[2016.7.26]凌霜测试组

轩夏

http://www.vdisk.cn/down/index/19727845
压缩包解压密码：bbs.vc52.cn

540923555

wd占位

联网查杀+修复=77个，未处理样本23个

轩夏

MSE

[mw_shl_code=css,true]Scan started on Tue Jul 26 09:05:38 2016

C:\Users\XuanXia\Desktop\2016.7.24\virus (10).vir                                            Infected: Trojan:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (11).vir                                            Infected: TrojanDownloader:JS/Nemucod.GM
C:\Users\XuanXia\Desktop\2016.7.24\virus (15).vir                                            Infected: Trojan:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (17).vir                                            Infected: TrojanSpy:Win32/Ranbyus
C:\Users\XuanXia\Desktop\2016.7.24\virus (18).vir                                            Infected: TrojanDownloader:JS/Nemucod.GL
C:\Users\XuanXia\Desktop\2016.7.24\virus (19).vir                                            Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\2016.7.24\virus (20).vir                                            Infected: Ransom:Win32/Critoni.A
C:\Users\XuanXia\Desktop\2016.7.24\virus (22).vir->Kjsio/x.class                             Infected: Trojan:Java/Adwind.P
C:\Users\XuanXia\Desktop\2016.7.24\virus (22).vir->Kjsio/g.class                             Infected: Trojan:Java/Adwind.P
C:\Users\XuanXia\Desktop\2016.7.24\virus (22).vir->Kjsio/v.class                             Infected: Trojan:Java/Adwind.P
C:\Users\XuanXia\Desktop\2016.7.24\virus (24).vir                                            Infected: Ransom:Win32/Locky!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (26).vir->word/vbaProject.bin                       Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.7.24\virus (27).vir                                            Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\2016.7.24\virus (28).vir->word/vbaProject.bin                       Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.7.24\virus (29).vir                                            Infected: TrojanDownloader:JS/Nemucod.FJ
C:\Users\XuanXia\Desktop\2016.7.24\virus (30).vir->word/vbaProject.bin                       Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.7.24\virus (31).vir->word/vbaProject.bin                       Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.7.24\virus (32).vir                                            Infected: HackTool:MSIL/Boilod.A
C:\Users\XuanXia\Desktop\2016.7.24\virus (33).vir->(RtfBody)                                 Infected: Exploit:Win32/BlueRid.A [non_writable_container]
C:\Users\XuanXia\Desktop\2016.7.24\virus (34).vir                                            Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\2016.7.24\virus (35).vir->word/vbaProject.bin                       Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.7.24\virus (36).vir->(part0005:)->(ActiveMime)                 Infected: TrojanDownloader:O97M/Bartallex [non_writable_container]
C:\Users\XuanXia\Desktop\2016.7.24\virus (37).vir->word/vbaProject.bin                       Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.7.24\virus (38).vir                                            Infected: TrojanDownloader:JS/Nemucod.FJ
C:\Users\XuanXia\Desktop\2016.7.24\virus (4).vir->word/vbaProject.bin                        Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.7.24\virus (40).vir                                            Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\2016.7.24\virus (41).vir->word/vbaProject.bin                       Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.7.24\virus (43).vir->word/vbaProject.bin                       Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.7.24\virus (44).vir                                            Infected: Ransom:Win32/Locky
C:\Users\XuanXia\Desktop\2016.7.24\virus (45).vir                                            Infected: TrojanDownloader:JS/Nemucod.GM
C:\Users\XuanXia\Desktop\2016.7.24\virus (47).vir                                            Infected: TrojanDownloader:O97M/Adnel
C:\Users\XuanXia\Desktop\2016.7.24\virus (48).vir                                            Infected: TrojanSpy:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (49).vir->main/NameClassm.class                     Infected: Trojan:Java/Adwind
C:\Users\XuanXia\Desktop\2016.7.24\virus (49).vir->main/NameClassi.class                     Infected: Exploit:Java/CVE-2014-0114
C:\Users\XuanXia\Desktop\2016.7.24\virus (5).vir                                             Infected: Trojan:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (50).vir                                            Infected: TrojanSpy:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (51).vir->y.class                                   Infected: Trojan:Java/Adwind.P
C:\Users\XuanXia\Desktop\2016.7.24\virus (51).vir->q.class                                   Infected: Trojan:Java/Adwind.P
C:\Users\XuanXia\Desktop\2016.7.24\virus (53).vir                                            Infected: TrojanDownloader:Win32/Silcon!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (54).vir->IMG-PO97465MH_output6C31E10.pif           Infected: Trojan:Win32/Dynamer!ac [non_writable_container]
C:\Users\XuanXia\Desktop\2016.7.24\virus (55).vir                                            Infected: Trojan:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (56).vir                                            Infected: TrojanDownloader:JS/Nemucod.GM
C:\Users\XuanXia\Desktop\2016.7.24\virus (57).vir                                            Infected: Trojan:Java/Adwind.P
C:\Users\XuanXia\Desktop\2016.7.24\virus (58).vir->word/vbaProject.bin                       Infected: TrojanDownloader:O97M/Donoff.BG
C:\Users\XuanXia\Desktop\2016.7.24\virus (6).vir                                             Infected: Trojan:Win32/Vreikstadi
C:\Users\XuanXia\Desktop\2016.7.24\virus (61).vir                                            Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\2016.7.24\virus (62).vir                                            Infected: Trojan:Win32/Dynamer!ac
C:\Users\XuanXia\Desktop\2016.7.24\virus (63).vir                                            Infected: TrojanDownloader:Win32/Silcon!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (66).vir                                            Infected: Trojan:Win32/Kovter
C:\Users\XuanXia\Desktop\2016.7.24\virus (7).vir                                             Infected: Trojan:Win32/Dynamer!ac
C:\Users\XuanXia\Desktop\2016.7.24\virus (70).vir                                            Infected: Backdoor:MSIL/Bladabindi
C:\Users\XuanXia\Desktop\2016.7.24\virus (72).vir                                            Infected: TrojanDownloader:Win32/Banload
C:\Users\XuanXia\Desktop\2016.7.24\virus (73).vir                                            Infected: TrojanSpy:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (74).vir                                            Infected: Trojan:Win32/Kovter
C:\Users\XuanXia\Desktop\2016.7.24\virus (76).vir->[WsfCmtOut]->(SCRIPT0001)                 Infected: TrojanDownloader:JS/Nemucod.FJ [non_writable_container]
C:\Users\XuanXia\Desktop\2016.7.24\virus (77).vir                                            Infected: Worm:VBS/Autorun.AG
C:\Users\XuanXia\Desktop\2016.7.24\virus (78).vir                                            Infected: TrojanDownloader:JS/Nemucod.GM
C:\Users\XuanXia\Desktop\2016.7.24\virus (8).vir                                             Infected: Trojan:Win32/Kovter!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (80).vir->KMUWPLU2910.js                            Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\2016.7.24\virus (82).vir                                            Infected: VirTool:Win32/CeeInject
C:\Users\XuanXia\Desktop\2016.7.24\virus (83).vir                                            Infected: Backdoor:MSIL/Bladabindi
C:\Users\XuanXia\Desktop\2016.7.24\virus (84).vir                                            Infected: Ransom:Win32/Criakl!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (87).vir                                            Infected: Trojan:Win32/Greeodode.A
C:\Users\XuanXia\Desktop\2016.7.24\virus (88).vir                                            Infected: Trojan:Win32/Swrort.A
C:\Users\XuanXia\Desktop\2016.7.24\virus (89).vir                                            Infected: Worm:Win32/Gamarue.AU
C:\Users\XuanXia\Desktop\2016.7.24\virus (9).vir                                             Infected: Trojan:Java/Adwind.P
C:\Users\XuanXia\Desktop\2016.7.24\virus (90).vir                                            Infected: Trojan:Win32/Kovter
C:\Users\XuanXia\Desktop\2016.7.24\virus (91).vir                                            Infected: Trojan:Win32/Matsnu.Q
C:\Users\XuanXia\Desktop\2016.7.24\virus (93).vir                                            Infected: Ransom:Win32/Locky!rfn
C:\Users\XuanXia\Desktop\2016.7.24\virus (94).vir                                            Infected: TrojanDownloader:JS/Nemucod
C:\Users\XuanXia\Desktop\2016.7.24\virus (95).vir                                            Infected: Worm:Win32/Gamarue.AU
Successfully checked: C:\Users\XuanXia\Desktop\2016.7.24

Scan ended on Tue Jul 26 09:06:34 2016

Time: 56 second(s). [0h:00m:56s]
Files/second: 9 (550 Kb/s).
Objects scanned: 509.
Infected: 71. Suspicious: 0. Clean: 438. Different virus bodies: 33.
Files: 100. Directories: 2. Archives: 114. Packed: 15. Mail files: 6.
Warnings: 71. Scan errors: 0. Protected: 0. Damaged: 0. Unknown method: 0. Spanned: 0.[/mw_shl_code]

Eset小粉絲

Avira 91X




[mw_shl_code=css,true]Start of the scan: Tuesday, 26 July, 2016  09:12

Starting the file scan:

Begin scan in 'C:\Users\User\Desktop\2016.7.24'
C:\Users\User\Desktop\2016.7.24\virus (1).vir
  [DETECTION] Is the TR/Injector.vhpt Trojan
C:\Users\User\Desktop\2016.7.24\virus (10).vir
  [DETECTION] Is the TR/Dropper.MSIL.kamc Trojan
C:\Users\User\Desktop\2016.7.24\virus (11).vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\User\Desktop\2016.7.24\virus (12).vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.85689 Java script virus
C:\Users\User\Desktop\2016.7.24\virus (13).vir
  [DETECTION] Is the TR/Agent.463774 Trojan
C:\Users\User\Desktop\2016.7.24\virus (14).vir
  [DETECTION] Contains recognition pattern of the VBS/Dldr.Agent.63744 VBS script virus
C:\Users\User\Desktop\2016.7.24\virus (15).vir
  [DETECTION] Is the TR/AD.WahkyStealer.Y.mgzh Trojan
C:\Users\User\Desktop\2016.7.24\virus (17).vir
  [DETECTION] Is the TR/Crypt.Xpack.seka Trojan
C:\Users\User\Desktop\2016.7.24\virus (18).vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.86546 Java script virus
C:\Users\User\Desktop\2016.7.24\virus (19).vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\User\Desktop\2016.7.24\virus (2).vir
  [DETECTION] Is the TR/Injector.63747 Trojan
C:\Users\User\Desktop\2016.7.24\virus (20).vir
    [0] Archive type: NSIS
    --> ProgramFilesDir/ProxySettings.dll
        [DETECTION] Is the TR/Dropper.opfp Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (21).vir
  [DETECTION] Is the TR/Agent.374323 Trojan
C:\Users\User\Desktop\2016.7.24\virus (22).vir
    [0] Archive type: ZIP
    --> Kjsio/l.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334654.1 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/h.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.5433465 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/n.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.44146 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/x.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.5433465.5 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/w.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334654.2 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/s.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.67866 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/f.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.5433466 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/r.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.5433465.4 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/q.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.5433465.2 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/g.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.44147 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/m.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.5433412 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/b.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.544545 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/c.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334453 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/a.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.5433467 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/i.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.5433454 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/z.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334567 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/Error.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334765 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/d.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334654 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/v.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.5433465.3 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/u.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.867787 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Kjsio/j.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.5433465.1 Java virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (24).vir
  [DETECTION] Is the TR/Locky.554435467 Trojan
C:\Users\User\Desktop\2016.7.24\virus (26).vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.dfgh macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (27).vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.kse Java script virus
C:\Users\User\Desktop\2016.7.24\virus (28).vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.45050 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (29).vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.kse Java script virus
C:\Users\User\Desktop\2016.7.24\virus (3).vir
    [0] Archive type: ZIP
    --> com/sun/jna/CommandHotToolBox/RightAdvancedJustInput/PaymentSellPullFace.class
        [DETECTION] Contains recognition pattern of the JAVA/Agent.654651 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> com/sun/jna/CommandHotToolBox/RightAdvancedJustInput/OutputDesturAdvancedFine.class
        [DETECTION] Contains recognition pattern of the JAVA/Agent.65465 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> com/sun/jna/CommandHotToolBox/RightAdvancedJustInput/LibraryPullGroundRight.class
        [DETECTION] Contains recognition pattern of the JAVA/Agent.65445.1 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> com/sun/jna/CommandHotToolBox/RightAdvancedJustInput/TallHardOutputCommand.class
        [DETECTION] Contains recognition pattern of the JAVA/Agent.232777 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> com/sun/jna/CommandHotToolBox/RightAdvancedJustInput/GroundHotCatePack.class
        [DETECTION] Contains recognition pattern of the EXP/JAVA.Adwind.AX.Gen exploit
        [WARNING]   Infected files in archives cannot be repaired
    --> com/sun/jna/CommandHotToolBox/RightAdvancedJustInput/PerfectListHashCome.class
        [DETECTION] Contains recognition pattern of the JAVA/Agent.654564 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> com/sun/jna/CommandHotToolBox/RightAdvancedJustInput/HardLinkLoveLibrary.class
        [DETECTION] Contains recognition pattern of the JAVA/Agent.65445100 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> com/sun/jna/CommandHotToolBox/RightAdvancedJustInput/ComeLibraryFineFake.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.5433464 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> com/sun/jna/CommandHotToolBox/RightAdvancedJustInput/HateFelixMediumCake.class
        [DETECTION] Contains recognition pattern of the JAVA/Agent.65445 Java virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (30).vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.dfgh macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (31).vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.45050 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (32).vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Users\User\Desktop\2016.7.24\virus (33).vir
  [DETECTION] Contains recognition pattern of the EXP/CVE-2010-3333 exploit
C:\Users\User\Desktop\2016.7.24\virus (34).vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen2 HTML script virus
C:\Users\User\Desktop\2016.7.24\virus (35).vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.45050 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (36).vir
    [0] Archive type: MIME
    --> AV000000bf.AV$
        [1] Archive type: OLE
      --> Object
          [DETECTION] Contains code of the W2000M/Agent.36220 macro virus
          [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (37).vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.45050 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (38).vir
  [DETECTION] Contains recognition pattern of the VBS/Dldr.Nemucod.AM VBS script virus
C:\Users\User\Desktop\2016.7.24\virus (4).vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Agent.3835160 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (40).vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen2 HTML script virus
C:\Users\User\Desktop\2016.7.24\virus (41).vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.45050 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (42).vir
  [DETECTION] Is the TR/Agent.nfad Trojan
C:\Users\User\Desktop\2016.7.24\virus (43).vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.dfgh macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (44).vir
  [DETECTION] Is the TR/Kryptik.5453999 Trojan
C:\Users\User\Desktop\2016.7.24\virus (45).vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\User\Desktop\2016.7.24\virus (47).vir
  [DETECTION] Contains code of the W2000M/Agent.261543 macro virus
C:\Users\User\Desktop\2016.7.24\virus (48).vir
  [DETECTION] Is the TR/Dynamer.ac.10795 Trojan
C:\Users\User\Desktop\2016.7.24\virus (49).vir
    [0] Archive type: ZIP
    --> main/NameClassh.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.1213 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/Start.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.828 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/NameClassm.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.2323 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/NameClassv.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.1319 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/NameClassw.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.1545 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/NameClassi.class
        [DETECTION] Contains recognition pattern of the EXP/Java.HLP.EB.911 exploit
        [WARNING]   Infected files in archives cannot be repaired
    --> main/NameClassy.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.1719 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/NameClassu.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.760 Java virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (5).vir
  [DETECTION] Is the TR/Dropper.MSIL.swmy Trojan
C:\Users\User\Desktop\2016.7.24\virus (50).vir
  [DETECTION] Is the TR/Spy.Gen Trojan
C:\Users\User\Desktop\2016.7.24\virus (51).vir
    [0] Archive type: ZIP
    --> n.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddjv Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> y.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddjt Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> x.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddju Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> z.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.2 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> s.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.7 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> w.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddjw Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> o.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddjs Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> p.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddns Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> k.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddnu Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> j.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.5 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> q.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddnt Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> c.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.4 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> a.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddnv Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Alo.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.3 Java virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (53).vir
  [DETECTION] Is the TR/Crypt.Xpack.lqmy Trojan
C:\Users\User\Desktop\2016.7.24\virus (54).vir
    [0] Archive type: RAR
    --> IMG-PO97465MH_output6C31E10.pif
        [DETECTION] Is the TR/Injector.sznb Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (55).vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Users\User\Desktop\2016.7.24\virus (56).vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\User\Desktop\2016.7.24\virus (57).vir
    [0] Archive type: ZIP
    --> main/??AUx.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.8 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/??aUx.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.9 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/Start.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.WE.1 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/??COn.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.11 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/??Prn.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.13 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/??AuX.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.10 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/??nul.class
        [DETECTION] Contains recognition pattern of the JS/Agent.EB.84 Java script virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/??NuL.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.12 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> main/??aUX.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ldas Java virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (58).vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.dgv macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (59).vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Users\User\Desktop\2016.7.24\virus (6).vir
  [DETECTION] Contains recognition pattern of the DR/Delphi.zrbg dropper
C:\Users\User\Desktop\2016.7.24\virus (60).vir
    [0] Archive type: ZIP
    --> module/_003_.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.781 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> _003_/SendFile.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.2448 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> _003_/RunJar.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.2141 Java virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (61).vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\User\Desktop\2016.7.24\virus (62).vir
  [DETECTION] Is the TR/Crypt.ZPACK.yqtm Trojan
C:\Users\User\Desktop\2016.7.24\virus (63).vir
  [DETECTION] Is the TR/Crypt.Xpack.buwv Trojan
C:\Users\User\Desktop\2016.7.24\virus (64).vir
  [DETECTION] Is the TR/Injector.sznb Trojan
C:\Users\User\Desktop\2016.7.24\virus (65).vir
  [DETECTION] Is the TR/Crypt.Xpack.wshb Trojan
C:\Users\User\Desktop\2016.7.24\virus (66).vir
  [DETECTION] Is the TR/ATRAPS.lyip Trojan
C:\Users\User\Desktop\2016.7.24\virus (67).vir
  [DETECTION] Contains recognition pattern of the VBS/Kryptik.AJ VBS script virus
C:\Users\User\Desktop\2016.7.24\virus (68).vir
    [0] Archive type: ZIP
    --> _002_/mouseLoco.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.6 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> _002_/TecladoLoco.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.WU Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> _002_/Shell.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> _002_/Funny.class
        [DETECTION] Contains recognition pattern of the JAVA/Agent.poe Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> _002_/IiiiiiiIiI.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.kasj Java virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (69).vir
  [DETECTION] Contains code of the ANDROID/Spy.Agent.45717 virus
C:\Users\User\Desktop\2016.7.24\virus (7).vir
  [DETECTION] Is the TR/Dropper.MSIL.pcrw Trojan
C:\Users\User\Desktop\2016.7.24\virus (70).vir
  [DETECTION] Is the TR/Crypt.Xpack.18054 Trojan
C:\Users\User\Desktop\2016.7.24\virus (71).vir
  [DETECTION] Contains code of the VBA/Dldr.Agent.A virus
C:\Users\User\Desktop\2016.7.24\virus (72).vir
  [DETECTION] Is the TR/Downloader.lmxw Trojan
C:\Users\User\Desktop\2016.7.24\virus (73).vir
  [DETECTION] Is the TR/Keylog.gwry Trojan
C:\Users\User\Desktop\2016.7.24\virus (74).vir
  [DETECTION] Is the TR/Dropper.VB.tmzq Trojan
C:\Users\User\Desktop\2016.7.24\virus (75).vir
  [DETECTION] Is the TR/Flooder.AC Trojan
C:\Users\User\Desktop\2016.7.24\virus (76).vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\User\Desktop\2016.7.24\virus (77).vir
  [DETECTION] Contains recognition pattern of the VBS/Autorun.645657 VBS script virus
C:\Users\User\Desktop\2016.7.24\virus (78).vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\User\Desktop\2016.7.24\virus (79).vir
  [DETECTION] Contains recognition pattern of the LINUX/DnsAmp.reci Linux virus
C:\Users\User\Desktop\2016.7.24\virus (8).vir
  [DETECTION] Is the TR/ATRAPS.ktho Trojan
C:\Users\User\Desktop\2016.7.24\virus (80).vir
    [0] Archive type: ZIP
    --> KMUWPLU2910.js
        [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen2 HTML script virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (81).vir
    [0] Archive type: ZIP
    --> n.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddjv Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> y.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddjt Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> x.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddju Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> z.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.2 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> s.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.7 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> w.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddjw Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> o.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddjs Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> p.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddns Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> k.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddnu Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> j.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.5 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> q.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddnt Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> c.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.4 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> a.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.ddnv Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Alo.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.jaks.3 Java virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (82).vir
    [0] Archive type: ZIP SFX (self extracting)
    --> oulooktools.exe
        [DETECTION] Is the TR/Crypt.Xpack.hmdq Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (83).vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Agent.109056.31 back-door program
C:\Users\User\Desktop\2016.7.24\virus (84).vir
  [DETECTION] Is the TR/Criakl.C Trojan
C:\Users\User\Desktop\2016.7.24\virus (86).vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Users\User\Desktop\2016.7.24\virus (87).vir
    [0] Archive type: Portable Executable Resource
    --> CABINET
        [1] Archive type: CAB (Microsoft)
      --> hellion.exe
          [DETECTION] Is the TR/Jord.byrs Trojan
          [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (88).vir
  [DETECTION] Is the TR/Swrort.bsar Trojan
C:\Users\User\Desktop\2016.7.24\virus (89).vir
  [DETECTION] Is the TR/Kryptik.FCQD.AM Trojan
C:\Users\User\Desktop\2016.7.24\virus (9).vir
    [0] Archive type: ZIP
    --> compos/_w_?????????????????iiiiIIIIIi.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.95656 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????iiiiiIiIII.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.9532 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????IIIiIiiIii.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.9555 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????iiiiIiIiii.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.9799 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????IIiIiiIiIi.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.95425 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????iiIIiIiIiI.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.95466 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????IiIIIIiIIi.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.95421 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????IIiIIIiIii.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.96772 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????iiIIIIiIIi.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.98784 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????iiiIiiiIII.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.96456 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/MaIn.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.9576 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????IiIiIIIIII.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.96634 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????iiIIIIiiii.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.96222 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????iiIiIIIiIi.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.94324 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????iiIiIIIIII.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.97754 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????IiIiIIiiiI.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.97858 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> compos/_w_?????????????????IIIiiIIIII.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.95473 Java virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.7.24\virus (90).vir
  [DETECTION] Is the TR/Kovter.65465 Trojan
C:\Users\User\Desktop\2016.7.24\virus (91).vir
  [DETECTION] Is the TR/Crypt.Xpack.ewyg Trojan
C:\Users\User\Desktop\2016.7.24\virus (93).vir
  [DETECTION] Is the TR/Agent.887 Trojan
C:\Users\User\Desktop\2016.7.24\virus (94).vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen2 HTML script virus
C:\Users\User\Desktop\2016.7.24\virus (95).vir
  [DETECTION] Is the TR/PSW.Siggen.84480 Trojan
C:\Users\User\Desktop\2016.7.24\virus (96).vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.175454 Java script virus
C:\Users\User\Desktop\2016.7.24\virus (97).vir
  [DETECTION] Is the TR/Spy.Agent.oboe Trojan
C:\Users\User\Desktop\2016.7.24\virus (98).vir
  [DETECTION] Is the TR/AD.Dorkbot.Y.irag Trojan
C:\Users\User\Desktop\2016.7.24\virus (99).vir
    [0] Archive type: ZIP
    --> c.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.7979 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> h.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.43234 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> j.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.89793 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> m.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> t.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334.5 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> f.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.65454 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> p.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334.2 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> e.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.65564 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> i.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.7656757 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> x.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334.6 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> r.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334.3 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> Eng.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.654545 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> z.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334.7 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> a.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.654456 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> s.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334.4 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> o.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.54334.1 Java virus
        [WARNING]   Infected files in archives cannot be repaired[/mw_shl_code]

蓝天二号

McAfee  miss 21

挥泪斩情思

NS修复6X，剩余12X

轩夏

蓝天二号 发表于 2016-7-26 09:14
McAfee  miss 21

看我大微软，你的 磕巴死机 呢

Eset小粉絲

轩夏 发表于 2016-7-26 09:17
看我大微软，你的 磕巴死机 呢

都是过去的精睿样本

轩夏

Eset小粉絲 发表于 2016-7-26 09:19
都是过去的精睿样本

我只是搬一下~~~~~

Eset小粉絲

轩夏 发表于 2016-7-26 09:21
我只是搬一下~~~~~

好吧，，我看每个人都测，我就测吧