精睿样本测试（16.8.1）

显示全部楼层 · 发表于 2016-8-1 09:29:44

地址：

https://pan.baidu.com/s/1jIoA7u2 提取密码 6uas

密码：bbs.vc52.cn
数量：50

显示全部楼层 · 发表于 2016-8-1 09:31:59

MSE

[mw_shl_code=css,true]Scan started on Mon Aug 01 09:30:25 2016

C:\Users\XuanXia\Desktop\2016.8.1\01.vir->[WsfCmtOut]->(SCRIPT0000)->[WSF]                                     Infected: TrojanDownloader:JS/Nemucod[non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\02.vir->(nsis-instdata)                                                    Infected: TrojanDownloader:Win32/Hicrazyk.A [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\03.vir->[WsfCmtOut]->(SCRIPT0000)->(JSNORM)                                  Infected: TrojanDownloader:JS/Swabfex.P [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\03.vir->[WsfCmtOut]->(SCRIPT0000)->[Eval]                                  Infected: TrojanDownloader:JS/Swabfex.P [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\04.vir->[WsfCmtOut]->(SCRIPT0000)->(JSNORM)                                  Infected: TrojanDownloader:JS/Swabfex.P [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\04.vir->[WsfCmtOut]->(SCRIPT0000)->[Eval]                                  Infected: TrojanDownloader:JS/Swabfex.P [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\05.vir->[WsfCmtOut]->(SCRIPT0000)->(JSNORM)                                  Infected: TrojanDownloader:JS/Swabfex.P [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\05.vir->[WsfCmtOut]->(SCRIPT0000)->[Eval]                                  Infected: TrojanDownloader:JS/Swabfex.P [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\08.vir->[HtmlCmtOut]->(SCRIPT0004)                                           Infected: Trojan:JS/Redirector.QE [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\10.vir                                                                      Infected: Ransom:Win32/Locky!rfn
...anXia\Desktop\2016.8.1\12.vir->com/sun/jna/FakeCounterDownLink/PaymentDownLocaleThanks/PullBoxMapFake.class  Infected: Trojan:Java/Adwind.AA
C:\Users\XuanXia\Desktop\2016.8.1\13.vir->[HtmlCmtOut]                                                       Infected: Ransom:HTML/CryptMess.C [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\14.vir                                                                      Infected: TrojanSpy:Win32/Nivdort!rfn
C:\Users\XuanXia\Desktop\2016.8.1\15.vir                                                                      Infected: Trojan:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.8.1\16.vir->Pedido_115858.jar->dgerssdf/D0wnF1le.class                         Infected: TrojanDownloader:Java/Banload.B [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\17.vir->[WsfCmtOut]->(SCRIPT0000)->[WSF]                                     Infected: TrojanDownloader:JS/Nemucod[non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\18.vir->[WsfCmtOut]->(SCRIPT0000)->[WSF]                                     Infected: TrojanDownloader:JS/Nemucod[non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\20.vir                                                                      Infected: Trojan:O97M/Madeba.A!det
C:\Users\XuanXia\Desktop\2016.8.1\22.vir                                                                      Infected: TrojanDownloader:JS/Swabfex.C
C:\Users\XuanXia\Desktop\2016.8.1\23.vir                                                                      Infected: TrojanSpy:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.8.1\26.vir->Group Pte Ltd - RFQ_4410-00141.exe                                  Infected: Trojan:Win32/Dynamer!ac
C:\Users\XuanXia\Desktop\2016.8.1\27.vir                                                                      Infected: Trojan:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.8.1\28.vir                                                                      Infected: TrojanDropper:O97M/Bartallex
C:\Users\XuanXia\Desktop\2016.8.1\30.vir->[WsfCmtOut]->(SCRIPT0000)->[WSF]                                     Infected: TrojanDownloader:JS/Nemucod[non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\32.vir->word/embeddings/oleObject1.bin->(Ole Stream 0)->a1.net_rechnung.js Infected: TrojanDownloader:JS/Nemucod[non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\34.vir                                                                      Infected: Trojan:Win32/Bulta!rfn
C:\Users\XuanXia\Desktop\2016.8.1\35.vir                                                                      Infected: PWS:HTML/Phish.MS
C:\Users\XuanXia\Desktop\2016.8.1\36.vir->[WsfCmtOut]->(SCRIPT0000)->[WSF]                                     Infected: TrojanDownloader:JS/Nemucod[non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\37.vir->[WsfCmtOut]->(SCRIPT0000)->(JSNORM)                                  Infected: TrojanDownloader:JS/Swabfex.P [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\37.vir->[WsfCmtOut]->(SCRIPT0000)->[Eval]                                  Infected: TrojanDownloader:JS/Swabfex.P [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\38.vir                                                                      Infected: Ransom:Win32/Locky!rfn
C:\Users\XuanXia\Desktop\2016.8.1\39.vir                                                                      Infected: Ransom:Win32/Locky!rfn
C:\Users\XuanXia\Desktop\2016.8.1\40.vir                                                                      Infected: Trojan:Win32/Xtrat!rfn
C:\Users\XuanXia\Desktop\2016.8.1\41.vir                                                                      Infected: TrojanDownloader:Win32/Banload
C:\Users\XuanXia\Desktop\2016.8.1\42.vir                                                                      Infected: TrojanSpy:Win32/Skeeyah.A!rfn
C:\Users\XuanXia\Desktop\2016.8.1\44.vir->word/vbaProject.bin                                                 Infected: TrojanDownloader:O97M/Donoff
C:\Users\XuanXia\Desktop\2016.8.1\46.vir->[WsfCmtOut]->(SCRIPT0000)->(JSNORM)                                  Infected: TrojanDownloader:JS/Swabfex.P [non_writable_container]
C:\Users\XuanXia\Desktop\2016.8.1\49.vir->word/vbaProject.bin                                                 Infected: TrojanDownloader:O97M/Donoff

Successfully checked: C:\Users\XuanXia\Desktop\2016.8.1

Scan ended on Mon Aug 01 09:30:44 2016

Time: 19 second(s). [0h:00m:19s]
Files/second: 13 (584 Kb/s).
Objects scanned: 254.
Infected: 38. Suspicious: 0. Clean: 216. Different virus bodies: 20.
Files: 50. Directories: 1. Archives: 69. Packed: 30. Mail files: 2.
Warnings: 38. Scan errors: 0. Protected: 0. Damaged: 0. Unknown method: 0. Spanned: 0.[/mw_shl_code]

显示全部楼层 · 发表于 2016-8-1 09:38:08

本帖最后由 540923555 于 2016-8-1 09:47 编辑

WD占位

联网扫描+修复=36个，未处理14个

显示全部楼层 · 发表于 2016-8-1 09:41:24

McAfee 26X

显示全部楼层 · 发表于 2016-8-1 09:42:13

本帖最后由挥泪斩情思于 2016-8-1 09:53 编辑

NS

检出24X，修复2X，剩余26X

显示全部楼层 · 发表于 2016-8-1 10:14:56

百度【关闭B引擎

断网 kill x 21
[mw_shl_code=css,true]扫描结果
扫描文件数:50
发现风险数:21
已处理风险数:0

风险情况详情:

病毒木马名:JS.Trojan-Downloader.Nemucod.ca.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\01.vir  病毒木马类型:下载者木马未处理
病毒木马名:JS.Trojan-Downloader.FakejQuery.a.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\08.vir  病毒木马类型:下载者木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.ca.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\17.vir  病毒木马类型:下载者木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.ca.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\18.vir  病毒木马类型:下载者木马未处理
病毒木马名:VBS.Trojan-Downloader.Agent.jb.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\19.vir  病毒木马类型:下载者木马未处理
病毒木马名:VBA.Trojan-Dropper.Agent.ll.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\20.vir  病毒木马类型:释放者木马未处理
病毒木马名:VBA.Trojan-Dropper.Agent.js.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\28.vir  病毒木马类型:释放者木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.ca.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\30.vir  病毒木马类型:下载者木马未处理
病毒木马名:Multi.Threats.InArchive.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\31.vir  病毒木马类型:恶意木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.ca.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\36.vir  病毒木马类型:下载者木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9998.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\26.vir  病毒木马类型:恶意木马未处理
病毒木马名:VBA.Trojan-Downloader.Agent.aoy.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\44.vir  病毒木马类型:下载者木马未处理
病毒木马名:VBA.Trojan-Downloader.Agent.aoy.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\49.vir  病毒木马类型:下载者木马未处理
病毒木马名:NSIS.Trojan-Downloader.Grinidou.a.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\02.vir  病毒木马类型:下载者木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.10000.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\14.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9998.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\24.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9999.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\29.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9999.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\34.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9999.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\39.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9986.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\43.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9992.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\41.vir  病毒木马类型:恶意木马未处理[/mw_shl_code]

联网 kill x 29
[mw_shl_code=css,true]扫描结果
扫描文件数:50
发现风险数:29
已处理风险数:0

风险情况详情:

病毒木马名:JS.Trojan-Downloader.Nemucod.ca.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\01.vir  病毒木马类型:下载者木马未处理
病毒木马名:JS.Trojan-Downloader.FakejQuery.a.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\08.vir  病毒木马类型:下载者木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.ca.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\17.vir  病毒木马类型:下载者木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.ca.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\18.vir  病毒木马类型:下载者木马未处理
病毒木马名:VBS.Trojan-Downloader.Agent.jb.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\19.vir  病毒木马类型:下载者木马未处理
病毒木马名:NSIS.Trojan-Downloader.Grinidou.a.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\02.vir  病毒木马类型:下载者木马未处理
病毒木马名:Win32.Backdoor.Rogue.fxa.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\29.vir  病毒木马类型:后门程序未处理
病毒木马名:Win32.Trojan-Dropper.Necurs.vorh.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\34.vir  病毒木马类型:释放者木马未处理
病毒木马名:Win32.Trojan.Kryptik.yrcp.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\38.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.Kryptik.plg.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\39.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.Injector.xj.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\40.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan-Downloader.Banload.iuj.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\41.vir  病毒木马类型:下载者木马未处理
病毒木马名:Win32.Trojan-PSW.Fareit.akip.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\42.vir  病毒木马类型:盗号木马未处理
病毒木马名:Win32.Trojan.Agent.cwc.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\43.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Gen.CCE03.cdq.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\48.vir  病毒木马类型:恶意木马未处理
病毒木马名:VBA.Trojan-Dropper.Agent.ll.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\20.vir  病毒木马类型:释放者木马未处理
病毒木马名:Win32.Trojan.Kryptik.ewn.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\10.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.Scar.skw.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\14.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.Injector.pu.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\15.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan-Spy.Skeeyah.kt.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\23.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.Injector.nm.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\24.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.Inject.dox.cav  路径:C:\Users\魔法llano\Documents\2016.8.1\27.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9998.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\26.vir  病毒木马类型:恶意木马未处理
病毒木马名:VBA.Trojan-Dropper.Agent.js.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\28.vir  病毒木马类型:释放者木马未处理
病毒木马名:Multi.Threats.InArchive.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\31.vir  病毒木马类型:恶意木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.ca.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\30.vir  病毒木马类型:下载者木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.ca.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\36.vir  病毒木马类型:下载者木马未处理
病毒木马名:VBA.Trojan-Downloader.Agent.aoy.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\44.vir  病毒木马类型:下载者木马未处理
病毒木马名:VBA.Trojan-Downloader.Agent.aoy.bav  路径:C:\Users\魔法llano\Documents\2016.8.1\49.vir  病毒木马类型:下载者木马未处理[/mw_shl_code]

显示全部楼层 · 发表于 2016-8-1 10:17:15

本帖最后由星猫于 2016-8-1 11:14 编辑

FS KILL 39X
TO BD

显示全部楼层 · 发表于 2016-8-1 10:25:36

Llano_心情发表于 2016-8-1 10:14
百度【关闭B引擎

断网 kill x 21

看来慧眼在本地的表现还挺不错。
可云端速度~~

显示全部楼层 · 发表于 2016-8-1 10:37:45

skycai 发表于 2016-8-1 10:25
看来慧眼在本地的表现还挺不错。
可云端速度~~

其实，雪狼和慧眼互补性好的话，还是不错的，，

显示全部楼层 · 发表于 2016-8-1 10:39:25

Avira 30X

[mw_shl_code=css,true]Start of the scan: Monday, 1 August, 2016  10:38

Starting the file scan:

Begin scan in 'C:\Users\User\Desktop\2016.8.1'
C:\Users\User\Desktop\2016.8.1\01.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.25668 Java script virus
C:\Users\User\Desktop\2016.8.1\08.vir
  [DETECTION] Contains recognition pattern of the HTML/Infected.WebPage.Gen6 HTML script virus
C:\Users\User\Desktop\2016.8.1\10.vir
  [DETECTION] Is the TR/Crypt.ZPACK.akrz Trojan
C:\Users\User\Desktop\2016.8.1\14.vir
  [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
C:\Users\User\Desktop\2016.8.1\15.vir
  [DETECTION] Is the TR/Dropper.MSIL.bikf Trojan
C:\Users\User\Desktop\2016.8.1\16.vir
[0] Archive type: RAR
--> Pedido_115858.jar
      [1] Archive type: ZIP
   --> dgerssdf/D0wnF1le.class
      [DETECTION] Contains recognition pattern of the JAVA/Dldr.Agent.85788 Java virus
      [WARNING] Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.1\17.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.25668 Java script virus
C:\Users\User\Desktop\2016.8.1\18.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.25668 Java script virus
C:\Users\User\Desktop\2016.8.1\20.vir
  [DETECTION] Contains code of the W2000M/Agent.4858523 macro virus
C:\Users\User\Desktop\2016.8.1\23.vir
  [DETECTION] Is the TR/Spy.Skeeyah.ejlo Trojan
C:\Users\User\Desktop\2016.8.1\24.vir
  [DETECTION] Is the TR/Dropper.MSIL.smip Trojan
C:\Users\User\Desktop\2016.8.1\26.vir
[0] Archive type: ZIP
--> Group Pte Ltd - RFQ_4410-00141.exe
      [DETECTION] Is the TR/Dropper.MSIL.uemx Trojan
      [WARNING] Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.1\27.vir
  [DETECTION] Is the TR/Inject.yncn Trojan
C:\Users\User\Desktop\2016.8.1\28.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.747513 macro virus
C:\Users\User\Desktop\2016.8.1\29.vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Rogue.80896.2 back-door program
C:\Users\User\Desktop\2016.8.1\30.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.25668 Java script virus
C:\Users\User\Desktop\2016.8.1\31.vir
  [DETECTION] Contains recognition pattern of the EXP/CVE-2009-0837 exploit
C:\Users\User\Desktop\2016.8.1\34.vir
  [DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
C:\Users\User\Desktop\2016.8.1\36.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.25668 Java script virus
C:\Users\User\Desktop\2016.8.1\38.vir
  [DETECTION] Is the TR/Crypt.ZPACK.ebad Trojan
C:\Users\User\Desktop\2016.8.1\39.vir
  [DETECTION] Is the TR/Crypt.ZPACK.xwgc Trojan
C:\Users\User\Desktop\2016.8.1\40.vir
  [DETECTION] Is the TR/Dropper.VB.izfj Trojan
C:\Users\User\Desktop\2016.8.1\41.vir
  [DETECTION] Is the TR/Downloader.jnlz Trojan
C:\Users\User\Desktop\2016.8.1\42.vir
  [DETECTION] Is the TR/Dropper.VB.bqhz Trojan
C:\Users\User\Desktop\2016.8.1\43.vir
  [DETECTION] Is the TR/Agent.zktq Trojan
C:\Users\User\Desktop\2016.8.1\44.vir
[0] Archive type: ZIP
--> word/vbaProject.bin
      [DETECTION] Contains code of the W2000M/Agent.248543 macro virus
      [WARNING] Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.1\45.vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen2 HTML script virus
C:\Users\User\Desktop\2016.8.1\47.vir
[0] Archive type: RAR
--> carta.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
      [WARNING] Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.1\48.vir
  [DETECTION] Is the TR/Dropper.VB.rvdj Trojan
C:\Users\User\Desktop\2016.8.1\49.vir
[0] Archive type: ZIP
--> word/vbaProject.bin
      [DETECTION] Contains code of the W2000M/Agent.248543 macro virus
      [WARNING] Infected files in archives cannot be repaired[/mw_shl_code]

[病毒样本] 精睿样本测试（16.8.1）

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块