精睿样本测试（16.6.15）

fzshot

F-Secure

[mw_shl_code=css,true]
结果

    已扫描项目： 50
    找到的恶意项目： 21

详细信息
Trojan.GenericKD.3305381

    C:\USERS\CHENG\DESKTOP\2016.6.15\07.VIR: 已清除

Trojan.GenericKD.3298808

    C:\USERS\CHENG\DESKTOP\2016.6.15\08.VIR: 已清除

Trojan.GenericKD.3250417

    C:\USERS\CHENG\DESKTOP\2016.6.15\03.VIR: 已清除

Trojan.GenericKD.3300770

    C:\USERS\CHENG\DESKTOP\2016.6.15\09.VIR: 已清除

Gen:Variant.Razy.63431

    C:\USERS\CHENG\DESKTOP\2016.6.15\13.VIR: 已清除

Trojan.GenericKD.3299913

    C:\USERS\CHENG\DESKTOP\2016.6.15\11.VIR: 已清除

Trojan:W97M/MaliciousMacro.GEN

    C:\USERS\CHENG\DESKTOP\2016.6.15\01.VIR: 无法清理

JS:Exploit.JS.Agent.KJ

    C:\USERS\CHENG\DESKTOP\2016.6.15\15.VIR: 已清除

Trojan.Agent.BTVN

    C:\USERS\CHENG\DESKTOP\2016.6.15\16.VIR: 已清除

Trojan:W97M/Fareit.F

    C:\USERS\CHENG\DESKTOP\2016.6.15\21.VIR: 无法清理

Trojan.GenericKD.3298586

    C:\USERS\CHENG\DESKTOP\2016.6.15\19.VIR: 已清除

Trojan.GenericKD.3300474

    C:\USERS\CHENG\DESKTOP\2016.6.15\25.VIR: 已清除

Trojan.GenericKD.3305322

    C:\USERS\CHENG\DESKTOP\2016.6.15\17.VIR: 已清除

Trojan.GenericKD.3301695

    C:\USERS\CHENG\DESKTOP\2016.6.15\24.VIR: 已清除

Trojan.GenericKD.3303320

    C:\USERS\CHENG\DESKTOP\2016.6.15\20.VIR: 已清除

Trojan.VBS.Downloader.PN

    C:\USERS\CHENG\DESKTOP\2016.6.15\37.VIR: 已清除

Trojan.GenericKD.3296254

    C:\USERS\CHENG\DESKTOP\2016.6.15\28.VIR: 已清除

Trojan.GenericKD.3300551

    C:\USERS\CHENG\DESKTOP\2016.6.15\39.VIR: 已清除

Trojan.GenericKD.3298873

    C:\USERS\CHENG\DESKTOP\2016.6.15\36.VIR: 已清除

Trojan.GenericKD.3035903

    C:\USERS\CHENG\DESKTOP\2016.6.15\49.VIR: 已清除

Gen:Variant.Adware.DealPly

    C:\USERS\CHENG\DESKTOP\2016.6.15\45.VIR: 已跳过

版本信息

病毒定义数据库：

    2016-06-15_03

扫描引擎：

    F-Secure Aquarius: 11.00.01, 2016-06-15
    F-Secure Gemini: 3.02.414, 2016-06-14
    F-Secure Hydra: 5.15.96, 2016-06-14
    F-Secure Online: 16.00.17
    F-Secure USS: 5.08.181, 2016-01-27

[/mw_shl_code]

曲中求

蓝天二号

McAfee 24X

轩夏

微软
[mw_shl_code=css,true]Scan started on Wed Jun 15 14:22:31 2016

C:\Users\XuanXia\Desktop\2016.6.15\02.vir->word/vbaProject.bin                                Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.6.15\08.vir                                                     Infected: Backdoor:Win32/NetWiredRC.C
C:\Users\XuanXia\Desktop\2016.6.15\10.vir->word/vbaProject.bin                                Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.6.15\13.vir                                                     Infected: Trojan:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.6.15\16.vir                                                     Infected: TrojanSpy:MSIL/Golroted.B
C:\Users\XuanXia\Desktop\2016.6.15\17.vir                                                     Infected: Trojan:Win32/Matsnu.Q
C:\Users\XuanXia\Desktop\2016.6.15\18.vir->word/vbaProject.bin                                Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.6.15\21.vir                                                     Infected: TrojanDropper:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.6.15\23.vir->word/vbaProject.bin                                Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.6.15\28.vir                                                     Infected: TrojanDownloader:Win32/Banload
C:\Users\XuanXia\Desktop\2016.6.15\29.vir->word/vbaProject.bin                                Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.6.15\34.vir->REVISED INVOICE pdf.exe                            Infected: TrojanSpy:MSIL/Golroted
C:\Users\XuanXia\Desktop\2016.6.15\36.vir                                                     Infected: TrojanDownloader:Win32/Banload
C:\Users\XuanXia\Desktop\2016.6.15\39.vir                                                     Infected: Trojan:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.6.15\41.vir->(Ole Stream 0)->rvtcrextrexter_Num_68815.exe       Infected: Trojan:Win32/Dynamer!ac [non_writable_container]
C:\Users\XuanXia\Desktop\2016.6.15\43.vir->word/vbaProject.bin                                Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.6.15\46.vir->(BZip2)->Copia De Sancion Y Demanda.exe            Infected: Trojan:Win32/Xtrat [non_writable_container]
Successfully checked: C:\Users\XuanXia\Desktop\2016.6.15

Scan ended on Wed Jun 15 14:22:59 2016[/mw_shl_code]

T.Yoshiyuki

好 这次我来玩老E

ESET Internet Security 10.0.169.0 BETA

kill 37x

[mw_shl_code=css,true]Log
Scan Log
Version of virus signature database: 13649P (20160615)
Date: 2016/06/15  Time: 15:34:28
Scanned disks, folders and files: D:\TEST\daily\2016.6.15
D:\TEST\daily\2016.6.15\02.vir.docx » ZIP » word/vbaProject.bin - VBA/TrojanDownloader.Agent.BGZ trojan - deleted
D:\TEST\daily\2016.6.15\05.vir - VBS/DNSChanger.AA trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\06.vir - VBS/TrojanDownloader.Agent.OAW trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\07.vir.exe - a variant of Win32/Kryptik.EZTR trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\09.vir.exe » NSIS » SFhelper.dll - a variant of Win32/Injector.CZZG trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\10.vir.docx » ZIP » word/vbaProject.bin - VBA/TrojanDownloader.Agent.BGZ trojan - deleted
D:\TEST\daily\2016.6.15\11.vir.exe - Win32/TrojanDownloader.Banload.XBU trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\12.vir.doc - VBA/TrojanDownloader.Agent.BGV trojan - cleaned
D:\TEST\daily\2016.6.15\13.vir.dll - a variant of Win32/Kryptik.EZID trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\14.vir.rtf - Win32/Exploit.Agent.NNN trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\15.vir.html - JS/Exploit.Agent.NLT trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\16.vir.exe - a variant of MSIL/Injector.PMM trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\17.vir.exe - Win32/TrojanDownloader.Nymaim.BA trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\18.vir.docx » ZIP » word/vbaProject.bin - VBA/TrojanDownloader.Agent.BGZ trojan - deleted
D:\TEST\daily\2016.6.15\19.vir.exe - a variant of Win32/Obfuscated.NGG trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\20.vir.exe - a variant of MSIL/Kryptik.BVV trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\21.vir.doc - VBA/TrojanDropper.Agent.JE trojan - cleaned
D:\TEST\daily\2016.6.15\23.vir.docx » ZIP » word/vbaProject.bin - VBA/TrojanDownloader.Agent.BGZ trojan - deleted
D:\TEST\daily\2016.6.15\24.vir.exe - a variant of Win32/TrojanDownloader.VB.QYR trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\25.vir.exe - a variant of Win32/Roseam.B trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\26.vir.exe » NSIS » spext.dll - Win32/SProtector.B potentially unwanted application - deleted
D:\TEST\daily\2016.6.15\28.vir.exe - a variant of Win32/TrojanDownloader.Banload.XHD trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\29.vir.docx » ZIP » word/vbaProject.bin - VBA/TrojanDownloader.Agent.BGZ trojan - deleted
D:\TEST\daily\2016.6.15\32.vir - Win32/Autoit.AU trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\33.vir.zip » ZIP » MV SEYANG CARGO_PDF.exe - a variant of MSIL/Injector.PMO trojan - deleted
D:\TEST\daily\2016.6.15\34.vir.zip » ZIP » REVISED INVOICE pdf.exe - a variant of MSIL/Kryptik.GHO trojan - deleted
D:\TEST\daily\2016.6.15\35.vir.exe » NSIS » NsResize.dll - Win32/Injector.DADT trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\36.vir.exe - Win32/TrojanDownloader.Banload.XHO trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\37.vir - VBS/TrojanDownloader.Small.NFB trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\38.vir.rtf - Win32/Exploit.Agent.NNW trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\39.vir.exe - a variant of Win32/Kryptik.EZMV trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\40.vir - VBS/TrojanDownloader.Agent.OFO trojan - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\42.vir.exe - a variant of MSIL/Adware.Imali.C application - cleaned by deleting [1]
D:\TEST\daily\2016.6.15\43.vir.docx » ZIP » word/vbaProject.bin - VBA/TrojanDownloader.Agent.BGZ trojan - deleted
D:\TEST\daily\2016.6.15\45.vir.exe - a variant of Win32/DealPly.DM potentially unwanted application - deleted
D:\TEST\daily\2016.6.15\46.vir » BZ2 » 46.vir » TAR » Copia De Sancion Y Demanda.exe - a variant of Win32/Injector.CZUX trojan - deleted
D:\TEST\daily\2016.6.15\48.vir.exe » NSIS » Updater.exe - a variant of Win32/Itva.F potentially unwanted application - deleted
D:\TEST\daily\2016.6.15\48.vir.exe » NSIS » THelper.exe - a variant of Win32/Itva.G potentially unwanted application - deleted
D:\TEST\daily\2016.6.15\50.vir.exe » NSIS » Script.nsi - is OK
Number of scanned objects: 206
Number of threats found: 38
Number of cleaned objects: 38
Time of completion: 15:34:36  Total scanning time: 8 sec (00:00:08)

Notes:
[1] Object has been deleted as it only contained the virus body.
[/mw_shl_code]

欧阳宣

T.Yoshiyuki 发表于 2016-6-15 14:36
好 这次我来玩老E

ESET Internet Security 10.0.169.0 BETA

这个自动根据文件类型修改后缀名的软件，在哪里找的啊

realjack

飞塔5.4隔28（其中26个解包时就被干掉了），余22

T.Yoshiyuki

欧阳宣 发表于 2016-6-15 15:03
这个自动根据文件类型修改后缀名的软件，在哪里找的啊

论坛里某人以前发的…具体在哪里我忘记掉了…
给你一份好了

KIS 2016


Rising 扫描器

900703

360 Kill 28 未上報 (正在全部上報中....)