精睿样本测试（16.8.25）

显示全部楼层 · 发表于 2016-8-25 09:22:35

https://pan.baidu.com/s/1jHGLZhW 提取密码 n665

http://www.vdisk.cn/down/index/19731826

密码：bbs.vc52.cn
数量：50

显示全部楼层 · 发表于 2016-8-25 09:23:27

本帖最后由挥泪斩情思于 2016-8-25 09:37 编辑

NS检出19X，其中修复3X，剩余31X

显示全部楼层 · 发表于 2016-8-25 09:25:31

360杀毒扫描日志

病毒库版本：
扫描时间：2016-08-25 09:23:30
扫描用时：00:00:14
扫描类型：右键扫描
扫描文件总数：50
项目总数：9
清除项目数：9

扫描选项
----------------------
扫描所有文件：是
扫描压缩包：是
发现病毒处理方式：由用户选择处理
扫描磁盘引导区：是
扫描 Rootkit：是
使用云查杀引擎：是
使用QVM人工智能引擎：是
扫描建议修复项：是
常规引擎设置：未使用

扫描内容
----------------------
F:\浏览器下载\2016.8.25

白名单设置
----------------------

扫描结果
======================
高危风险项
----------------------
F:\浏览器下载\2016.8.25\07.vir HEUR/QVM20.1.5EA2.Malware.Gen 已删除
F:\浏览器下载\2016.8.25\08.vir HEUR/QVM03.0.5EA2.Malware.Gen 已删除
F:\浏览器下载\2016.8.25\09.vir HEUR/QVM03.0.5EA2.Malware.Gen 已删除
F:\浏览器下载\2016.8.25\10.vir HEUR/QVM10.1.5EA2.Malware.Gen 已删除
F:\浏览器下载\2016.8.25\11.vir HEUR/QVM03.0.5EA2.Malware.Gen 已删除
F:\浏览器下载\2016.8.25\29.vir HEUR/QVM07.1.5EA2.Malware.Gen 已删除
F:\浏览器下载\2016.8.25\22.vir HEUR/QVM05.1.5EA2.Malware.Gen 已删除
F:\浏览器下载\2016.8.25\38.vir HEUR/QVM01.1.5EA2.Malware.Gen 已删除
F:\浏览器下载\2016.8.25\43.vir HEUR/QVM10.1.5EA2.Malware.Gen 已删除

可疑文件上传结果
----------------------
f:\浏览器下载\2016.8.25\08.vir 上传成功
f:\浏览器下载\2016.8.25\09.vir 上传成功
f:\浏览器下载\2016.8.25\29.vir 上传成功
f:\浏览器下载\2016.8.25\43.vir 上传成功

显示全部楼层 · 发表于 2016-8-25 09:30:04

本帖最后由 Llano_心情于 2016-8-26 09:19 编辑

=====================================
标题：安天防线病毒查杀日志【8.24库】
=====================================
☆日志概要信息☆
1.导出时间:2016-08-25 09:29:34
2.导出条目：共计 12 条
3.起止日期：[2016-08-25 09:28:55] 至 [2016-08-25 09:29:28]
=====================================
[mw_shl_code=css,true][2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\03.vir 特洛伊木马(Trojan/Generic.ASMacro.6920) 未处理
[2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\10.vir 特洛伊木马(Trojan/Generic.ASMalwS.9FAB57) 未处理
[2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\11.vir 特洛伊木马(Trojan/Generic.ASMalwS.19B8674) 未处理
[2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\16.vir 特洛伊木马(Trojan/Generic.ASMacro.5D2C) 未处理
[2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\18.vir 特洛伊木马(Trojan/Generic.ASMacro.69B9) 未处理
[2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\32.vir 特洛伊木马(Trojan/Generic.ASMacro.698F) 未处理
[2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\35.vir 特洛伊木马(Trojan/Generic.ASMalwS.136C774) 未处理
[2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\39.vir 特洛伊木马(Trojan/Generic.ASMalwS.1AA917A) 未处理
[2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\43.vir 特洛伊木马(Trojan/Generic.ASMalwS.1AAA29B) 未处理
[2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\46.vir 特洛伊木马(Trojan/Generic.ASMalwS.1958BF0) 未处理
[2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\48.vir 特洛伊木马(Trojan/Generic.ASMalwS.1A9A7D5) 未处理
[2016-08-25 09:29:21] C:\Users\魔法llano\Documents\2016.8.25\50.vir 特洛伊木马(Trojan/Generic.ASMacro.65E9) 未处理
[/mw_shl_code]

25号库：kill x 25

显示全部楼层 · 发表于 2016-8-25 09:32:53

AVG KILL 32 X

显示全部楼层 · 发表于 2016-8-25 09:38:20

拉拉 15X

Zemana 12X

显示全部楼层 · 发表于 2016-8-25 09:38:58

ESS Kill 33X Fix 1X
[mw_shl_code=css,true]日志
正在扫描日志
病毒库版本: 14014 (20160824)
日期: 2016/8/25  时间: 9:36:24
已扫描的磁盘、文件夹和文件: C:\Users\Mistet\Desktop\2016.8.25
C:\Users\Mistet\Desktop\2016.8.25\01.vir > ZIP > word\media\image1.eps - Win32/Exploit.CVE-2015-2545.AR 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\01.vir > ZIP > word\media\image1.gif - DOC/Fraud.BM 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\02.vir > ACE > BL YMLUZ232325525.exe - MSIL/Injector.QDJ 特洛伊木马的变种 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\02.vir > ACE >  - 压缩文件已损坏
C:\Users\Mistet\Desktop\2016.8.25\06.vir > ZIP > word/document.xml - DOC/Fraud.BJ 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\07.vir - Win32/Dridex.AR 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\08.vir - MSIL/GenKryptik.ASY 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\09.vir - MSIL/Kryptik.HCG 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\11.vir - MSIL/Injector.OZP 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\13.vir > UPX v13_m8 > AUTOIT >  - 压缩文件已损坏
C:\Users\Mistet\Desktop\2016.8.25\14.vir - JS/TrojanDownloader.Nemucod.ASH 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\15.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BQR 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\16.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BKN 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\17.vir - JS/TrojanDownloader.Nemucod.ASF 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\18.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BQR 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\19.vir - JS/TrojanDownloader.Nemucod.ASF 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\20.vir - JS/TrojanDownloader.Nemucod.ASH 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\21.vir - JS/TrojanDownloader.Nemucod.ASA 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\22.vir - Win32/Delf.TJH 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\23.vir - JS/TrojanDownloader.Nemucod.ASB 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\26.vir - JS/TrojanDownloader.Nemucod.ASF 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\29.vir - Win32/TrojanDropper.Agent.QHX 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\30.vir > ZIP > word\media\image1.eps - Win32/Exploit.CVE-2015-2545.AR 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\30.vir > ZIP > word\media\image1.gif - DOC/Fraud.BM 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\32.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BQR 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\34.vir > ZIP > scan_list_016pdf.exe > AUTOIT > script.bin - Win32/Injector.Autoit.DK 特洛伊木马的变种 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\35.vir - Win32/Agent.VBE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\37.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BQR 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\38.vir - Win32/LoadMoney.AI.Gen 潜在的不受欢迎应用程序 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\39.vir > ZIP > 應牠-?ぎ か?酄％? 23.08.2016 ．. 彯くㄡ牠?＋牏?°澹牜猊喈? 戉_66ff38d.scr > 7ZSD > 3FE73CF818A9 - Win32/Filecoder.FH 特洛伊木马 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/v.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/w.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/r.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/u.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/z.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/q.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/s.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/k.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/n.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/a.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/b.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/o.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/f.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/x.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/l.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/i.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/Eagle.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/p.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/g.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/c.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/m.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/d.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\41.vir > ZIP > red/h.class - Java/Adwind.XE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\42.vir - JS/TrojanDownloader.Nemucod.ASF 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\43.vir - Win32/Spy.Zbot.ACM 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\45.vir - JS/TrojanDownloader.Nemucod.ASF 特洛伊木马 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\46.vir - Win32/DealPly.DK 潜在的不受欢迎应用程序的变种 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\47.vir - VBA/TrojanDropper.Agent.NV 特洛伊木马 - 已清除
C:\Users\Mistet\Desktop\2016.8.25\48.vir - MSIL/TrojanDownloader.Tiny.MX 特洛伊木马的变种 - 通过删除清除 [1]
C:\Users\Mistet\Desktop\2016.8.25\50.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BOJ 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Mistet\Desktop\2016.8.25\01.vir > ZIP > word\media\image1.eps - Win32/Exploit.CVE-2015-2545.AR 特洛伊木马 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\01.vir > ZIP > word\media\image1.gif - DOC/Fraud.BM 特洛伊木马 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\02.vir > ACE > BL YMLUZ232325525.exe - MSIL/Injector.QDJ 特洛伊木马的变种 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\02.vir > ACE >  - 压缩文件已损坏
C:\Users\Mistet\Desktop\2016.8.25\06.vir > ZIP > word/document.xml - DOC/Fraud.BJ 特洛伊木马 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\15.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BQR 特洛伊木马 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\16.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BKN 特洛伊木马 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\18.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BQR 特洛伊木马 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\30.vir > ZIP > word\media\image1.eps - Win32/Exploit.CVE-2015-2545.AR 特洛伊木马 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\30.vir > ZIP > word\media\image1.gif - DOC/Fraud.BM 特洛伊木马 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\32.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BQR 特洛伊木马 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\37.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BQR 特洛伊木马 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\38.vir - Win32/LoadMoney.AI.Gen 潜在的不受欢迎应用程序 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\46.vir - Win32/DealPly.DK 潜在的不受欢迎应用程序的变种 - 已删除
C:\Users\Mistet\Desktop\2016.8.25\50.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BOJ 特洛伊木马 - 已删除
已扫描的对象数: 281
发现的威胁数: 58
已清除对象数: 58
完成时间: 9:36:54  总扫描时间: 30 秒 (00:00:30)

备注:
[1] 由于对象中仅包含病毒主体，因此已被删除。
[/mw_shl_code]

显示全部楼层 · 发表于 2016-8-25 09:39:48

瑞星新引擎（断网）
总扫描文件: 50
总恶意文件: 9
有效检出率: 18.00%
[mw_shl_code=css,true]C:\Users\alfred\Desktop\2016.8.25
扫描开始: Thu Aug 25 09:36:45 2016
"C:\\Users\\alfred\\Desktop\\2016.8.25\\04.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\02.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\01.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\06.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\07.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\09.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\08.vir","infect":{"engine":"classic","threat":"Trojan.MSIL.Injector!1.9E1B","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\05.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\03.vir","infect":{"engine":"classic","threat":"Trojan.Obfus/VBA!1.A60A","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\12.vir","infect":{"engine":"classic","threat":"Trojan.Obfus/JS!1.A57C","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\11.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\14.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\15.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\17.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\16.vir","infect":{"engine":"classic","threat":"Trojan.Obfus/VBA@DT!1.A540","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\19.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\10.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\20.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\21.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\18.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\24.vir","infect":{"engine":"classic","threat":"Downloader.Bitsdown!1.A666","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\23.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\26.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\25.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\22.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\27.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\29.vir","infect":{"engine":"thunder","threat":"Malware.Generic!vX6trwd11vL@5","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\30.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\28.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\32.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\31.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\35.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\36.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\37.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\38.vir","infect":{"engine":"thunder","threat":"Malware.Generic!HcxPFWq9A3K@5","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\33.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\40.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\41.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\42.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\34.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\43.vir","infect":{"engine":"classic","threat":"Malware.Obscure!1.9C59","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\45.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\39.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\44.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\47.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\49.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\46.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\48.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\50.vir","infect":{"engine":"classic","threat":"Trojan.Obfus/VBA!1.A60A","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\13.vir","type":"scan"
扫描结束: Thu Aug 25 09:36:48 2016
总共耗时: 0:2:682(m:s:ms)[/mw_shl_code]

瑞星新引擎（联网）
总扫描文件: 50
总恶意文件: 26
有效检出率: 52.00%
[mw_shl_code=css,true]扫描目标 : (1) C:\Users\alfred\Desktop\2016.8.25
扫描开始: Thu Aug 25 09:38:20 2016
"C:\\Users\\alfred\\Desktop\\2016.8.25\\02.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\04.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\01.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\06.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\03.vir","infect":{"engine":"classic","threat":"Trojan.Obfus/VBA!1.A60A","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\07.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\09.vir","infect":{"engine":"rdm+","threat":"Malware.Heuristic!ET","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\05.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\12.vir","infect":{"engine":"cloud","threat":"Trojan.Obfus/JS!1.A57C-0BV4YcvSTvR","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\11.vir","infect":{"engine":"rdm+","threat":"Malware.Heuristic!ET","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\10.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\15.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\16.vir","infect":{"engine":"classic","threat":"Trojan.Obfus/VBA@DT!1.A540","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\14.vir","infect":{"engine":"cloud","threat":"Downloader.Ransomware!8.625A-i6tZkDDDWYE","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\18.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\17.vir","infect":{"engine":"cloud","threat":"Malware.Undefined!8.C-80qAnIAVnoE","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\19.vir","infect":{"engine":"cloud","threat":"Malware.Undefined!8.C-07SXPQVlyKT","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\20.vir","infect":{"engine":"cloud","threat":"Downloader.Ransomware!8.625A-3g5zLBpwFIR","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\21.vir","infect":{"engine":"cloud","threat":"Trojan.Script.WSF.Downloader.b-N9M8MKuNHvK","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\08.vir","infect":{"engine":"cloud","threat":"Trojan.MSIL.Injector!1.9E1B-EOZx5vXGVeL","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\24.vir","infect":{"engine":"classic","threat":"Downloader.Bitsdown!1.A666","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\23.vir","infect":{"engine":"cloud","threat":"Downloader.Nemucod!8.34-x917Xj1ZIwH","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\25.vir","infect":{"engine":"cloud","threat":"Malware.Agent!8.2C-xp4OMorTgIU","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\26.vir","infect":{"engine":"cloud","threat":"Malware.Undefined!8.C-PhBr0dUt6TQ","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\27.vir","infect":{"engine":"cloud","threat":"Downloader.Agent!8.B23-78prBLhHnLS","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\22.vir","infect":{"engine":"rdm+","threat":"Malware.Heuristic!ET","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\28.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\30.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\32.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\13.vir","infect":{"engine":"rdm+","threat":"Malware.Heuristic!ET","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\29.vir","infect":{"engine":"rdm+","threat":"Malware.Heuristic!ET","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\34.vir","infect":{"engine":"cloud","threat":"Dropper.Generic!8.35E-xiWXHg3xyAB","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\36.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\37.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\31.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\35.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\40.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\33.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\41.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\38.vir","infect":{"engine":"rdm+","threat":"Malware.Heuristic!ET","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\42.vir","infect":{"engine":"cloud","threat":"Malware.Undefined!8.C-BUPJynYPBJN","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\44.vir","infect":{"engine":"cloud","threat":"Malware.Agent!8.2C-L1KSJnQmqlU","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\43.vir","infect":{"engine":"classic","threat":"Malware.Obscure!1.9C59","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\47.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\39.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\49.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\50.vir","infect":{"engine":"classic","threat":"Trojan.Obfus/VBA!1.A60A","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\45.vir","infect":{"engine":"cloud","threat":"Malware.Undefined!8.C-BNleiicx7nR","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\48.vir","type":"scan"
"C:\\Users\\alfred\\Desktop\\2016.8.25\\46.vir","type":"scan"
扫描结束: Thu Aug 25 09:38:25 2016
总共耗时: 0:5:459(m:s:ms)[/mw_shl_code]

显示全部楼层 · 发表于 2016-8-25 09:42:27

显示全部楼层 · 发表于 2016-8-25 09:43:52

百度国内【关闭大B引擎

断网 kill x 20
[mw_shl_code=css,true]扫描结果
扫描文件数:50
发现风险数:20
已处理风险数:0

风险情况详情:

病毒木马名:VBA.Trojan-Downloader.Agent.aoh.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\16.vir  病毒木马类型:下载者木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.hm.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\17.vir  病毒木马类型:下载者木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.hm.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\19.vir  病毒木马类型:下载者木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.hm.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\26.vir  病毒木马类型:下载者木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9967.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\34.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9950.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\39.vir  病毒木马类型:恶意木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.hm.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\42.vir  病毒木马类型:下载者木马未处理
病毒木马名:JS.Trojan-Downloader.Nemucod.hm.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\45.vir  病毒木马类型:下载者木马未处理
病毒木马名:VBA.Trojan-Downloader.Agent.aqx.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\50.vir  病毒木马类型:下载者木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9999.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\07.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9999.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\08.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9998.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\09.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9999.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\11.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9977.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\13.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9999.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\22.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9999.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\28.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.9997.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\29.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.Agent.aol.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\35.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.Kryptik.dl.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\38.vir  病毒木马类型:恶意木马未处理
病毒木马名:Win32.Trojan.WisdomEyes.150615.9950.10000.bav  路径:C:\Users\魔法llano\Documents\2016.8.25\48.vir  病毒木马类型:恶意木马未处理[/mw_shl_code]

联网。。。。没变化，不说了，这酸爽的大姨妈又来了。WisdomEyes一堆没变化，CCE都不报下

看下午有没有好转，我再测一下吧

[病毒样本] 精睿样本测试（16.8.25）

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块