop\2016.5.31\27.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.14763 macro virus
C:\Users\User\Desktop\2016.5.31\29.vir
  [DETECTION] Is the TR/Muldrop.qosb Trojan
C:\Users\User\Desktop\2016.5.31\31.vir
  [DETECTION] Is the TR/Downloader.wqmu Trojan
C:\Users\User\Desktop\2016.5.31\32.vir
  [DETECTION] Is the TR/Crypt.Xpack.omyo Trojan
C:\Users\User\Desktop\2016.5.31\33.vir
    [0] Archive type: MIME
    --> Bill Payment_000010818.xls
        [DETECTION] Contains code of the X97M/Dldr.Agent.88064 Excel macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.5.31\34.vir
  [DETECTION] Is the TR/Agent.dons Trojan
C:\Users\User\Desktop\2016.5.31\35.vir
  [DETECTION] Contains code of the W2000M/Agent.5658305 macro virus
C:\Users\User\Desktop\2016.5.31\36.vir
  [DETECTION] Is the TR/Crypt.ZPACK.xilm Trojan
C:\Users\User\Desktop\2016.5.31\39.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.11510 macro virus
C:\Users\User\Desktop\2016.5.31\40.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Agent.182362 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.5.31\41.vir
  [DETECTION] Is the TR/ATRAPS.Gen Trojan
C:\Users\User\Desktop\2016.5.31\42.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.86290 macro virus
C:\Users\User\Desktop\2016.5.31\43.vir
  [DETECTION] Contains code of the W2000M/Agent.182362 macro virus
C:\Users\User\Desktop\2016.5.31\45.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.86290 macro virus
C:\Users\User\Desktop\2016.5.31\48.vir
    [0] Archive type: NSIS
    --> ProgramFilesDir/NsRandom.dll
        [DETECTION] Is the TR/Dropper.wjsy Trojan
        [WARNING]   Infected files in archives cannot be repaired

Begin scan in 'C:\Users\User\Desktop\New folder\14.vir'
C:\Users\User\Desktop\New folder\14.vir
  [DETECTION] Contains recognition pattern of the JS/Locky.QS Java script virus
  [NOTE]      The file was moved to the quarantine directory under the name '512c6201.qua'![/mw_shl_code]

蓝天二号

轩夏 发表于 2016-5-31 10:12
不是我传的

原来是精睿的。。唉，，那速度，十几KB啊。。。

轩夏

蓝天二号 发表于 2016-5-31 10:14
原来是精睿的。。唉，，那速度，十几KB啊。。。

你已经厉害到不看帖子名字了么