非PE病毒测试

显示全部楼层 · 发表于 2016-10-26 18:03:11

本帖最后由 dsb2466 于 2016-10-26 18:06 编辑

今天都没啥人传样本，我来传几个吧

链接：http://share.weiyun.com/abc9748c48f0337b75b19659b3a47c2a （密码：oVd0n8）

显示全部楼层 · 发表于 2016-10-26 18:25:03

AVG 全部 KILL

显示全部楼层 · 发表于 2016-10-26 18:29:40

@dsb2466

样本包麻烦加密码，否则……

ESET kill ALL

[mw_shl_code=css,true]2016/10/26 18:26:49 文件系统实时防护文件 Z:\TEMP\FF_DownThemAll_TMP\TEST.zip-{9aa8f9a9-6805-4213-99bb-d34db022138f}.dtapart 多个威胁已删除（下次重新启动后） PC-XXX 在被应用程序修改的文件上发生事件: C:\Program Files\Mozilla Firefox\firefox.exe.
2016/10/26 18:26:47 文件系统实时防护文件 Z:\Temp\Win_TMP\rUsyKnzz.zip.part 多个威胁已删除 PC-XXX 在被应用程序修改的文件上发生事件: C:\Program Files\Mozilla Firefox\firefox.exe. [/mw_shl_code]

[mw_shl_code=css,true]正在扫描日志
病毒库版本: 14338 (20161025)
日期: 2016/10/26 时间: 18:27:22
已扫描的磁盘、文件夹和文件: Z:\TEMP\TEST.zip
Z:\TEMP\TEST.zip > ZIP > js/card_cancellation_pdf 9eecf002.js - JS/TrojanDownloader.Nemucod.ASH 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/card_cancellation_pdf ad941f80.js - JS/TrojanDownloader.Nemucod.ASH 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/card_cancellation_pdf af1662b5.js - JS/TrojanDownloader.Nemucod.ASH 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~23d45ae1).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~244b09be).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~2be5e8a9).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~32ca4c26).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~3918e3fd).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~51bb9ad3).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~5a58f9a0).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~66a1e03f).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~858dcb29).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~a20dd095).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~a9f898f5).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~ba29c581).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~c2e012d5).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~c69a1f38).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~d66a46fd).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~daf348a1).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~ec85ed26).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~f13bdd42).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~f3fd0f56).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~f5b93f6a).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/commission_xls (~fb6f4234).js - JS/TrojanDownloader.Nemucod.ATE 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/contract_2016-2017_pdf ~11de534a.js - JS/TrojanDownloader.Nemucod.ASO 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/contract_2016-2017_pdf ~8e9f98a0.js - JS/TrojanDownloader.Nemucod.ASO 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/contract_2016-2017_pdf ~8f6c6db2.js - JS/TrojanDownloader.Nemucod.ASO 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/contract_2016-2017_pdf ~ea43ec54.js - JS/TrojanDownloader.Nemucod.ASO 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/f6ccbf3237e8960356aa038db80aa048659b1e270f625c9bcda37dd6a4b3bafa.js - JS/TrojanDownloader.Nemucod.AYG 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/Isabel.js - JS/TrojanDownloader.Nemucod.ARI 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan 1e21b6b9.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan 209e6bd6.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan 366f25af.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan 52ce463a.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan 659c9d0c.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan 6ae42aa8.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan 808d6db5.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan 96cf92a4.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan a1d8e969.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan b466fb82.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan b48af26a.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/monthly_financial_scan c669ac11.js - JS/TrojanDownloader.Nemucod.ASJ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/Self Billing Statement_308.js - JS/TrojanDownloader.Nemucod.ANQ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/tracking data ~4E529E85~.js - JS/TrojanDownloader.Nemucod.AYZ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/tracking data ~4EF33269~.js - JS/TrojanDownloader.Nemucod.AYZ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/tracking data ~B391B8~.js - JS/TrojanDownloader.Nemucod.AYZ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/tracking data ~C23891C1~.js - JS/TrojanDownloader.Nemucod.AYZ 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/updated order ~5F2B541~ pdf.js - JS/TrojanDownloader.Nemucod.AZL 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/updated order ~A4B321A1~ pdf.js - JS/TrojanDownloader.Nemucod.AZL 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/updated order ~CED9114~ pdf.js - JS/TrojanDownloader.Nemucod.AZL 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/updated order ~D0461D3~ pdf.js - JS/TrojanDownloader.Nemucod.AZL 特洛伊木马 - 已删除
Z:\TEMP\TEST.zip > ZIP > js/非PE的文件.js - JS/TrojanDownloader.Nemucod.AWM 特洛伊木马 - 已删除
已扫描的对象数: 52
发现的威胁数: 52
已清除对象数: 52
完成时间: 18:27:23 总扫描时间: 1 秒 (00:00:01)[/mw_shl_code]

显示全部楼层 · 发表于 2016-10-26 19:04:26

【扫描信息】

开始时间:2016-10-26 19:03:26
扫描用时:00:00:02
扫描类型:指定位置杀毒
扫描引擎:管家云查杀引擎管家反病毒引擎管家系统修复引擎
扫描状态:扫描完成

【扫描结果】

扫描文件数:57
发现风险数:23
已处理风险数:23

---------------------
2016-10-26 19:03:39 MD5:a2d6abe8d3b459e54c56d795f036d70f F:\浏览器下载\TEST\js\commission_xls (~66a1e03f).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:39 MD5:ba2f00e48f7a554fe17fef3c7c024b0d F:\浏览器下载\TEST\js\commission_xls (~c69a1f38).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:39 MD5:e71f9a5504d38635de8a705582774a4d F:\浏览器下载\TEST\js\commission_xls (~244b09be).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:39 MD5:c14299c319cf7d67912377b6207ce9bc F:\浏览器下载\TEST\js\commission_xls (~f3fd0f56).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:40 MD5:94efe0d316c155f69d18c296a7740295 F:\浏览器下载\TEST\js\commission_xls (~5a58f9a0).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:40 MD5:fa2ad8ee72ecb3a51cc59c8f868c054b F:\浏览器下载\TEST\js\commission_xls (~c2e012d5).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:40 MD5:9b04bdd8bbe9f51aebb8e4776308a5b6 F:\浏览器下载\TEST\js\commission_xls (~23d45ae1).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:40 MD5:13a018370225551bcbcea5153337f37c F:\浏览器下载\TEST\js\commission_xls (~f13bdd42).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:40 MD5:889d3da7053b62211aafd92c782700ac F:\浏览器下载\TEST\js\commission_xls (~51bb9ad3).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:41 MD5:02ca93fa750374f25f7d3b50060b388f F:\浏览器下载\TEST\js\commission_xls (~ba29c581).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:43 MD5:9998cb5f7ef9ef23e04795a124b3dcad F:\浏览器下载\TEST\js\85a82952fecae8acb9e47af04e6f1fdba24fee47d8903501aaae4aa605ce8a3c.js [Unk.Win32.Script.400687]  [删除成功]
2016-10-26 19:03:44 MD5:e425114ea3a8cad19e32880bda910ca2 F:\浏览器下载\TEST\js\commission_xls (~a9f898f5).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:44 MD5:7157dad01951f07b547e62840e50b3bb F:\浏览器下载\TEST\js\commission_xls (~ec85ed26).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:45 MD5:49cf48ff3e5905021b2b33106fb8aece F:\浏览器下载\TEST\js\commission_xls (~3918e3fd).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:46 MD5:8e248db45ea167d30c3a043abf31bb81 F:\浏览器下载\TEST\js\405ad2f09856f718fe3fce209c9d9e59ba4e1c2e4f16d0c9385224212103bb29.js [Unk.Win32.Script.400696]  [删除成功]
2016-10-26 19:03:47 MD5:04d4cbb28764cb2b8fdfa7f210ddafe0 F:\浏览器下载\TEST\js\commission_xls (~858dcb29).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:48 MD5:913c2e1f2ac66730e353ec29d770865d F:\浏览器下载\TEST\js\commission_xls (~daf348a1).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:49 MD5:9d1924d359b55642ca5f1d0489526277 F:\浏览器下载\TEST\js\commission_xls (~32ca4c26).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:49 MD5:daef85273c14f302331a0030a52d0ea5 F:\浏览器下载\TEST\js\commission_xls (~fb6f4234).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:49 MD5:0639cedbdda6564c6d531334c8e08659 F:\浏览器下载\TEST\js\commission_xls (~a20dd095).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:49 MD5:c432f15cfda4fd03c74995497ed7f7e5 F:\浏览器下载\TEST\js\commission_xls (~d66a46fd).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:50 MD5:7345be139c66275c8f0e426d708079a5 F:\浏览器下载\TEST\js\commission_xls (~2be5e8a9).js [Unk.Win32.Script.400709]  [删除成功]
2016-10-26 19:03:50 MD5:c3f0c84442bc5f46def4705c5bcb905d F:\浏览器下载\TEST\js\commission_xls (~f5b93f6a).js [Unk.Win32.Script.400709]  [删除成功]
---------------------

显示全部楼层 · 发表于 2016-10-26 19:05:27

卡巴清空

显示全部楼层 · 发表于 2016-10-26 21:44:36

[mw_shl_code=css,true]360杀毒扫描日志

病毒库版本：
扫描时间：2016-10-26 21:42:29
扫描用时：00:00:12
扫描类型：右键扫描
扫描文件总数：57
项目总数：57
清除项目数：57

扫描选项
----------------------
扫描所有文件：是
扫描压缩包：是
发现病毒处理方式：由用户选择处理
扫描磁盘引导区：是
扫描 Rootkit：否
使用云查杀引擎：是
使用QVM人工智能引擎：是
扫描建议修复项：是
常规引擎设置：未使用

扫描内容
----------------------
C:\Users\Admin\Desktop\TEST

白名单设置
----------------------

扫描结果
======================
高危风险项
----------------------
C:\Users\Admin\Desktop\TEST\js\0.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\405ad2f09856f718fe3fce209c9d9e59ba4e1c2e4f16d0c9385224212103bb29.js 木马程序(trojan.js.downloader.1) 已删除
C:\Users\Admin\Desktop\TEST\js\6d9b9f4c50ef2b6b12500824a568b529727e81d16214c962b8b9a4451418e278.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\85a82952fecae8acb9e47af04e6f1fdba24fee47d8903501aaae4aa605ce8a3c.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\card_cancellation_pdf 21ed32af.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\card_cancellation_pdf 9eecf002.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\card_cancellation_pdf ad941f80.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\card_cancellation_pdf af1662b5.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~23d45ae1).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~244b09be).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~2be5e8a9).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~3918e3fd).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~51bb9ad3).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~5a58f9a0).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~66a1e03f).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~858dcb29).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~a20dd095).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~a9f898f5).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~ba29c581).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~c2e012d5).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~c69a1f38).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~d66a46fd).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~daf348a1).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~ec85ed26).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~f13bdd42).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~f3fd0f56).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~f5b93f6a).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~fb6f4234).js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\f6ccbf3237e8960356aa038db80aa048659b1e270f625c9bcda37dd6a4b3bafa.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan a1d8e969.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan b48af26a.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\Self Billing Statement_308.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\tracking data ~4EF33269~.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\updated order ~5F2B541~ pdf.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\updated order ~A4B321A1~ pdf.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\updated order ~CED9114~ pdf.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\commission_xls (~32ca4c26).js virus.js.gen.95 已删除
C:\Users\Admin\Desktop\TEST\js\contract_2016-2017_pdf ~11de534a.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\contract_2016-2017_pdf ~8e9f98a0.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\contract_2016-2017_pdf ~8f6c6db2.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\contract_2016-2017_pdf ~ea43ec54.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\Isabel.js 木马程序(trojan.js.downloader.4) 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 1e21b6b9.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 209e6bd6.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 366f25af.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 52ce463a.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 659c9d0c.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 6ae42aa8.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 808d6db5.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 96cf92a4.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan b466fb82.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan c669ac11.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\tracking data ~4E529E85~.js virus.js.gen.95 已删除
C:\Users\Admin\Desktop\TEST\js\tracking data ~B391B8~.js virus.js.gen.100 已删除
C:\Users\Admin\Desktop\TEST\js\tracking data ~C23891C1~.js virus.js.gen.95 已删除
C:\Users\Admin\Desktop\TEST\js\updated order ~D0461D3~ pdf.js virus.js.gen.1 已删除
C:\Users\Admin\Desktop\TEST\js\非PE的文件.js virus.js.gen.95 已删除
[/mw_shl_code]

显示全部楼层 · 发表于 2016-10-26 21:47:37

[mw_shl_code=css,true]Huorong Security Anti-Malware Scan Log
Copyright (C) Huorong Security Lab. All rights reserved.

Scan engine version: v3.0.4.0
Signature database fingerprint: cfde066:01f45b5:2b36f71:2b36f71
Signature database timestamp: Wed Oct 26 16:07:19 2016

Scan started at: Wed Oct 26 21:45:33 2016

C:\Users\Admin\Desktop\TEST\js\0.js: TrojanDownloader/JS.Nemucod [0912ba00b80c8ba8] (killed)
C:\Users\Admin\Desktop\TEST\js\405ad2f09856f718fe3fce209c9d9e59ba4e1c2e4f16d0c9385224212103bb29.js: TrojanDownloader/JS.Agent.ad [51c316db3fd19b5b] (killed)
C:\Users\Admin\Desktop\TEST\js\6d9b9f4c50ef2b6b12500824a568b529727e81d16214c962b8b9a4451418e278.js: TrojanDownloader/JS.Nemucod [1dda875be214aa8b] (killed)
C:\Users\Admin\Desktop\TEST\js\85a82952fecae8acb9e47af04e6f1fdba24fee47d8903501aaae4aa605ce8a3c.js: TrojanDownloader/JS.Nemucod [a66258123ba6f2e3] (killed)
C:\Users\Admin\Desktop\TEST\js\card_cancellation_pdf 21ed32af.js: TrojanDownloader/JS.Nemucod.ea [68e8d2574a0be24e] (killed)
C:\Users\Admin\Desktop\TEST\js\card_cancellation_pdf 9eecf002.js: TrojanDownloader/JS.Nemucod.ea [68e8d2574a0be24e] (killed)
C:\Users\Admin\Desktop\TEST\js\card_cancellation_pdf ad941f80.js: TrojanDownloader/JS.Nemucod.ea [68e8d2574a0be24e] (killed)
C:\Users\Admin\Desktop\TEST\js\card_cancellation_pdf af1662b5.js: TrojanDownloader/JS.Nemucod.ea [68e8d2574a0be24e] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~23d45ae1).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~244b09be).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~2be5e8a9).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~32ca4c26).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~3918e3fd).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~51bb9ad3).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~5a58f9a0).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~66a1e03f).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~858dcb29).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~a20dd095).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~a9f898f5).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~ba29c581).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~c2e012d5).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~c69a1f38).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~d66a46fd).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~daf348a1).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~ec85ed26).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~f13bdd42).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~f3fd0f56).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~f5b93f6a).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\commission_xls (~fb6f4234).js: TrojanDownloader/JS.Nemucod.eg [1aa77fbf28e18791] (killed)
C:\Users\Admin\Desktop\TEST\js\contract_2016-2017_pdf ~11de534a.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\contract_2016-2017_pdf ~8e9f98a0.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\contract_2016-2017_pdf ~8f6c6db2.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\contract_2016-2017_pdf ~ea43ec54.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\f6ccbf3237e8960356aa038db80aa048659b1e270f625c9bcda37dd6a4b3bafa.js: TrojanDownloader/JS.Nemucod [237d3b12b21a8ead] (killed)
C:\Users\Admin\Desktop\TEST\js\Isabel.js: TrojanDownloader/JS.Agent [7ef9e358d56891a6] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 1e21b6b9.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 209e6bd6.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 366f25af.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 52ce463a.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 659c9d0c.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 6ae42aa8.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 808d6db5.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan 96cf92a4.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan a1d8e969.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan b466fb82.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan b48af26a.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\monthly_financial_scan c669ac11.js: TrojanDownloader/JS.Nemucod.ec [2675e613256ff18e] (killed)
C:\Users\Admin\Desktop\TEST\js\Self Billing Statement_308.js: TrojanDownloader/JS.Nemucod.dl [e34838aa3565082e] (killed)
C:\Users\Admin\Desktop\TEST\js\tracking data ~4E529E85~.js: TrojanDownloader/JS.Nemucod.eu [490f3b591add2951] (killed)
C:\Users\Admin\Desktop\TEST\js\tracking data ~4EF33269~.js: TrojanDownloader/JS.Nemucod.eu [490f3b591add2951] (killed)
C:\Users\Admin\Desktop\TEST\js\tracking data ~B391B8~.js: TrojanDownloader/JS.Nemucod.eu [490f3b591add2951] (killed)
C:\Users\Admin\Desktop\TEST\js\tracking data ~C23891C1~.js: TrojanDownloader/JS.Nemucod.eu [490f3b591add2951] (killed)
C:\Users\Admin\Desktop\TEST\js\updated order ~5F2B541~ pdf.js: TrojanDownloader/JS.Nemucod.ev [102100e7cc319835] (killed)
C:\Users\Admin\Desktop\TEST\js\updated order ~A4B321A1~ pdf.js: TrojanDownloader/JS.Nemucod.ev [102100e7cc319835] (killed)
C:\Users\Admin\Desktop\TEST\js\updated order ~CED9114~ pdf.js: TrojanDownloader/JS.Nemucod.ev [102100e7cc319835] (killed)
C:\Users\Admin\Desktop\TEST\js\updated order ~D0461D3~ pdf.js: TrojanDownloader/JS.Nemucod.ev [102100e7cc319835] (killed)
C:\Users\Admin\Desktop\TEST\js\非PE的文件.js: TrojanDownloader/JS.Nemucod [e136a505274b8897] (killed)

Scan completed at: Wed Oct 26 21:45:36 2016

Total:          57 file(s), 57 object(s)
Infected:       57 file(s), 57 object(s)
Deleted:          0 file(s), 0 failure(s)
Disinfected:    0 file(s), 0 failure(s)
Duration:       00:00:03 (3 seconds)
Ratio:          19 file(s)/s, 19 object(s)/s (1,327 KB/s, 1,327 phys.KB/s)
[/mw_shl_code]

显示全部楼层 · 发表于 2016-10-26 22:18:42

Avira Kill All

[mw_shl_code=css,true]Start of the scan: Wednesday, 26 October, 2016  22:17

Starting the file scan:

Begin scan in 'C:\Users\Ivan\Downloads\js'
C:\Users\Ivan\Downloads\js\0.js
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\Ivan\Downloads\js\405ad2f09856f718fe3fce209c9d9e59ba4e1c2e4f16d0c9385224212103bb29.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.aipinb Java script virus
C:\Users\Ivan\Downloads\js\6d9b9f4c50ef2b6b12500824a568b529727e81d16214c962b8b9a4451418e278.js
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen2 HTML script virus
C:\Users\Ivan\Downloads\js\85a82952fecae8acb9e47af04e6f1fdba24fee47d8903501aaae4aa605ce8a3c.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71699 Java script virus
C:\Users\Ivan\Downloads\js\card_cancellation_pdf 21ed32af.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.111777 Java script virus
C:\Users\Ivan\Downloads\js\card_cancellation_pdf 9eecf002.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.111777 Java script virus
C:\Users\Ivan\Downloads\js\card_cancellation_pdf ad941f80.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.111777 Java script virus
C:\Users\Ivan\Downloads\js\card_cancellation_pdf af1662b5.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.111777 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~23d45ae1).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.xxyb Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~244b09be).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~2be5e8a9).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~32ca4c26).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~3918e3fd).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.zpxu Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~51bb9ad3).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~5a58f9a0).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~66a1e03f).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~858dcb29).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~a20dd095).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~a9f898f5).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~ba29c581).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~c2e012d5).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~c69a1f38).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~d66a46fd).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~daf348a1).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~ec85ed26).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~f13bdd42).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~f3fd0f56).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~f5b93f6a).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\commission_xls (~fb6f4234).js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.71780 Java script virus
C:\Users\Ivan\Downloads\js\contract_2016-2017_pdf ~11de534a.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\contract_2016-2017_pdf ~8e9f98a0.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\contract_2016-2017_pdf ~8f6c6db2.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\contract_2016-2017_pdf ~ea43ec54.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\f6ccbf3237e8960356aa038db80aa048659b1e270f625c9bcda37dd6a4b3bafa.js
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen2 HTML script virus
C:\Users\Ivan\Downloads\js\Isabel.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.BA Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan 1e21b6b9.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan 209e6bd6.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan 366f25af.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan 52ce463a.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan 659c9d0c.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan 6ae42aa8.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan 808d6db5.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan 96cf92a4.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan a1d8e969.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan b466fb82.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan b48af26a.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\monthly_financial_scan c669ac11.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.71191 Java script virus
C:\Users\Ivan\Downloads\js\Self Billing Statement_308.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.25667 Java script virus
C:\Users\Ivan\Downloads\js\tracking data ~4E529E85~.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.DHF Java script virus
C:\Users\Ivan\Downloads\js\tracking data ~4EF33269~.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.DHF Java script virus
C:\Users\Ivan\Downloads\js\tracking data ~B391B8~.js
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\Ivan\Downloads\js\tracking data ~C23891C1~.js
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.DHF Java script virus
C:\Users\Ivan\Downloads\js\updated order ~5F2B541~ pdf.js
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\Ivan\Downloads\js\updated order ~A4B321A1~ pdf.js
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\Ivan\Downloads\js\updated order ~CED9114~ pdf.js
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\Ivan\Downloads\js\updated order ~D0461D3~ pdf.js
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\Ivan\Downloads\js\非PE的文件.js
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen2 HTML script virus[/mw_shl_code]

显示全部楼层 · 发表于 2016-10-27 09:42:58

卡巴

[mw_shl_code=css,true]0.js detected HEUR:Trojan.Script.Generic
405ad2f09856f718fe3fce209c9d9e59ba4e1c2e4f16d0c9385224212103bb29.js detected Trojan-Downloader.JS.Agent.mkt
6d9b9f4c50ef2b6b12500824a568b529727e81d16214c962b8b9a4451418e278.js detected Trojan.JS.Crypt.bd
85a82952fecae8acb9e47af04e6f1fdba24fee47d8903501aaae4aa605ce8a3c.js detected Trojan-Downloader.JS.Agent.mlc
card_cancellation_pdf 21ed32af.js detected Trojan-Downloader.JS.Agent.mfg
card_cancellation_pdf 9eecf002.js detected Trojan-Downloader.JS.Agent.mfg
card_cancellation_pdf ad941f80.js detected Trojan-Downloader.JS.Agent.mfg
card_cancellation_pdf af1662b5.js detected Trojan-Downloader.JS.Agent.mfg
commission_xls (~23d45ae1).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~244b09be).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~2be5e8a9).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~32ca4c26).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~3918e3fd).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~51bb9ad3).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~5a58f9a0).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~66a1e03f).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~858dcb29).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~a20dd095).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~a9f898f5).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~ba29c581).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~c2e012d5).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~c69a1f38).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~d66a46fd).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~daf348a1).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~ec85ed26).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~f13bdd42).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~f3fd0f56).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~f5b93f6a).js detected Trojan-Downloader.JS.Agent.mgj
commission_xls (~fb6f4234).js detected Trojan-Downloader.JS.Agent.mgj
contract_2016-2017_pdf ~11de534a.js detected Trojan.JS.Crypt.ay
contract_2016-2017_pdf ~8e9f98a0.js detected Trojan.JS.Crypt.ay
contract_2016-2017_pdf ~8f6c6db2.js detected Trojan.JS.Crypt.ay
contract_2016-2017_pdf ~ea43ec54.js detected Trojan.JS.Crypt.ay
f6ccbf3237e8960356aa038db80aa048659b1e270f625c9bcda37dd6a4b3bafa.js detected Trojan-Downloader.JS.Agent.mlg
Isabel.js detected Trojan-Downloader.JS.Agent.mdo
monthly_financial_scan 1e21b6b9.js detected Trojan-Downloader.JS.Cryptoload.aht
monthly_financial_scan 209e6bd6.js detected Trojan-Downloader.JS.Cryptoload.aht
monthly_financial_scan 366f25af.js detected Trojan-Downloader.JS.Cryptoload.aht
monthly_financial_scan 52ce463a.js detected Trojan-Downloader.JS.Cryptoload.aht
monthly_financial_scan 659c9d0c.js detected Trojan-Downloader.JS.Cryptoload.aht
monthly_financial_scan 6ae42aa8.js detected Trojan-Downloader.JS.Cryptoload.aht
monthly_financial_scan 808d6db5.js detected Trojan-Downloader.JS.Cryptoload.aht
monthly_financial_scan 96cf92a4.js detected Trojan-Downloader.JS.Cryptoload.aht
monthly_financial_scan a1d8e969.js detected Trojan-Downloader.JS.Cryptoload.aht
monthly_financial_scan b466fb82.js detected Trojan-Downloader.JS.Cryptoload.aht
monthly_financial_scan b48af26a.js detected Trojan-Downloader.JS.Cryptoload.aht
monthly_financial_scan c669ac11.js detected Trojan-Downloader.JS.Cryptoload.aht
Self Billing Statement_308.js detected Trojan-Downloader.JS.Agent.lwz
tracking data ~4E529E85~.js detected Trojan-Downloader.JS.Agent.mnc
tracking data ~4EF33269~.js detected Trojan-Downloader.JS.Agent.mnc
tracking data ~B391B8~.js detected Trojan-Downloader.JS.Agent.mnc
tracking data ~C23891C1~.js detected Trojan-Downloader.JS.Agent.mnc
updated order ~5F2B541~ pdf.js detected Trojan-Downloader.JS.Agent.mnk
updated order ~A4B321A1~ pdf.js detected Trojan-Downloader.JS.Agent.mnk
updated order ~CED9114~ pdf.js detected Trojan-Downloader.JS.Agent.mnk
updated order ~D0461D3~ pdf.js detected Trojan-Downloader.JS.Agent.mnk
非PE的文件.js detected HEUR:Trojan-Downloader.Script.Generic
[/mw_shl_code]

显示全部楼层 · 发表于 2016-10-27 11:56:36

BD下载kill

[病毒样本] 非PE病毒测试

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源