精睿样本测试（16.12.14）

linzh

540923555 发表于 2016-12-14 09:49
42没有密码，7-zip右键直接解压。。。44双击都需要密码。。。今天但凡能杀44的我觉得都是作弊

并不行啊
.7z .zip .rar都试过了，打开就提示这个：

540923555

linzh 发表于 2016-12-14 10:02
并不行啊
.7z .zip .rar都试过了，打开就提示这个：

我这里OK啊

linzh

540923555 发表于 2016-12-14 10:04
我这里OK啊

玄学...
winrar不行，莫非是什么偏门的压缩方法？

pal家族

一半的的水？？？？？？
jr呀

540923555

linzh 发表于 2016-12-14 10:10
玄学...
winrar不行，莫非是什么偏门的压缩方法？

别改后缀名

vanishtime

linzh 发表于 2016-12-14 10:00
所以这个是网页版的扫描结果嘛
话说为什KRT替换完授权文件死活显示病毒库损坏然后怎么更新也没用 ...

hosts没改回来？
没改回来好像就有可能会出现这种问题

qwe12301

Dolby123

42 可以解压 ，44 需要密码

Eset小粉絲

Avira 24x
[mw_shl_code=css,true]Start of the scan: Wednesday, 14 December, 2016  10:47

Starting the file scan:

Begin scan in 'C:\Users\Ivan\Desktop\2016.12.14'
C:\Users\Ivan\Desktop\2016.12.14\01.vir
  [DETECTION] Contains recognition pattern of the HTML/ADODB.Exploit.Gen HTML script virus
C:\Users\Ivan\Desktop\2016.12.14\05.vir
  [DETECTION] Contains code of the W2000M/Agent.47720 macro virus
C:\Users\Ivan\Desktop\2016.12.14\06.vir
    [0] Archive type: ZIP
    --> Payment Advice.exe
        [DETECTION] Is the TR/Dropper.MSIL.zajhk Trojan
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.14\08.vir
    [0] Archive type: ZIP
    --> 5533_ZIP.zip
        [1] Archive type: ZIP
      --> 5533.js
          [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.722433 Java script virus
          [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.14\09.vir
  [DETECTION] Contains recognition pattern of the PHISH/Agent.254336 phishing file/email
C:\Users\Ivan\Desktop\2016.12.14\10.vir
    [0] Archive type: LZH (+.LHA)
    --> ENQUIRY#9575.scr
        [DETECTION] Is the TR/Dropper.VB.cqyky Trojan
        [WARNING]   Infected files in archives cannot be repaired
  [WARNING]   The file could not be read!
C:\Users\Ivan\Desktop\2016.12.14\11.vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\Ivan\Desktop\2016.12.14\12.vir
  [DETECTION] Is the TR/Dropper.VB.bbnjh Trojan
C:\Users\Ivan\Desktop\2016.12.14\14.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.75014 Java script virus
Successful Cloud SDK initialization and license check.
The file 'C:\Users\Ivan\Desktop\2016.12.14\18.vir' was scanned with the Protection Cloud. SHA256 = FC3CCCC6D82E90C370243269E9B7FC302C8C4D843950E6E0F429D028EEE9820F
C:\Users\Ivan\Desktop\2016.12.14\18.vir (SHA-256: fc3cccc6d82e90c370243269e9b7fc302c8c4d843950e6e0f429d028eee9820f)
  [DETECTION] Is the TR/AD.PandaBanker.Y (Cloud) Trojan
C:\Users\Ivan\Desktop\2016.12.14\19.vir
    [0] Archive type: Base64
    --> Object
        [DETECTION] Contains code of the W2000M/Agent.7751402 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.14\21.vir
  [DETECTION] Contains virus patterns of Adware ADWARE/DealPly.iwnww
The file 'C:\Users\Ivan\Desktop\2016.12.14\24.vir' was scanned with the Protection Cloud. SHA256 = 5AB96AF79C8183CAA4C433E14B5C794DD0CD171AADEF1881863C460B8467E586
C:\Users\Ivan\Desktop\2016.12.14\24.vir (SHA-256: 5ab96af79c8183caa4c433e14b5c794dd0cd171aadef1881863c460b8467e586)
  [DETECTION] Contains suspicious code HEUR/APC (Cloud)
C:\Users\Ivan\Desktop\2016.12.14\26.vir
  [DETECTION] Is the TR/Crypt.ZPACK.zbaqx Trojan
The file 'C:\Users\Ivan\Desktop\2016.12.14\27.vir' was scanned with the Protection Cloud. SHA256 = 6A709C908F8D9EEBC197F255F3DB0C20453988B5A969E72A0B1F16B7BD53225E
C:\Users\Ivan\Desktop\2016.12.14\27.vir (SHA-256: 6a709c908f8d9eebc197f255f3db0c20453988b5a969e72a0b1f16b7bd53225e)
  [DETECTION] Is the TR/Agent.6a709c (Cloud) Trojan
C:\Users\Ivan\Desktop\2016.12.14\28.vir
  [DETECTION] Contains recognition pattern of the HTML/ExpKit.Gen6 HTML script virus
C:\Users\Ivan\Desktop\2016.12.14\29.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
The file 'C:\Users\Ivan\Desktop\2016.12.14\30.vir' was scanned with the Protection Cloud. SHA256 = F62870F70536E8B94117E05835B9D9838B0E28DAFEC422EAE74D9644A7A97DBF
C:\Users\Ivan\Desktop\2016.12.14\33.vir
  [DETECTION] Is the TR/AD.BrowserPwdStealer.Y.dxgf Trojan
C:\Users\Ivan\Desktop\2016.12.14\36.vir
  [DETECTION] Contains recognition pattern of the JS/Dldr.Locky.75011 Java script virus
C:\Users\Ivan\Desktop\2016.12.14\37.vir
    [0] Archive type: ZIP
    --> xl/vbaProject.bin
        [DETECTION] Contains code of the W2000M/Agent.27741 macro virus
        [WARNING]   Infected files in archives cannot be repaired
C:\Users\Ivan\Desktop\2016.12.14\44.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Users\Ivan\Desktop\2016.12.14\45.vir
  [DETECTION] Is the TR/Dropper.Gen Trojan
C:\Users\Ivan\Desktop\2016.12.14\46.vir
  [DETECTION] Is the TR/AD.Locky.apmcw Trojan
C:\Users\Ivan\Desktop\2016.12.14\48.vir
  [DETECTION] Is the TR/Agent.kqiqo Trojan[/mw_shl_code]

linzh

vanishtime 发表于 2016-12-14 10:21
hosts没改回来？
没改回来好像就有可能会出现这种问题

我就没改过hosts