楼主: 心醉咖啡
收起左侧

[病毒样本] 精睿样本测试(16.8.25)

  [复制链接]
神迹般存在
发表于 2016-8-25 10:56:33 | 显示全部楼层
卡巴斯基安全软件2016:

删除24个,清除8个,未检测18个。

已上报至卡巴斯基官方。

评分

参与人数 1人气 +1 收起 理由
dongwenqi + 1 感谢解答: )

查看全部评分

Llano_心情
发表于 2016-8-25 11:00:47 | 显示全部楼层
BHHZDQL 发表于 2016-8-25 10:49
不是
此软件是个人娱乐安全软件,AS安全卫士

我想知道AS是啥意思?Anti-Spoofing?Autonomous System?还是Angel Sanctuary?
BHHZDQL
发表于 2016-8-25 11:01:36 | 显示全部楼层
Llano_心情 发表于 2016-8-25 11:00
我想知道AS是啥意思?Anti-Spoofing?Autonomous System?还是Angel Sanctuary?

ALL-Safe
Llano_心情
发表于 2016-8-25 11:04:38 | 显示全部楼层
BHHZDQL
发表于 2016-8-25 11:05:55 | 显示全部楼层

当时也没想那么多,就弄了个AS,其实AS这个名字在几年前就在卡饭出现了
Prince云
发表于 2016-8-25 11:20:15 | 显示全部楼层
本帖最后由 Prince云 于 2016-8-25 11:21 编辑

360 Total Security【联网】12X
[mw_shl_code=html,true]360 Total Security扫描日志
扫描时间:2016-08-25 11:13:54
扫描用时:00:00:16
扫描项目总数:50
威胁总数:12
处理威胁数:12
扫描选项
----------------------
扫描压缩包:否
常规引擎设置:未开启小红伞和Bitdefender引擎
扫描内容
----------------------
C:\Users\MICROMINE\桌面\2016.8.25\
扫描结果
======================
高风险项目
----------------------
C:\Users\MICROMINE\桌面\2016.8.25\07.vir        HEUR/QVM20.1.5EA2.Malware.Gen        已处理
C:\Users\MICROMINE\桌面\2016.8.25\08.vir        Win32/Trojan.Dropper.6f6        已处理
C:\Users\MICROMINE\桌面\2016.8.25\11.vir        Win32/Trojan.09d        已处理
C:\Users\MICROMINE\桌面\2016.8.25\22.vir        HEUR/QVM05.1.5EA2.Malware.Gen        已处理
C:\Users\MICROMINE\桌面\2016.8.25\29.vir        Win32/Trojan.Spy.491        已处理
C:\Users\MICROMINE\桌面\2016.8.25\35.vir        Win32/Trojan.0f4        已处理
C:\Users\MICROMINE\桌面\2016.8.25\38.vir        HEUR/QVM01.1.5EA2.Malware.Gen        已处理
C:\Users\MICROMINE\桌面\2016.8.25\09.vir        Win32/Trojan.a48        已处理
C:\Users\MICROMINE\桌面\2016.8.25\10.vir        HEUR/QVM10.1.5EA2.Malware.Gen        已处理
C:\Users\MICROMINE\桌面\2016.8.25\43.vir        HEUR/QVM10.1.5EA2.Malware.Gen        已处理
C:\Users\MICROMINE\桌面\2016.8.25\46.vir        Win32/Application.dce        已处理
C:\Users\MICROMINE\桌面\2016.8.25\48.vir        Win32/Trojan.170        已处理[/mw_shl_code]
360 Total Security【联网全开】24X
[mw_shl_code=html,true]360 Total Security扫描日志
扫描时间:2016-08-25 11:16:09
扫描用时:00:00:28
扫描项目总数:50
威胁总数:24
处理威胁数:24
扫描选项
----------------------
扫描压缩包:否
常规引擎设置:Bitdefender引擎, 小红伞引擎
扫描内容
----------------------
C:\Users\MICROMINE\桌面\2016.8.25\
扫描结果
======================
高风险项目
----------------------
C:\Users\MICROMINE\桌面\2016.8.25\07.vir        HEUR/QVM20.1.5EA2.Malware.Gen        已处理
C:\Users\MICROMINE\桌面\2016.8.25\08.vir        Win32/Trojan.Dropper.6f6        已处理
C:\Users\MICROMINE\桌面\2016.8.25\09.vir        Win32/Trojan.a48        已处理
C:\Users\MICROMINE\桌面\2016.8.25\22.vir        HEUR/QVM05.1.5EA2.Malware.Gen        已处理
C:\Users\MICROMINE\桌面\2016.8.25\29.vir        Win32/Trojan.Spy.491        已处理
C:\Users\MICROMINE\桌面\2016.8.25\35.vir        Win32/Trojan.0f4        已处理
C:\Users\MICROMINE\桌面\2016.8.25\38.vir        HEUR/QVM01.1.5EA2.Malware.Gen        已处理
C:\Users\MICROMINE\桌面\2016.8.25\43.vir        HEUR/QVM10.1.5EA2.Malware.Gen        已处理
C:\Users\MICROMINE\桌面\2016.8.25\46.vir        Win32/Application.dce        已处理
C:\Users\MICROMINE\桌面\2016.8.25\48.vir        Win32/Trojan.170        已处理
C:\Users\MICROMINE\桌面\2016.8.25\11.vir        Win32/Trojan.09d        已处理
C:\Users\MICROMINE\桌面\2016.8.25\10.vir        HEUR/QVM10.1.5EA2.Malware.Gen        已处理
C:\Users\MICROMINE\桌面\2016.8.25\17.vir        JS.Dldr.Locky.71187        已处理
C:\Users\MICROMINE\桌面\2016.8.25\19.vir        JS.Dldr.Locky.71187        已处理
C:\Users\MICROMINE\桌面\2016.8.25\26.vir        JS.Dldr.Locky.71187        已处理
C:\Users\MICROMINE\桌面\2016.8.25\42.vir        JS.Dldr.Locky.71187        已处理
C:\Users\MICROMINE\桌面\2016.8.25\45.vir        JS.Dldr.Locky.71187        已处理
C:\Users\MICROMINE\桌面\2016.8.25\47.vir        W2000M.Dldr.Agent.AM.57630        已处理
C:\Users\MICROMINE\桌面\2016.8.25\13.vir        Win32/Trojan.Dropper.53d        已处理
C:\Users\MICROMINE\桌面\2016.8.25\16.vir        Trojan.Doc.Downloader.NO        已处理
C:\Users\MICROMINE\桌面\2016.8.25\21.vir        JS:Trojan.JS.Agent.NNR        已处理
C:\Users\MICROMINE\桌面\2016.8.25\23.vir        Trojan.Downloader.JS.WY        已处理
C:\Users\MICROMINE\桌面\2016.8.25\27.vir        Trojan.PDF.Agent.BF        已处理
C:\Users\MICROMINE\桌面\2016.8.25\50.vir        Trojan.Agent.BXJU        已处理[/mw_shl_code]
Eset小粉絲
发表于 2016-8-25 12:10:31 | 显示全部楼层
Avira 31X

[mw_shl_code=css,true]Start of the scan: Thursday, 25 August, 2016  12:09

Starting the file scan:

Begin scan in 'C:\Users\User\Desktop\2016.8.25'
C:\Users\User\Desktop\2016.8.25\02.vir
    [0] Archive type: ACE
    --> BL YMLUZ232325525.exe
        [DETECTION] Is the TR/AD.Siwors.ldpz Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.25\03.vir
    [0] Archive type: ZIP
    --> word/embeddings/oleObject1.bin
        [1] Archive type: OLE
      --> AV00000016.AV$
          [2] Archive type: OLE
        --> AV00000018.AV$
            [3] Archive type: ZIP
          --> [Content_Types].xml
              [DETECTION] Contains code of the W2000M/Dldr.Agent.76553 macro virus
              [WARNING]   Infected files in archives cannot be repaired
          --> word/vbaProject.bin
              [DETECTION] Contains code of the W2000M/Agent.221520 macro virus
              [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.25\07.vir
  [DETECTION] Is the TR/Crypt.Xpack.vrav Trojan
C:\Users\User\Desktop\2016.8.25\08.vir
  [DETECTION] Is the TR/Dropper.MSIL.Gen8 Trojan
C:\Users\User\Desktop\2016.8.25\09.vir
  [DETECTION] Is the TR/AD.NetInject.kbsk Trojan
C:\Users\User\Desktop\2016.8.25\11.vir
  [DETECTION] Is the TR/Dropper.MSIL.kgie Trojan
C:\Users\User\Desktop\2016.8.25\13.vir
  [DETECTION] Contains recognition pattern of the DR/AutoIt.Gen dropper
C:\Users\User\Desktop\2016.8.25\14.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.111777 Java script virus
C:\Users\User\Desktop\2016.8.25\15.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Agent.44801194 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.25\16.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Dldr.Agent.dfgh macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.25\17.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71187 Java script virus
C:\Users\User\Desktop\2016.8.25\18.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Agent.44801194 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.25\19.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71187 Java script virus
C:\Users\User\Desktop\2016.8.25\20.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.111777 Java script virus
C:\Users\User\Desktop\2016.8.25\22.vir
  [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
C:\Users\User\Desktop\2016.8.25\23.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.111777 Java script virus
C:\Users\User\Desktop\2016.8.25\26.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71187 Java script virus
C:\Users\User\Desktop\2016.8.25\29.vir
  [DETECTION] Is the TR/Spy.40960.1273 Trojan
C:\Users\User\Desktop\2016.8.25\32.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Agent.44801194 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.25\34.vir
    [0] Archive type: ZIP
    --> scan_list_016pdf.exe
        [1] Archive type: AutoIt
      --> Users\Rocco\AppData\Local\Temp\autE2BB.tmp
          [DETECTION] Is the TR/Dropper.Gen Trojan
          [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.25\35.vir
  [DETECTION] Is the TR/Agent.24576.1050 Trojan
C:\Users\User\Desktop\2016.8.25\37.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Agent.44801194 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.25\38.vir
  [DETECTION] Is the TR/Graftor.5785621 Trojan
C:\Users\User\Desktop\2016.8.25\39.vir
    [0] Archive type: ZIP
    --> ‘ª ­-ª®¯¨ï ¤®ªã¬¥­â®¢ ¤«ï ª®­âà £¥­â  ®â 23.08.2016 £®¤ . ®¤¯¨á ­® £« ¢­ë¬ ¡ã壠«â¥à®¬. ‘à®ç­®_66ff38d.scr
        [1] Archive type: 7-Zip SFX (self extracting)
      --> 3FE73CF818A9
          [DETECTION] Is the TR/Crypt.ZPACK.xwpz Trojan
          [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.25\41.vir
    [0] Archive type: ZIP
    --> red/v.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.19 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/w.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.20 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/r.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.16 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/u.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.18 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/z.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.22 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/q.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.15 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/s.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.17 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/k.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.9 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/n.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.12 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/a.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.76578 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/b.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/o.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.13 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/f.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.5 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/x.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.21 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/l.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.10 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/i.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.8 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/Eagle.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.4 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/p.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.14 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/g.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.6 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/c.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.2 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/m.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.11 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/d.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.3 Java virus
        [WARNING]   Infected files in archives cannot be repaired
    --> red/h.class
        [DETECTION] Contains recognition pattern of the JAVA/Adwind.dsg.7 Java virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\User\Desktop\2016.8.25\42.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71187 Java script virus
C:\Users\User\Desktop\2016.8.25\45.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71187 Java script virus
C:\Users\User\Desktop\2016.8.25\46.vir
  [DETECTION] Contains virus patterns of Adware ADWARE/DealPly.cvai
C:\Users\User\Desktop\2016.8.25\47.vir
  [DETECTION] Contains code of the W2000M/Dldr.Agent.AM.57630 macro virus
C:\Users\User\Desktop\2016.8.25\48.vir
  [DETECTION] Is the TR/Dropper.MSIL.mpjd Trojan
C:\Users\User\Desktop\2016.8.25\50.vir
    [0] Archive type: ZIP
    --> word/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Agent.0628244 macro virus
        [WARNING]   Infected files in archives cannot be repaired[/mw_shl_code]
tomochan
发表于 2016-8-25 13:03:17 | 显示全部楼层
CIS

2X

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
ericdj
发表于 2016-8-25 14:29:46 | 显示全部楼层

CIS持续垫底…
囨囚囨図
发表于 2016-8-25 16:47:09 | 显示全部楼层

可以~这很CIS
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-14 04:16 , Processed in 0.091078 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表