精睿样本测试（16.7.1）

fzshot

Malwarebytes Anti-Malware
www.malwarebytes.org

Files: 10
Trojan.Dropper, C:\Users\Cheng\Desktop\2016.7.1\21.vir, , [25fe63a0405a65d1b4c7f8f3ee139769],
Spyware.KeyLogger, C:\Users\Cheng\Desktop\2016.7.1\02.vir, , [24ff0af9504ad06672e0c1a24eb2c53b],
Trojan.MalPack, C:\Users\Cheng\Desktop\2016.7.1\03.vir, , [d54e8d768d0d2f07e296eeb77391f40c],
CrackTool.Agent, C:\Users\Cheng\Desktop\2016.7.1\20.vir, , [42e1dd26a0fae254e09d8bbdfb06d927],
Trojan.Agent, C:\Users\Cheng\Desktop\2016.7.1\26.vir, , [32f141c2acee5fd7d4bad2195da4ee12],
Ransom.Crypt0L0cker, C:\Users\Cheng\Desktop\2016.7.1\27.vir, , [0320fd067129092d140fd7ce758f15eb],
Backdoor.XTRat, C:\Users\Cheng\Desktop\2016.7.1\28.vir, , [37eca55ebbdfc571d76aca9940c037c9],
Trojan.Invader, C:\Users\Cheng\Desktop\2016.7.1\32.vir, , [5cc73fc4237761d59709f6c51ae7fa06],
Ransom.Enigma, C:\Users\Cheng\Desktop\2016.7.1\35.vir, , [d350a45f31691224f0355894649dc63a],
PUP.Optional.Amonetize, C:\Users\Cheng\Desktop\2016.7.1\48.vir, , [958ec340debcbf77eceaf6a063a1837d],

Eset小粉絲

Avira 23X 今天的雨傘怎麽漏水了？

[mw_shl_code=css,true]Starting the file scan:

Begin scan in 'C:\Users\User\Desktop\2016.7.1'
C:\Users\User\Desktop\2016.7.1\01.vir
    [0] Archive type: NSIS
    --> ProgramFilesDir/OpenCandy.dll
        [DETECTION] Is the TR/Dropper.flrn Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.1\02.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Users\User\Desktop\2016.7.1\03.vir
  [DETECTION] Is the TR/Crypt.Xpack.dxzp Trojan
C:\Users\User\Desktop\2016.7.1\10.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Users\User\Desktop\2016.7.1\12.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Agent.3835161 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.1\13.vir
    [0] Archive type: ACE
    --> ORDER_LISTS.ace
        [1] Archive type: ACE
      --> ORDER_LISTS.exe
          [DETECTION] Is the TR/Dropper.MSIL.qnfj Trojan
          [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.1\16.vir
  [DETECTION] Contains code of the W2000M/Agent.12920 macro virus
C:\Users\User\Desktop\2016.7.1\18.vir
  [DETECTION] Is the TR/Injector.arni Trojan
C:\Users\User\Desktop\2016.7.1\21.vir
  [DETECTION] Is the TR/Strictor.jrwy Trojan
C:\Users\User\Desktop\2016.7.1\25.vir
  [DETECTION] Is the TR/Crypt.ZPACK.lbos Trojan
C:\Users\User\Desktop\2016.7.1\26.vir
  [DETECTION] Is the TR/Hijacker.Gen Trojan
C:\Users\User\Desktop\2016.7.1\27.vir
  [DETECTION] Is the TR/AD.TorrentLocker.Y.jhjh Trojan
C:\Users\User\Desktop\2016.7.1\28.vir
  [DETECTION] Is the TR/Dropper.VB.zyao Trojan
C:\Users\User\Desktop\2016.7.1\32.vir
  [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
C:\Users\User\Desktop\2016.7.1\35.vir
  [DETECTION] Is the TR/AD.Enigma.Y.svwe Trojan
C:\Users\User\Desktop\2016.7.1\37.vir
  [DETECTION] Is the TR/Dropper.Gen7 Trojan
C:\Users\User\Desktop\2016.7.1\38.vir
  [DETECTION] Is the TR/Dropper.MSIL.xlvu Trojan
C:\Users\User\Desktop\2016.7.1\42.vir
  [DETECTION] Is the TR/Agent.ajvd Trojan
C:\Users\User\Desktop\2016.7.1\44.vir
    [0] Archive type: ZIP
        [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
        [WARNING]   Infected files in archives cannot be repaired
        [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.1\48.vir
  [DETECTION] Contains virus patterns of Adware ADWARE/CsdiMonetize.cqsi
C:\Users\User\Desktop\2016.7.1\07.vir
  [DETECTION] Contains recognition pattern of the JS/Locky.aipfqcb Java script virus
C:\Users\User\Desktop\2016.7.1\34.vir
  [DETECTION] Contains recognition pattern of the JS/Locky.aipfqde Java script virus
C:\Users\User\Desktop\2016.7.1\41.vir
  [DETECTION] Contains recognition pattern of the JS/Locky.aipfqde Java script virus[/mw_shl_code]

a1414007

卡巴kill 25

ELOHIM

防病毒定义: 1.225.110.0
反间谍软件定义: 1.225.110.0

谁来双击今天的一号样本？虚拟机下。

Windows Defender 25 只。 修复：0 只。

900703

360 AntiVirus 6.0 Kill 20

王大灭火器

Tencent PC Manager with BD engine

水墨静音

AVG 31X

Comodo : 1X

540923555

ELOHIM 发表于 2016-7-1 11:24
谁来双击今天的一号样本？虚拟机下。

Windows Defender 25 只。 修复：0 只。

12.vir和45.vir我这里是修复了。。。没删除

ELOHIM

540923555 发表于 2016-7-1 13:20
12.vir和45.vir我这里是修复了。。。没删除

WD居然会出现不一样的结果。可能是因为我的是虚拟机，性能不好，所以删除完事。