aa1165a337833ad2afabab2105688f964b672b19

360Tencent

https://blogs.forcepoint.com/sec ... boss-and-sillygoose

链接: https://pan.baidu.com/s/1nvudOQ9 密码: 4zdt

欧阳宣

bd 21x

[mw_shl_code=css,true]D:\Virus\22x\1d3ff6cdda68c63d254df70cef0dc9adfa414200f953499c40cbc75bf3936233 Gen:Suspicious.Cloud.1 Deleted
D:\Virus\22x\72aea0644729cadfe668751587a1e6384c49c398580feecefc51385ecc018631=>(objdata)=>word/document.xml Exploit.CVE-2015-1641.Gen Deleted
D:\Virus\22x\87d743e1876dcb9e13ed8d1dc57125c7c0912b49aa9f02e2f3a45d0e11294317 Gen:Variant.Strictor.56278 Deleted
D:\Virus\22x\033258861970b3addbe339e9f2c0fde210898896f31dce5d5f7b1d17d19c23eb=>(RAR Sfx o)=>ChoiceGuard.dll Gen:Variant.Graftor.303265 Moved to Quarantine
D:\Virus\22x\a3c8d6eaa6239112b1e881f18ea78f58949150fbf051e599b5d6f81e0d2e31c9 Gen:Variant.Graftor.303265 Deleted
D:\Virus\22x\a4ead13d2cb28c4443f023b5b87ec3bd641fb3ad590ca53ab41afefce9cbeccf Gen:Variant.Strictor.68401 Deleted
D:\Virus\22x\af34e0b3ecbe1f6aeabd5d74ba48a322f401d348de8a3345fe3e18a62d6d7a93=>(RAR Sfx o)=>ChoiceGuard.dll Gen:Variant.Graftor.303378 Moved to Quarantine
D:\Virus\22x\4f3275de51c2d16e8df829d020eae4f2450c9b3afd3b3099d615278e29a00479 Gen:Variant.Graftor.303378 Deleted
D:\Virus\22x\3d85b4f923e2201a21a3e27e86ea6a2d3fda9778899568e7c505de5a4b70653e Trojan.GenericKD.3610086 Deleted
D:\Virus\22x\72aea0644729cadfe668751587a1e6384c49c398580feecefc51385ecc018631=>(objdata)  Moved to Quarantine
D:\Virus\22x\1bf0dcf093a04a86c6679f99b6ec5293241b2a16b4749b5ff5af8e11e96ba2a9 Gen:Variant.Graftor.303265 Deleted
D:\Virus\22x\0ec6c4342cf0cae5ba59a216ed074ac0574f04763ce4b5b1944daad9513491b6 Trojan.GenericKD.4116472 Deleted
D:\Virus\22x\c89fb4332fef7367543c6457d3a6bfbd4d4f6ad7bea915baefc0489ad0c2a873=>New folder.exe Gen:Variant.Strictor.68401 Moved to Quarantine
D:\Virus\22x\87496d1e934706d49b6a03b034f999c61772212b13e901f18453f7f8111defca Gen:Variant.Graftor.303378 Deleted
D:\Virus\22x\f938e87917ca8885001e922f43ef0fe5e67ff390e951a934254ddac808dca1a5 Gen:Variant.Graftor.273764 Deleted
D:\Virus\22x\0dec4b854bcbf15bda79a1a3d9f322d8519a3273155ad18d3b7ce7d36dfe9e85 Trojan.GenericKD.3737248 Deleted
D:\Virus\22x\4d22a45690d144ad29aaa06104085293e489ad319ba033ca0bd46759b3d5e42e Trojan.GenericKD.3737248 Deleted
D:\Virus\22x\72aea0644729cadfe668751587a1e6384c49c398580feecefc51385ecc018631=>(objdata)=>(otkloadr.WRLoader.1) Trojan.RTF-COM-Dropper.Gen Moved to Quarantine
D:\Virus\22x\72aea0644729cadfe668751587a1e6384c49c398580feecefc51385ecc018631=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/document.xml Exploit.CVE-2015-1641.Gen Deleted
D:\Virus\22x\62ba328ada4ac69ac2ec9f9f101d16d5eb72b648c6bd078f735e17c8fc6b2829 Gen:Variant.Graftor.303378 Deleted
D:\Virus\22x\72aea0644729cadfe668751587a1e6384c49c398580feecefc51385ecc018631=>(objdata)=>(Embedded DocFile g)=>word/document.xml Exploit.CVE-2015-1641.Gen Deleted
D:\Virus\22x\86d414a51e946a9a5d8ce411f0f6b54154d7848c046cd58464b49733effdc47a Gen:Variant.Graftor.303378 Deleted
D:\Virus\22x\72aea0644729cadfe668751587a1e6384c49c398580feecefc51385ecc018631=>(objdata)=>(Word.Document.12)=>(Package)=>word/document.xml Exploit.CVE-2015-1641.Gen Deleted
D:\Virus\22x\72aea0644729cadfe668751587a1e6384c49c398580feecefc51385ecc018631=>(objdata)=>(Word.Document.12)=>word/document.xml Exploit.CVE-2015-1641.Gen Deleted
D:\Virus\22x\ef549a3688f930bf3c5d49d95ed3d1de51be79af10f9d941892d85b25fabd795 Gen:Variant.Graftor.273764 Deleted
D:\Virus\22x\dd4a29b9ad4644350878b4c073661481a64762c4be4a9aa20ff7b71453470cce Gen:Variant.Graftor.303378 Deleted
D:\Virus\22x\e9d086bf3e1e657f847a2364ee1da56db50bfeb291a35f1f92f3b2a9125f6f5e Gen:Variant.Graftor.303378 Deleted[/mw_shl_code]

Eset小粉絲

Avira 20x

学雷锋做人

360安全卫士 18个

非可执行跳过双击测试

心醉咖啡

火绒扫描全miss

dongwenqi

卡巴杀21个，剩余1个上报

小难民

[mw_shl_code=css,true]日志
正在扫描日志
病毒库版本: 14852 (20170130)
日期: 2017/1/30  时间: 19:23:02
已扫描的磁盘、文件夹和文件: C:\Users\Silence\Downloads\22x
C:\Users\Silence\Downloads\22x\033258861970b3addbe339e9f2c0fde210898896f31dce5d5f7b1d17d19c23eb - Win32/Korplug.ID 特洛伊木马
C:\Users\Silence\Downloads\22x\0dec4b854bcbf15bda79a1a3d9f322d8519a3273155ad18d3b7ce7d36dfe9e85 - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\0ec6c4342cf0cae5ba59a216ed074ac0574f04763ce4b5b1944daad9513491b6 - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\1bf0dcf093a04a86c6679f99b6ec5293241b2a16b4749b5ff5af8e11e96ba2a9 - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\1d3ff6cdda68c63d254df70cef0dc9adfa414200f953499c40cbc75bf3936233 - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\4d22a45690d144ad29aaa06104085293e489ad319ba033ca0bd46759b3d5e42e - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\4f3275de51c2d16e8df829d020eae4f2450c9b3afd3b3099d615278e29a00479 - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\62ba328ada4ac69ac2ec9f9f101d16d5eb72b648c6bd078f735e17c8fc6b2829 - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\72aea0644729cadfe668751587a1e6384c49c398580feecefc51385ecc018631 - Win32/Exploit.Agent.NTD 特洛伊木马
C:\Users\Silence\Downloads\22x\86d414a51e946a9a5d8ce411f0f6b54154d7848c046cd58464b49733effdc47a - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\87496d1e934706d49b6a03b034f999c61772212b13e901f18453f7f8111defca - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\87d743e1876dcb9e13ed8d1dc57125c7c0912b49aa9f02e2f3a45d0e11294317 - Win32/Korplug.ID 特洛伊木马
C:\Users\Silence\Downloads\22x\a3c8d6eaa6239112b1e881f18ea78f58949150fbf051e599b5d6f81e0d2e31c9 - Win32/Korplug.ID 特洛伊木马
C:\Users\Silence\Downloads\22x\a4ead13d2cb28c4443f023b5b87ec3bd641fb3ad590ca53ab41afefce9cbeccf - Win32/Agent.NWQ 蠕虫
C:\Users\Silence\Downloads\22x\af34e0b3ecbe1f6aeabd5d74ba48a322f401d348de8a3345fe3e18a62d6d7a93 > WINRARSFX > ChoiceGuard.dll - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\c89fb4332fef7367543c6457d3a6bfbd4d4f6ad7bea915baefc0489ad0c2a873 > RAR > New folder.exe - Win32/Agent.NWQ 蠕虫
C:\Users\Silence\Downloads\22x\dd4a29b9ad4644350878b4c073661481a64762c4be4a9aa20ff7b71453470cce - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\e9d086bf3e1e657f847a2364ee1da56db50bfeb291a35f1f92f3b2a9125f6f5e - Win32/Korplug.ID 特洛伊木马 的变种
C:\Users\Silence\Downloads\22x\ef549a3688f930bf3c5d49d95ed3d1de51be79af10f9d941892d85b25fabd795 - Win32/Korplug.ID 特洛伊木马
C:\Users\Silence\Downloads\22x\f938e87917ca8885001e922f43ef0fe5e67ff390e951a934254ddac808dca1a5 - Win32/Korplug.ID 特洛伊木马 的变种
已扫描的对象数: 24
发现的威胁数: 20
已清除对象数: 0
完成时间: 19:23:03  总扫描时间: 1 秒 (00:00:01)
[/mw_shl_code]

a939707506

zemana kill 1

petr0vic

Webroot
kill - 18

ELOHIM

微软 SCEP 剩下这么多。 16 只。

[mw_shl_code=css,true]2017-01-30  16:30           517,468 033258861970b3addbe339e9f2c0fde210898896f31dce5d5f7b1d17d19c23eb
2017-01-30  16:30            54,784 0dec4b854bcbf15bda79a1a3d9f322d8519a3273155ad18d3b7ce7d36dfe9e85
2017-01-30  16:30            49,664 1bf0dcf093a04a86c6679f99b6ec5293241b2a16b4749b5ff5af8e11e96ba2a9
2017-01-30  16:30            36,096 3d85b4f923e2201a21a3e27e86ea6a2d3fda9778899568e7c505de5a4b70653e
2017-01-30  16:30            51,072 4d22a45690d144ad29aaa06104085293e489ad319ba033ca0bd46759b3d5e42e
2017-01-30  16:30            50,176 4f3275de51c2d16e8df829d020eae4f2450c9b3afd3b3099d615278e29a00479
2017-01-30  16:30            46,080 62ba328ada4ac69ac2ec9f9f101d16d5eb72b648c6bd078f735e17c8fc6b2829
2017-01-30  16:30           346,330 72aea0644729cadfe668751587a1e6384c49c398580feecefc51385ecc018631
2017-01-30  16:30            54,784 86d414a51e946a9a5d8ce411f0f6b54154d7848c046cd58464b49733effdc47a
2017-01-30  16:30            49,664 87496d1e934706d49b6a03b034f999c61772212b13e901f18453f7f8111defca
2017-01-30  16:30            46,080 a3c8d6eaa6239112b1e881f18ea78f58949150fbf051e599b5d6f81e0d2e31c9
2017-01-30  16:30            51,072 dd4a29b9ad4644350878b4c073661481a64762c4be4a9aa20ff7b71453470cce
2017-01-30  16:30            46,592 e9d086bf3e1e657f847a2364ee1da56db50bfeb291a35f1f92f3b2a9125f6f5e
2017-01-30  16:30            56,104 e9d5e26e00f3ef239491bdfc80c8b4aabe551135b568c1ac9629202ed10cf2d0
2017-01-30  16:30            46,592 ef549a3688f930bf3c5d49d95ed3d1de51be79af10f9d941892d85b25fabd795
2017-01-30  16:30            50,176 f938e87917ca8885001e922f43ef0fe5e67ff390e951a934254ddac808dca1a5[/mw_shl_code]

v1615