精睿样本测试（16.10.28）

显示全部楼层 · 发表于 2016-10-28 09:12:24

地址：

http://pan.baidu.com/s/1jILjsdo 提取密码 qn19
http://www.vdisk.cn/down/index/19740482

密码：bbs.vc52.cn
数量：50

显示全部楼层 · 发表于 2016-10-28 09:20:55

【扫描信息】

开始时间:2016-10-28 09:20:03
扫描用时:00:00:03
扫描类型:指定位置杀毒
扫描引擎:管家云查杀引擎管家反病毒引擎管家系统修复引擎
扫描状态:扫描完成

【扫描结果】

扫描文件数:50
发现风险数:11
已处理风险数:11

---------------------
2016-10-28 09:20:23 MD5:1ebdb184bb30276384e59bdef373e2b7 F:\浏览器下载\2016.10.28\10.vir [Win32.Trojan.Inject.liqv]  [删除成功]
2016-10-28 09:20:23 MD5:b9d7604239140a3b6d1ad5415a1be69d F:\浏览器下载\2016.10.28\36.vir [Win32.Trojan.FalseSign.ajbu]  [删除成功]
2016-10-28 09:20:24 MD5:703360a40091b733bfc86491775291e6 F:\浏览器下载\2016.10.28\13.vir [Win32.Trojan.Reconyc.pjnh]  [删除成功]
2016-10-28 09:20:24 MD5:9f748deb3d92c867295ffcec4790868b F:\浏览器下载\2016.10.28\39.vir [Win32.Trojan.Dlder.sxev]  [删除成功]
2016-10-28 09:20:24 MD5:94af6c695df94e85cf9d8ccac0147214 F:\浏览器下载\2016.10.28\16.vir [Win32.Trojan.Filecoder.hupf]  [删除成功]
2016-10-28 09:20:24 MD5:b9b0211fc17a6232325cd740684f90a3 F:\浏览器下载\2016.10.28\46.vir [Win32.Trojan.Blocker.pdlo]  [删除成功]
2016-10-28 09:20:24 MD5:50616ab579e00bcd6664a701d8821839 F:\浏览器下载\2016.10.28\48.vir [Win32.Trojan.Reconyc.akyw]  [删除成功]
2016-10-28 09:20:25 MD5:8c14c06013d89ebbcb3b542551044262 F:\浏览器下载\2016.10.28\17.vir [Win32.Backdoor.Androm.stkg]  [删除成功]
2016-10-28 09:20:25 MD5:92be0834461b7e02eaeb4dfd4d8854a0 F:\浏览器下载\2016.10.28\25.vir [Win32.Trojan.Locky.hxqd]  [删除成功]
2016-10-28 09:20:25 MD5:164335cb76729875251dbb83d273c879 F:\浏览器下载\2016.10.28\06.vir [Win32.Trojan.Filecoder.lmal]  [删除成功]
2016-10-28 09:20:25 MD5:1e3bc6c8572dc0d6bac8ee60485ca635 F:\浏览器下载\2016.10.28\30.vir [Win32.Trojan.Locky.peqd]  [删除成功]
---------------------

显示全部楼层 · 发表于 2016-10-28 09:21:55

ESET-NOD32 ess 8 [v14348/20161027]

Total kill 34x (Fix 2x)

解压 kill 29x (Fix 2x)

[mw_shl_code=css,true]2016/10/28 9:18:06 文件系统实时防护文件 Z:\TEMP\2016.10.28\50.vir VBS/TrojanDownloader.Agent.OOH 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 951B2767C6C5DAEAC9C3A4FA23C3F62ACBEC6908 2016/10/28 9:18:06
2016/10/28 9:18:06 文件系统实时防护文件 Z:\TEMP\2016.10.28\49.vir VBS/TrojanDownloader.Agent.OOH 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). D748BCD9E28AEA328EF9390FA0709C618E6302B5 2016/10/28 9:18:05
2016/10/28 9:18:05 文件系统实时防护文件 Z:\TEMP\2016.10.28\48.vir NSIS/Injector.HT 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe.
2016/10/28 9:18:05 文件系统实时防护文件 Z:\TEMP\2016.10.28\47.vir Win32/Agent.YJZ 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). E7D50D9E7220F81DB7A3F6A813A9317AB1F97FDF 2016/10/28 9:18:04
2016/10/28 9:18:04 文件系统实时防护文件 Z:\TEMP\2016.10.28\46.vir BAT/RA-based.DO 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe.
2016/10/28 9:18:04 文件系统实时防护文件 Z:\TEMP\2016.10.28\44.vir VBS/TrojanDownloader.Agent.OOH 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). D993B61E106CEF26390BA65B606D2D4FD6CABC5E 2016/10/28 9:18:03
2016/10/28 9:18:03 文件系统实时防护文件 Z:\TEMP\2016.10.28\42.vir MSIL/Packed.Confuser.J 可疑应用程序的变种通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 65B7428A8E7A7C460B277DD392837E05B2284266 2016/10/28 9:18:03
2016/10/28 9:18:03 文件系统实时防护文件 Z:\TEMP\2016.10.28\40.vir JS/TrojanDownloader.Agent.PCM 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). B5C9188E72DDC08F05A4C45CB52FCDFD50644946 2016/10/28 9:18:02
2016/10/28 9:18:02 文件系统实时防护文件 Z:\TEMP\2016.10.28\39.vir Win32/Meciv.H 特洛伊木马的变种通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). CD30D73326074A92B9E2A1D63E1E9F1168E92ABF 2016/10/28 9:18:02
2016/10/28 9:18:02 文件系统实时防护文件 Z:\TEMP\2016.10.28\36.vir Win32/Toolbar.MyWebSearch.BA 潜在的不受欢迎应用程序已删除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe.
2016/10/28 9:18:01 文件系统实时防护文件 Z:\TEMP\2016.10.28\35.vir JS/TrojanDownloader.Nemucod.BHE 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 361D56BD7E1E6A776A734B79C2B147E8FA36E52B 2016/10/28 9:18:01
2016/10/28 9:18:01 文件系统实时防护文件 Z:\TEMP\2016.10.28\31.vir SWF/Exploit.ExKit.AS 特洛伊木马已删除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe.
2016/10/28 9:18:00 文件系统实时防护文件 Z:\TEMP\2016.10.28\30.vir Win32/Kryptik.FIKB 特洛伊木马的变种通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 61C56B84690033C29BDB926DF12AAA5319CA0E69 2016/10/28 9:18:00
2016/10/28 9:18:00 文件系统实时防护文件 Z:\TEMP\2016.10.28\28.vir VBS/TrojanDownloader.Banload.BH 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 25B77A477CF8445798EE7861968F1AFC4F108F68 2016/10/28 9:17:59
2016/10/28 9:17:59 文件系统实时防护文件 Z:\TEMP\2016.10.28\26.vir JS/TrojanDownloader.Agent.PCM 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 64645A86281E79CF13012F80D3D877FDA295FE5A 2016/10/28 9:17:59
2016/10/28 9:17:59 文件系统实时防护文件 Z:\TEMP\2016.10.28\25.vir Win32/Kryptik.FIKB 特洛伊木马的变种通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). E9890556E8DAB52D48CF742A113261F084CDD275 2016/10/28 9:17:58
2016/10/28 9:17:58 文件系统实时防护文件 Z:\TEMP\2016.10.28\23.vir JS/Kryptik.BBQ 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 5AC4A10CA26CC6B14708760A9220E4CABFAAEA59 2016/10/28 9:17:58
2016/10/28 9:17:58 文件系统实时防护文件 Z:\TEMP\2016.10.28\20.vir SWF/Exploit.Agent.NF 特洛伊木马已删除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe.
2016/10/28 9:17:57 文件系统实时防护文件 Z:\TEMP\2016.10.28\17.vir Win32/PSW.Papras.EJ 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 6344FE4839C726F78E174A16AEDE7D7700798EE0 2016/10/28 9:17:57
2016/10/28 9:17:57 文件系统实时防护文件 Z:\TEMP\2016.10.28\16.vir Win32/Filecoder.Locky.D 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 642CB57ADCFCA7E167DC54E461C727D5637D07BF 2016/10/28 9:17:57
2016/10/28 9:17:57 文件系统实时防护文件 Z:\TEMP\2016.10.28\15.vir VBA/TrojanDropper.Agent.RQ 特洛伊木马已清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 5BAB54812CBD5CE99457E3C39E3344E96042953B 2016/10/28 9:17:56
2016/10/28 9:17:56 文件系统实时防护文件 Z:\TEMP\2016.10.28\13.vir NSIS/Injector.HT 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe.
2016/10/28 9:17:56 文件系统实时防护文件 Z:\TEMP\2016.10.28\12.vir VBA/TrojanDownloader.Agent.BXX 特洛伊木马已清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). F09D30A16C389B36DE11CC2B939B0D54B79E6799 2016/10/28 9:17:56
2016/10/28 9:17:56 文件系统实时防护文件 Z:\TEMP\2016.10.28\11.vir VBS/Obfuscated.G 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe.
2016/10/28 9:17:56 文件系统实时防护文件 Z:\TEMP\2016.10.28\10.vir Win32/TrojanDownloader.Agent.CFH 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 638A638370E16F6B75005797E90205A1DF672BE9 2016/10/28 9:17:55
2016/10/28 9:17:55 文件系统实时防护文件 Z:\TEMP\2016.10.28\09.vir VBS/TrojanDownloader.Agent.OOH 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 8BF63BFC254582030A5597207CFA6368A3AF8037 2016/10/28 9:17:55
2016/10/28 9:17:53 文件系统实时防护文件 Z:\TEMP\2016.10.28\06.vir Win32/Filecoder.Crysis.H 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). DF34B4C11A97179F8C1B1BEAA78AFC7774B8D635 2016/10/28 9:17:52
2016/10/28 9:17:52 文件系统实时防护文件 Z:\TEMP\2016.10.28\03.vir Win32/GenKryptik.HYM 特洛伊木马的变种通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). C92C8955163A661647C806D4B6DFC831E02A841C 2016/10/28 9:17:52
2016/10/28 9:17:52 文件系统实时防护文件 Z:\TEMP\2016.10.28\02.vir VBS/TrojanDownloader.Agent.OOH 特洛伊木马通过删除清除 PC 在应用程序新建的文件上发生事件: D:\Program Files\7-Zip\7zG.exe (7B2B7BD690776565686AAD9757F184B43F0673AC). 549D2BCA574B57D1B6AC823D13383CD3600ADC06 2016/10/28 9:17:51[/mw_shl_code]

右键二扫 kill 5x (Fix 0x)

[mw_shl_code=css,true]正在扫描日志
病毒库版本: 14348 (20161027)
日期: 2016/10/28  时间: 9:19:42
已扫描的磁盘、文件夹和文件: Z:\TEMP\2016.10.28
Z:\TEMP\2016.10.28\18.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BXT 特洛伊木马 - 扫描完成后再选择处理方式
Z:\TEMP\2016.10.28\21.vir > ZIP > sgahuetrwa/rwdfshsdsadqwq.class - Java/TrojanDownloader.Agent.NNT 特洛伊木马的变种 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regda.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdc.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regds.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdt.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdk.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdj.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdq.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdf.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdp.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdy.class - Java/Adwind.ZU 特洛伊木马的变种 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > Lister.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdo.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdb.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdg.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdn.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdx.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdv.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdl.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdz.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdw.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdh.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regde.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\24.vir > ZIP > regdi.class - Java/Adwind.AAA 特洛伊木马 - 通过删除清除 [1]
Z:\TEMP\2016.10.28\29.vir > ACE > INVOICE-68684364858_pdf.exe - Win32/Kryptik.FIJR 特洛伊木马的变种 - 扫描完成后再选择处理方式
Z:\TEMP\2016.10.28\29.vir > ACE >  - 压缩文件已损坏
Z:\TEMP\2016.10.28\32.vir > OLEDATA > Экспортированный документ.dос .js - Win32/Filecoder.FH 特洛伊木马 - 已删除
Z:\TEMP\2016.10.28\38.vir > DOTNETREACTOR - 不支持的选项
Z:\TEMP\2016.10.28\41.vir > BASE64 > 41.vir - 正常
Z:\TEMP\2016.10.28\18.vir > ZIP > word/vbaProject.bin - VBA/TrojanDownloader.Agent.BXT 特洛伊木马 - 已删除
Z:\TEMP\2016.10.28\29.vir > ACE > INVOICE-68684364858_pdf.exe - Win32/Kryptik.FIJR 特洛伊木马的变种 - 已删除
Z:\TEMP\2016.10.28\29.vir > ACE >  - 压缩文件已损坏
已扫描的对象数: 69
发现的威胁数: 27
已清除对象数: 27
完成时间: 9:19:57  总扫描时间: 15 秒 (00:00:15)

备注:
[1] 由于对象中仅包含病毒主体，因此已被删除。[/mw_shl_code]

显示全部楼层 · 发表于 2016-10-28 09:29:11

ESET NOD32 ESS 10 v14348 2016 10 27

总计：34

清除：29

跟楼上ESS8完全一样

显示全部楼层 · 发表于 2016-10-28 09:57:44

360杀毒扫描日志

病毒库版本：2016-10-26 16:18
扫描时间：2016-10-28 09:56:15
扫描用时：00:00:10
扫描类型：右键扫描
扫描文件总数：50
项目总数：28
清除项目数：28

扫描选项
----------------------
扫描所有文件：否
扫描压缩包：否
发现病毒处理方式：由用户选择处理
扫描磁盘引导区：是
扫描 Rootkit：否
使用云查杀引擎：是
使用QVM人工智能引擎：是
扫描建议修复项：是
常规引擎设置：Avira(小红伞)

扫描内容
----------------------
C:\Users\chy\Desktop\chrome\2016.10.28

白名单设置
----------------------

扫描结果
======================
高危风险项
----------------------
C:\Users\chy\Desktop\chrome\2016.10.28\02.vir virus.vbs.gen.1 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\09.vir virus.vbs.gen.1 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\11.vir virus.js.gen.1 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\15.vir virus.office.gen.90 已修复
C:\Users\chy\Desktop\chrome\2016.10.28\23.vir virus.js.gen.95 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\26.vir virus.js.gen.70 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\28.vir virus.vbs.down.b 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\33.vir virus.js.gen.95 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\40.vir virus.js.gen.70 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\49.vir virus.vbs.gen.1 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\50.vir virus.vbs.gen.1 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\44.vir virus.vbs.gen.1 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\04.vir HEUR/QVM05.1.C6FA.Malware.Gen 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\05.vir HEUR/QVM25.0.C6FA.Malware.Gen 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\07.vir 感染型病毒(Win32/Trojan.a36) 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\17.vir 感染型病毒(Win32/Trojan.a3c) 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\16.vir 感染型病毒(Win32/Trojan.f06) 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\03.vir 感染型病毒(Win32/Trojan.Dropper.7e5) 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\25.vir 感染型病毒(Win32/Trojan.Ransom.6ae) 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\30.vir HEUR/QVM39.1.C6BB.Malware.Gen 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\34.vir 感染型病毒(Win32/Trojan.6c9) 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\36.vir HEUR/QVM42.1.C6FA.Malware.Gen 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\39.vir HEUR/QVM07.1.C6BB.Malware.Gen 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\46.vir 感染型病毒(Win32/Trojan.052) 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\47.vir 感染型病毒(Win32/Trojan.562) 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\06.vir TR.Crypt.ZPACK.bgmzo 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\42.vir TR.Dropper.Gen 已删除
C:\Users\chy\Desktop\chrome\2016.10.28\10.vir HEUR/QVM03.0.C6FA.Malware.Gen 已删除

显示全部楼层 · 发表于 2016-10-28 10:02:23

爱神无敌发表于 2016-10-28 09:29
ESET NOD32 ESS 10 v14348 2016 10 27

总计：34

肯定的，病毒库一样，组件（版本）不同而已。

显示全部楼层 · 发表于 2016-10-28 10:04:27

fireherman 发表于 2016-10-28 10:02
肯定的，病毒库一样，组件（版本）不同而已。

你上报了吗？我没上报。

显示全部楼层 · 发表于 2016-10-28 10:10:00

Avira 28x 最近红伞忙着改版，病毒库没频率更新。。。

[mw_shl_code=css,true]Start of the scan: Friday, 28 October, 2016  10:06

Starting the file scan:

Begin scan in 'C:\Users\Ivan\Desktop\2016.10.28'
Successful Cloud SDK initialization and license check.
The file 'C:\Users\Ivan\Desktop\2016.10.28\01.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = 3A19B720582270297D04006D6307837BB303C5DF006B69083D2ADE6EFFF5A779
C:\Users\Ivan\Desktop\2016.10.28\01.vir (SHA-256: 3a19b720582270297d04006d6307837bb303c5df006b69083d2ade6efff5a779)
  [INFO]    The file 'C:\Users\Ivan\Desktop\2016.10.28\01.vir' has been uploaded to the Protection Cloud and analyzed.
C:\Users\Ivan\Desktop\2016.10.28\02.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.VALZ Java script virus
C:\Users\Ivan\Desktop\2016.10.28\03.vir
  [DETECTION] Is the TR/Dropper.VB.vebcz Trojan
The file 'C:\Users\Ivan\Desktop\2016.10.28\04.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = 2EB73D159B8FE80837783058A7E3ABC023B53E9758ED6F1ED48B1C1F661D9755
C:\Users\Ivan\Desktop\2016.10.28\04.vir (SHA-256: 2eb73d159b8fe80837783058a7e3abc023b53e9758ed6f1ed48b1c1f661d9755)
  [DETECTION] Contains suspicious code HEUR/APC (Cloud)
  [INFO]    The file 'C:\Users\Ivan\Desktop\2016.10.28\04.vir' has been uploaded to the Protection Cloud and analyzed.
The file 'C:\Users\Ivan\Desktop\2016.10.28\05.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = 242A331D5C12F14A662F0518DD230C651A4638433683BE81B2D40AF7E857076D
C:\Users\Ivan\Desktop\2016.10.28\05.vir (SHA-256: 242a331d5c12f14a662f0518dd230c651a4638433683be81b2d40af7e857076d)
  [DETECTION] Contains suspicious code HEUR/APC (Cloud)
  [INFO]    The file 'C:\Users\Ivan\Desktop\2016.10.28\05.vir' has been uploaded to the Protection Cloud and analyzed.
C:\Users\Ivan\Desktop\2016.10.28\06.vir
  [DETECTION] Is the TR/Crypt.ZPACK.bgmzo Trojan
C:\Users\Ivan\Desktop\2016.10.28\07.vir
  [DETECTION] Is the TR/Rogue.hghxu Trojan
C:\Users\Ivan\Desktop\2016.10.28\09.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.VALZ Java script virus
The file 'C:\Users\Ivan\Desktop\2016.10.28\10.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = 12559C42CA92E49EC1BFB201B0C9864FD553810451061C5A05ABBB9CBCF72B84
C:\Users\Ivan\Desktop\2016.10.28\10.vir (SHA-256: 12559c42ca92e49ec1bfb201b0c9864fd553810451061c5a05abbb9cbcf72b84)
  [DETECTION] Is the TR/Dropper.VB.Gen4 (Cloud) Trojan
  [INFO]    The file 'C:\Users\Ivan\Desktop\2016.10.28\10.vir' has been uploaded to the Protection Cloud and analyzed.
C:\Users\Ivan\Desktop\2016.10.28\12.vir
  [DETECTION] Contains code of the W2000M/Agent.44684012 macro virus
C:\Users\Ivan\Desktop\2016.10.28\15.vir
  [DETECTION] Contains code of the W2000M/Agent.40111 macro virus
C:\Users\Ivan\Desktop\2016.10.28\16.vir
  [DETECTION] Is the TR/Crypt.Xpack.tatgz Trojan
C:\Users\Ivan\Desktop\2016.10.28\17.vir
  [DETECTION] Is the TR/Crypt.ZPACK.ushqs Trojan
C:\Users\Ivan\Desktop\2016.10.28\18.vir
[0] Archive type: ZIP
--> word/vbaProject.bin
      [DETECTION] Contains code of the W2000M/Agent.48702020 macro virus
      [WARNING] Infected files in archives cannot be repaired
The file 'C:\Users\Ivan\Desktop\2016.10.28\19.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = 1119BBEC091AF689C4E4248F047807E3F7A97BD7C890A8FB61D4BF8F36087894
C:\Users\Ivan\Desktop\2016.10.28\19.vir (SHA-256: 1119bbec091af689c4e4248f047807e3f7a97bd7c890a8fb61d4bf8f36087894)
  [INFO]    The file 'C:\Users\Ivan\Desktop\2016.10.28\19.vir' has been uploaded to the Protection Cloud and analyzed.
C:\Users\Ivan\Desktop\2016.10.28\21.vir
[0] Archive type: ZIP
--> sgahuetrwa/rwdfshsdsadqwq.class
      [DETECTION] Contains recognition pattern of the EXP/JAVA.Adwind.BV.Gen exploit
      [WARNING] Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.10.28\23.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.VALY Java script virus
C:\Users\Ivan\Desktop\2016.10.28\24.vir
[0] Archive type: ZIP
--> regdy.class
      [DETECTION] Contains recognition pattern of the JAVA/Adwind.AF Java virus
      [WARNING] Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.10.28\25.vir
  [DETECTION] Is the TR/Agent.jkwlm Trojan
C:\Users\Ivan\Desktop\2016.10.28\29.vir
[0] Archive type: ACE
--> INVOICE-68684364858_pdf.exe
      [DETECTION] Is the TR/Crypt.ZPACK.Gen2 Trojan
      [WARNING] Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.10.28\30.vir
  [DETECTION] Is the TR/Agent.zeraz Trojan
The file 'C:\Users\Ivan\Desktop\2016.10.28\34.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = 7AD61965CBAE8D8CF306E7B83C3C0263DC51A60A27A700BFAF8404A1AF52D9B6
C:\Users\Ivan\Desktop\2016.10.28\34.vir (SHA-256: 7ad61965cbae8d8cf306e7b83c3c0263dc51a60a27a700bfaf8404a1af52d9b6)
  [DETECTION] Contains suspicious code HEUR/APC (Cloud)
  [INFO]    The file 'C:\Users\Ivan\Desktop\2016.10.28\34.vir' has been uploaded to the Protection Cloud and analyzed.
C:\Users\Ivan\Desktop\2016.10.28\36.vir
[0] Archive type: NSIS
--> Object
      [DETECTION] Contains patterns of software PUA/MyWebSearch.ME.1
      [WARNING] Infected files in archives cannot be repaired
The file 'C:\Users\Ivan\Desktop\2016.10.28\38.vir' has been uploaded to the Protection Cloud and analyzed. SHA256 = A4261AB37E03622039E5FD2B46C40C5126CE958EC91A2970F478F9F8EFB16BB2
C:\Users\Ivan\Desktop\2016.10.28\38.vir (SHA-256: a4261ab37e03622039e5fd2b46c40c5126ce958ec91a2970f478f9f8efb16bb2)
  [INFO]    The file 'C:\Users\Ivan\Desktop\2016.10.28\38.vir' has been uploaded to the Protection Cloud and analyzed.
C:\Users\Ivan\Desktop\2016.10.28\39.vir
  [DETECTION] Is the TR/Meciv.fsscb Trojan
C:\Users\Ivan\Desktop\2016.10.28\42.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Users\Ivan\Desktop\2016.10.28\44.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.VALZ Java script virus
C:\Users\Ivan\Desktop\2016.10.28\46.vir
  [DETECTION] Is the TR/Agent.uarbl Trojan
C:\Users\Ivan\Desktop\2016.10.28\47.vir
  [DETECTION] Is the TR/Fosniw.jkmjy Trojan
C:\Users\Ivan\Desktop\2016.10.28\49.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.VALZ Java script virus
C:\Users\Ivan\Desktop\2016.10.28\50.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.VALZ Java script virus[/mw_shl_code]

显示全部楼层 · 发表于 2016-10-28 10:15:04

爱神无敌发表于 2016-10-28 10:04
你上报了吗？我没上报。

还没，你上报。

显示全部楼层 · 发表于 2016-10-28 10:21:27

卡巴

[mw_shl_code=css,true]2016-10-28 10:20:02 C:\Users\XuanXia\Desktop\2016.10.28\01.vir ok
2016-10-28 10:20:03 C:\Users\XuanXia\Desktop\2016.10.28\02.vir detected Trojan-Downloader.JS.Agent.mwp
2016-10-28 10:20:04 C:\Users\XuanXia\Desktop\2016.10.28\03.vir detected Backdoor.Win32.Tofsee.ywc
2016-10-28 10:20:04 C:\Users\XuanXia\Desktop\2016.10.28\04.vir ok
2016-10-28 10:20:05 C:\Users\XuanXia\Desktop\2016.10.28\05.vir ok
2016-10-28 10:20:06 C:\Users\XuanXia\Desktop\2016.10.28\06.vir ok
2016-10-28 10:20:08 C:\Users\XuanXia\Desktop\2016.10.28\07.vir ok
2016-10-28 10:20:08 C:\Users\XuanXia\Desktop\2016.10.28\08.vir ok
2016-10-28 10:20:08 C:\Users\XuanXia\Desktop\2016.10.28\09.vir detected Trojan-Downloader.JS.Agent.mwp
2016-10-28 10:20:09 C:\Users\XuanXia\Desktop\2016.10.28\10.vir detected Trojan.Win32.Inject.wmwi
2016-10-28 10:20:10 C:\Users\XuanXia\Desktop\2016.10.28\11.vir detected HEUR:Trojan-Downloader.Script.Generic
2016-10-28 10:20:11 C:\Users\XuanXia\Desktop\2016.10.28\12.vir detected Trojan-Downloader.MSWord.Agent.asdftx
2016-10-28 10:20:11 C:\Users\XuanXia\Desktop\2016.10.28\13.vir ok
2016-10-28 10:20:11 C:\Users\XuanXia\Desktop\2016.10.28\14.vir ok
2016-10-28 10:20:12 C:\Users\XuanXia\Desktop\2016.10.28\15.vir detected Trojan-Downloader.MSWord.Agent.atg
2016-10-28 10:20:12 C:\Users\XuanXia\Desktop\2016.10.28\16.vir ok
2016-10-28 10:20:12 C:\Users\XuanXia\Desktop\2016.10.28\17.vir detected Backdoor.Win32.Androm.ldnx
2016-10-28 10:20:13 C:\Users\XuanXia\Desktop\2016.10.28\18.vir detected Trojan-Downloader.VBS.Agent.cct
2016-10-28 10:20:13 C:\Users\XuanXia\Desktop\2016.10.28\19.vir ok
2016-10-28 10:20:13 C:\Users\XuanXia\Desktop\2016.10.28\20.vir ok
2016-10-28 10:20:13 C:\Users\XuanXia\Desktop\2016.10.28\21.vir ok
2016-10-28 10:20:13 C:\Users\XuanXia\Desktop\2016.10.28\22.vir ok
2016-10-28 10:20:14 C:\Users\XuanXia\Desktop\2016.10.28\23.vir detected HEUR:Trojan-Downloader.Script.Generic
2016-10-28 10:20:15 C:\Users\XuanXia\Desktop\2016.10.28\24.vir detected HEUR:Trojan.Java.Agent.gen
2016-10-28 10:20:15 C:\Users\XuanXia\Desktop\2016.10.28\25.vir detected Trojan-Ransom.Win32.Locky.crv
2016-10-28 10:20:17 C:\Users\XuanXia\Desktop\2016.10.28\26.vir detected HEUR:Trojan.Script.Agent.gen
2016-10-28 10:20:17 C:\Users\XuanXia\Desktop\2016.10.28\27.vir ok
2016-10-28 10:20:17 C:\Users\XuanXia\Desktop\2016.10.28\28.vir detected HEUR:Trojan.Script.Agent.gen
2016-10-28 10:20:18 C:\Users\XuanXia\Desktop\2016.10.28\29.vir detected Trojan.Win32.Droma.aaie
2016-10-28 10:20:18 C:\Users\XuanXia\Desktop\2016.10.28\30.vir detected Trojan-Ransom.Win32.Locky.crv
2016-10-28 10:20:19 C:\Users\XuanXia\Desktop\2016.10.28\31.vir detected HEUR:Exploit.SWF.Agent.gen
2016-10-28 10:20:19 C:\Users\XuanXia\Desktop\2016.10.28\32.vir detected Trojan-Ransom.JS.Agent.da
2016-10-28 10:20:19 C:\Users\XuanXia\Desktop\2016.10.28\33.vir detected Trojan-Downloader.JS.Cryptoload.apt
2016-10-28 10:20:20 C:\Users\XuanXia\Desktop\2016.10.28\34.vir ok
2016-10-28 10:20:20 C:\Users\XuanXia\Desktop\2016.10.28\35.vir detected HEUR:Trojan-Downloader.Script.Generic
2016-10-28 10:20:21 C:\Users\XuanXia\Desktop\2016.10.28\36.vir detected not-a-virus:HEUR:WebToolbar.Win32.Agent.gen
2016-10-28 10:20:21 C:\Users\XuanXia\Desktop\2016.10.28\37.vir ok
2016-10-28 10:20:21 C:\Users\XuanXia\Desktop\2016.10.28\38.vir ok
2016-10-28 10:20:22 C:\Users\XuanXia\Desktop\2016.10.28\39.vir ok
2016-10-28 10:20:23 C:\Users\XuanXia\Desktop\2016.10.28\40.vir detected HEUR:Trojan.Script.Agent.gen
2016-10-28 10:20:23 C:\Users\XuanXia\Desktop\2016.10.28\41.vir ok
2016-10-28 10:20:23 C:\Users\XuanXia\Desktop\2016.10.28\42.vir ok
2016-10-28 10:20:23 C:\Users\XuanXia\Desktop\2016.10.28\43.vir ok
2016-10-28 10:20:23 C:\Users\XuanXia\Desktop\2016.10.28\44.vir detected Trojan-Downloader.JS.Agent.mwp
2016-10-28 10:20:24 C:\Users\XuanXia\Desktop\2016.10.28\45.vir ok
2016-10-28 10:20:24 C:\Users\XuanXia\Desktop\2016.10.28\46.vir ok
2016-10-28 10:20:24 C:\Users\XuanXia\Desktop\2016.10.28\47.vir detected Backdoor.Win32.Agent.dozt
2016-10-28 10:20:25 C:\Users\XuanXia\Desktop\2016.10.28\48.vir ok
2016-10-28 10:20:25 C:\Users\XuanXia\Desktop\2016.10.28\49.vir detected Trojan-Downloader.JS.Agent.mwp
2016-10-28 10:20:25 C:\Users\XuanXia\Desktop\2016.10.28\50.vir detected Trojan-Downloader.JS.Agent.mwp
; --- Statistics ---
; Time Start: 2016-10-28 10:20:01
; Time Finish: 2016-10-28 10:20:25
; Completion: 100%
; Processed objects: 50
; Total detected: 26
; Detected exact: 17
; Errors: 0
; ------------------
[/mw_shl_code]

[病毒样本] 精睿样本测试（16.10.28）

本帖子中包含更多资源