精睿样本测试（16.7.1）

显示全部楼层 · 发表于 2016-7-1 09:47:26

地址：

https://pan.baidu.com/s/1mijLaZ2 提取密码 761y

密码：bbs.vc52.cn
数量：50

显示全部楼层 · 发表于 2016-7-1 09:51:16

本帖最后由轩夏于 2016-7-1 09:52 编辑

MSE 断网 X23

[mw_shl_code=css,true]Scan started on Fri Jul 01 09:49:13 2016

C:\Users\XuanXia\Desktop\2016.7.1\03.vir                                                 Infected: Backdoor:Win32/Drixed
C:\Users\XuanXia\Desktop\2016.7.1\04.vir->(UTF-16LE)                                     Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\2016.7.1\07.vir                                                 Infected: TrojanDownloader:JS/Nemucod.FJ
C:\Users\XuanXia\Desktop\2016.7.1\12.vir->word/vbaProject.bin                            Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.7.1\13.vir->ORDER_LISTS.ace->ORDER_LISTS.exe                Infected: TrojanSpy:MSIL/Golroted.F [non_writable_container]
C:\Users\XuanXia\Desktop\2016.7.1\15.vir                                                 Infected: TrojanDownloader:Java/Banload
C:\Users\XuanXia\Desktop\2016.7.1\16.vir                                                 Infected: Trojan:O97M/Madeba.A!det
C:\Users\XuanXia\Desktop\2016.7.1\18.vir                                                 Infected: Worm:Win32/Rebhip
C:\Users\XuanXia\Desktop\2016.7.1\19.vir                                                 Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\2016.7.1\21.vir                                                 Infected: TrojanDownloader:Win32/Zegost.E!bit
C:\Users\XuanXia\Desktop\2016.7.1\24.vir->SHIPMENT DOCUMENTS.exe                         Infected: Backdoor:MSIL/Noancooe.C [non_writable_container]
C:\Users\XuanXia\Desktop\2016.7.1\27.vir                                                 Infected: VirTool:Win32/CeeInject.LL!bit
C:\Users\XuanXia\Desktop\2016.7.1\28.vir                                                 Infected: Trojan:Win32/Xtrat
C:\Users\XuanXia\Desktop\2016.7.1\31.vir                                                 Infected: PWS:HTML/Phish
C:\Users\XuanXia\Desktop\2016.7.1\32.vir                                                 Infected: Trojan:Win32/Dorv.C!rfn
C:\Users\XuanXia\Desktop\2016.7.1\34.vir                                                 Infected: TrojanDownloader:JS/Nemucod.FJ
C:\Users\XuanXia\Desktop\2016.7.1\35.vir                                                 Infected: Ransom:Win32/Ranscrape
C:\Users\XuanXia\Desktop\2016.7.1\38.vir                                                 Infected: Backdoor:MSIL/Bladabindi
C:\Users\XuanXia\Desktop\2016.7.1\41.vir                                                 Infected: TrojanDownloader:JS/Nemucod.FJ
C:\Users\XuanXia\Desktop\2016.7.1\44.vir->word/embeddings/oleObject2.bin                Infected: TrojanDownloader:JS/Swabfex.C
C:\Users\XuanXia\Desktop\2016.7.1\44.vir->word/embeddings/oleObject1.bin->(Ole Stream 0) Infected: TrojanDownloader:JS/Swabfex.C
C:\Users\XuanXia\Desktop\2016.7.1\45.vir->(SCRIPT0000)->[Func]                            Infected: Exploit:JS/Axpergle.CT [non_writable_container]
C:\Users\XuanXia\Desktop\2016.7.1\46.vir                                                 Infected: TrojanDownloader:VBS/Banload.BV
C:\Users\XuanXia\Desktop\2016.7.1\50.vir                                                 Infected: TrojanDownloader:JS/Swabfex.P
Successfully checked: C:\Users\XuanXia\Desktop\2016.7.1

Scan ended on Fri Jul 01 09:49:43 2016[/mw_shl_code]

显示全部楼层 · 发表于 2016-7-1 09:51:25

本帖最后由蓝天二号于 2016-7-1 09:56 编辑

mcafee 10X

更新后再次扫描多了五个，，

显示全部楼层 · 发表于 2016-7-1 09:58:50

蓝天二号发表于 2016-7-1 09:51
mcafee 10X

多5个也不如我大MSE

显示全部楼层 · 发表于 2016-7-1 10:01:07

轩夏发表于 2016-7-1 09:58
多5个也不如我大MSE

无关紧要的，，

显示全部楼层 · 发表于 2016-7-1 10:07:06

尴尬

显示全部楼层 · 发表于 2016-7-1 10:22:59

本帖最后由 cxy密斯于 2016-7-1 10:27 编辑

fscs kill31x，有1个检测到的无法处理
[mw_shl_code=css,true]扫描报告

2016年7月1日 10:25:21 - 10:25:25

计算机名称: SHILOH-PC
扫描类型: 扫描目标
目标: C:\Users\Shiloh\Desktop\2016.7.1

结果: 找到 32 恶意软件

Generic.JS.DownloaderAI.0A38C03B (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\05.vir 操作：已隔离
Trojan.GenericKD.3359743 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\03.vir 操作：已隔离
Generic.JS.DownloaderAG.563096F0 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\07.vir 操作：已隔离
Trojan.GenericKD.3350340 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\02.vir 操作：已隔离
Gen:Variant.MSILPerseus.27257 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\11.vir 操作：已隔离
Gen:Variant.MSILPerseus.37714 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\13.vir 操作：已隔离
Trojan:W97M/Fareit.F (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\16.vir 操作：已杀毒
Trojan.GenericKD.3353090 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\01.vir 操作：已隔离
Trojan.Java.Agent.GE (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\14.vir\ppt\embeddings\oleObject1.bin
C:\Users\Shiloh\Desktop\2016.7.1\14.vir\ppt\embeddings\oleObject1.bin
C:\Users\Shiloh\Desktop\2016.7.1\14.vir 操作：已隔离
Trojan.Downloader.JS.WC (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\19.vir 操作：已隔离
Trojan.Msword.NVP (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\22.vir
Gen:Trojan.Heur.Crifi.NuW@aigIhFFib (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\24.vir 操作：已隔离
Gen:Variant.Barys.54599 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\18.vir 操作：已隔离
Trojan.GenericKD.3355673 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\27.vir 操作：已隔离
Trojan.GenericKD.3359249 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\28.vir 操作：已隔离
Trojan.GenericKD.3354566 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\34.vir 操作：已隔离
Gen:Variant.Graftor.276037 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\32.vir 操作：已隔离
Trojan.GenericKD.3355749 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\25.vir 操作：已隔离
Gen:Variant.Zusy.197326 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\38.vir 操作：已隔离
Gen:Variant.Strictor.109160 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\21.vir 操作：已隔离
JS:Trojan.JS.Agent.MDM (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\40.vir 操作：已隔离
Trojan:W32/Backdoored.A (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\39.vir 操作：已隔离
Trojan.Generic.17288074 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\37.vir 操作：已隔离
Gen:Trojan.Heur.FU.cqX@aiL2j@mi (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\26.vir 操作：已隔离
JS:Trojan.Downloader.Nemucod.AP (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\41.vir 操作：已隔离
Trojan.GenericKD.3350903 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\35.vir 操作：已隔离
Generic.JS.DownloaderAI.1124FDC1 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\45.vir 操作：已隔离
Vbs.SSY (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\46.vir 操作：已隔离
Trojan.GenericKD.3356569 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\50.vir 操作：已隔离
Trojan.GenericKD.3348100 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\42.vir 操作：已隔离
Trojan.GenericKD.3344256 (病毒)
C:\Users\Shiloh\Desktop\2016.7.1\48.vir 操作：已隔离
找到危险软件

Application.Generic.1493226 (危险软件)
C:\Users\Shiloh\Desktop\2016.7.1\20.vir 操作：已隔离
统计信息

已扫描:
文件: 337
未扫描: 0
结果:
病毒: 32
间谍软件: 0
可疑项目: 0
危险软件: 1
操作:
已杀毒: 1
已重命名: 0
删除: 0
已隔离: 30
失败: 0
启动扇区:
已扫描: 0
受感染: 0
可疑项目: 0
已杀毒: 0
选项

定义版本:
病毒: 2016-06-30_08
间谍软件: 2016-06-30_08
扫描引擎：
F-Secure Aquarius: 11.00.01, 2016-06-30
F-Secure Hydra: 5.15.96, 2016-06-30
F-Secure Online: 16.00.17, 0-00-00
F-Secure Gemini: 3.02.414, 2016-06-30
扫描选项：
扫描所有文件
扫描内部存档
操作:
病毒: 对受感染文件进行杀毒
间谍软件: 隔离和删除[/mw_shl_code]

显示全部楼层 · 发表于 2016-7-1 10:25:15

本帖最后由狐狸糊涂于 2016-7-1 10:26 编辑

BD杀31，余19

[mw_shl_code=css,true]C:\Users\QIU\Desktop\2016.7.1\40.vir=>(INFECTED_JS) JS:Trojan.JS.Agent.MDM Deleted
C:\Users\QIU\Desktop\2016.7.1\22.vir Trojan.Msword.NVP Deleted
C:\Users\QIU\Desktop\2016.7.1\14.vir=>ppt/embeddings/oleObject1.bin Trojan.Java.Agent.GE Deleted
C:\Users\QIU\Desktop\2016.7.1\50.vir Trojan.GenericKD.3356569 Deleted
C:\Users\QIU\Desktop\2016.7.1\32.vir Gen:Variant.Graftor.276037 Deleted
C:\Users\QIU\Desktop\2016.7.1\37.vir Trojan.Generic.17288074 Deleted
C:\Users\QIU\Desktop\2016.7.1\19.vir Trojan.Downloader.JS.WC Deleted
C:\Users\QIU\Desktop\2016.7.1\07.vir Generic.JS.DownloaderAG.563096F0 Deleted
C:\Users\QIU\Desktop\2016.7.1\25.vir Trojan.GenericKD.3355749 Deleted
C:\Users\QIU\Desktop\2016.7.1\05.vir=>(REMOVED_NULLS)=>(JAVASCRIPT 4) Generic.JS.DownloaderAI.0A38C03B Deleted
C:\Users\QIU\Desktop\2016.7.1\18.vir Gen:Variant.Barys.54599 Deleted
C:\Users\QIU\Desktop\2016.7.1\46.vir Vbs.SSY Deleted
C:\Users\QIU\Desktop\2016.7.1\28.vir Trojan.GenericKD.3359249 Deleted
C:\Users\QIU\Desktop\2016.7.1\41.vir=>(INFECTED_JS) JS:Trojan.Downloader.Nemucod.AP Deleted
C:\Users\QIU\Desktop\2016.7.1\34.vir Trojan.GenericKD.3354566 Deleted
C:\Users\QIU\Desktop\2016.7.1\16.vir W97M.Downloader.DPA Disinfected
C:\Users\QIU\Desktop\2016.7.1\48.vir Trojan.GenericKD.3344256 Deleted
C:\Users\QIU\Desktop\2016.7.1\42.vir Trojan.GenericKD.3348100 Deleted
C:\Users\QIU\Desktop\2016.7.1\26.vir Gen:Trojan.Heur.FU.cqX@aiL2j@mi Deleted
C:\Users\QIU\Desktop\2016.7.1\38.vir Gen:Variant.Zusy.197326 Deleted
C:\Users\QIU\Desktop\2016.7.1\02.vir Trojan.GenericKD.3350340 Deleted
C:\Users\QIU\Desktop\2016.7.1\20.vir Application.Generic.1493226 Deleted
C:\Users\QIU\Desktop\2016.7.1\11.vir Gen:Variant.MSILPerseus.27257 Deleted
C:\Users\QIU\Desktop\2016.7.1\01.vir Trojan.GenericKD.3353090 Deleted
C:\Users\QIU\Desktop\2016.7.1\03.vir Trojan.GenericKD.3359743 Deleted
C:\Users\QIU\Desktop\2016.7.1\21.vir Gen:Variant.Strictor.109160 Deleted
C:\Users\QIU\Desktop\2016.7.1\13.vir=>ORDER_LISTS.ace=>ORDER_LISTS.exe Gen:Variant.MSILPerseus.37714 Moved to Quarantine
C:\Users\QIU\Desktop\2016.7.1\24.vir=>SHIPMENT DOCUMENTS.exe Gen:Trojan.Heur.Crifi.NuW@aigIhFFib Moved to Quarantine
C:\Users\QIU\Desktop\2016.7.1\35.vir Trojan.GenericKD.3350903 Deleted
C:\Users\QIU\Desktop\2016.7.1\27.vir Trojan.GenericKD.3355673 Deleted
C:\Users\QIU\Desktop\2016.7.1\45.vir Generic.JS.DownloaderAI.1124FDC1 Deleted
[/mw_shl_code]

显示全部楼层 · 发表于 2016-7-1 10:32:00

[mw_shl_code=css,true]"外壳扩展扫描（Shell Extension Scan）"
"高严重性";"29";"29";"0"
"中等严重性";"2";"2";"0"
"已扫描：";"C:\Users\woshi\Downloads\2016.7.1"
"已启动：";"2016/7/1, 10:27:41"
"已完成：";"2016/7/1, 10:27:43"
"项目数：";"80"
"启动者：";"woshi"

"名称";"说明";"状态";"状态";"优先级"
"C:\Users\woshi\Downloads\2016.7.1\01.vir.exe";"特洛伊木马 Generic15_c.BGFT";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\41.vir";"发现病毒 JS/Downloader.Agent";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\30.vir";"发现病毒 JS/Phish";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\16.vir.doc";"发现病毒 W97M/Downloader";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\44.vir.docx";"发现病毒 JS/Downloader.Agent";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\13.vir";"特洛伊木马 MSIL10.AHDL";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\22.vir.doc";"发现病毒 XF/Sic";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\40.vir.JS";"发现病毒 JS/Downloader.Agent";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\05.vir";"发现病毒 JS/Redir";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\38.vir.exe";"特洛伊木马 MSIL10.AARV";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\12.vir.docx";"发现病毒 W97M/Generic";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\28.vir.exe";"特洛伊木马 Crypt5.BUNV";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\27.vir.exe";"特洛伊木马 Generic_r.KQV";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\14.vir.docx";"发现病毒 Java/Backdoor.AE";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\32.vir.exe";"发现 Win32/DH{VA?}";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\18.vir.exe";"特洛伊木马 Crypt5.BOUO";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\50.vir";"发现病毒 JS/Downloader.Agent";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\20.vir.exe";"可能不需要的应用程序 Crack.BSW";"已保护";"已修复";"中等"
"C:\Users\woshi\Downloads\2016.7.1\02.vir.exe";"特洛伊木马 PSW.Generic13.JSC";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\35.vir.exe";"特洛伊木马 Generic_r.KMA";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\25.vir.exe";"特洛伊木马 Crypt5.BUMP";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\07.vir";"发现病毒 JS/Downloader.Agent";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\26.vir.exe";"发现 Win32/DH{I1slgQ4?}";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\48.vir.exe";"可能不需要的应用程序 Downloader.AQKQ";"已保护";"已修复";"中等"
"C:\Users\woshi\Downloads\2016.7.1\15.vir";"特洛伊木马 Downloader.Java_c.JN";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\21.vir.exe";"特洛伊木马 Generic37.CBZA";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\23.vir.docx";"发现病毒 Java/Backdoor.AE";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\34.vir";"发现病毒 JS/Downloader.Agent";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\24.vir";"可能是特洛伊木马 Autoit";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\04.vir";"特洛伊木马 BackDoor.Generic_c.AJNU";"已保护";"已修复";"高"
"C:\Users\woshi\Downloads\2016.7.1\29.vir.docx";"发现病毒 Java/Backdoor.AE";"已保护";"已修复";"高"
[/mw_shl_code]
31个，目前排在第一位（虽然很快会被红伞eset什么的秒掉）

显示全部楼层 · 发表于 2016-7-1 10:45:35

本帖最后由挥泪斩情思于 2016-7-1 11:01 编辑

NS检出18X，其中修复1X，剩余32X

[病毒样本] 精睿样本测试（16.7.1）

评分

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块