本帖最后由 小飞侠.net 于 2017-8-11 12:33 编辑
Emsisoft Emergency Kit - 版本 2017.6
上次更新: 2017/8/11 11:47:05
用户帐号: TECLAST\Admin
Computer name: TECLAST
OS version: Windows 10x64
扫描设置:
扫描方式: 自定义扫描
对象: C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\
检测流氓软件(PUPs): On
扫描压缩包: On
扫描邮件存档: On
ADS数据流: On
文件扩展名过滤: Off
直接磁盘访问: On
[mw_shl_code=javascript,true]扫描开始于: 2017/8/11 12:24:25
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-12.Ransom.Purge.exe.infected 发现病毒: Trojan-Ransom.WininiCrypt (A) [289643]
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-11.Keylogger.Hawkeye.exe.infected 发现病毒: Trojan.GenericKD.5799834 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-10.Ransom.Locky.exe.infected 发现病毒: Trojan.GenericKD.5795255 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-1.Keylogger.PWS-39581f.exe.infected 发现病毒: Trojan.GenericKD.5800756 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-2.Backdoor.Bladabindi.exe.infected 发现病毒: Generic.MSIL.Bladabindi.EB45F0EE (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-4.Backdoor.Bladabindi.exe.infected 发现病毒: Generic.MSIL.Bladabindi.05198D25 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-9.Trojan.Outbreak.exe.infected 发现病毒: Trojan.Agent (A) [289655]
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-8.Backdoor.Chthonic.exe.infected 发现病毒: Trojan.GenericKD.5800647 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-7.Backdoor.DarkKomet.exe.infected 发现病毒: Gen:Trojan.Heur.RK0@rqcjemfS (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-5.PUP.FackSkype.exe.infected 发现病毒: Gen:Variant.Delf.73 (B) [krnl.xmd][/mw_shl_code]
已扫描 12
发现 10
扫描完成后: 2017/8/11 12:24:31
扫描时间: 0:00:06
瑞星反恶软引擎命令行扫描器(社区交流版)
编译于:Aug 10 2016 14:44:33
提示:
- 本工具供社区交流使用,请勿用于其他用途
- 本工具没有恶意软件删除、清除、隔离功能
- 本工具包含开发中的新特性,结果仅供参考
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 命令行中的选项开关:-output-json -log=C:\瑞星新引擎\ScanLog_170811121521.log
* 初始化云引擎组件 ...
* 加载恶软签名库: C:\瑞星新引擎/malware.rmd
* 恶软签名库加载成功,发布序号为 2613
* 读取恶软签名库配置 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7
扫描开始: Fri Aug 11 12:16:14 2017
[mw_shl_code=javascript,true]{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-11.Keylogger.Hawkeye.exe.infected","infect":{"engine":"cloud","threat":"Trojan.Generic!8.C3-BeswJy9DWhT"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-12.Ransom.Purge.exe.infected","infect":{"engine":"cloud","threat":"Ransom.Purgen!8.E539-rsBh7uEtj9P"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-10.Ransom.Locky.exe.infected","infect":{"engine":"cloud","threat":"Trojan.GenKryptik!8.AA55-bEOx5Vd5I4U"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-1.Keylogger.PWS-39581f.exe.infected","infect":{"engine":"cloud","threat":"Trojan.Tisifi!8.E421-rmqrfJyetaB"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-5.PUP.FackSkype.exe.infected","infect":{"engine":"cloud","threat":"Dropper.Agent!8.2F-PavM0u1WVwM"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-3.Keylogger.Py2Exe.exe.infected","infect":{"engine":"cloud","threat":"Trojan.Agent!8.B1E-fFs8vBcjHuF"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-2.Backdoor.Bladabindi.exe.infected","infect":{"engine":"classic","threat":"Backdoor.MSIL.Bladabindi!1.9E49"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-4.Backdoor.Bladabindi.exe.infected","infect":{"engine":"classic","threat":"Backdoor.MSIL.Bladabindi!1.9E49"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-8.Backdoor.Chthonic.exe.infected","infect":{"engine":"cloud","threat":"Trojan.GenKryptik!8.AA55-AcPqHBTFt8T"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-6.Exploit.CVE-2015-2545.doc.infected","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-9.Trojan.Outbreak.exe.infected","infect":{"engine":"cloud","threat":"Trojan.Generic-1CtlooDeZqM"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\170810up2126cbb7\\170810\\170810-7.Backdoor.DarkKomet.exe.infected","infect":{"engine":"classic","threat":"Backdoor.Pontoeb!1.6637"},"type":"scan"}[/mw_shl_code]
扫描结束: Fri Aug 11 12:16:15 2017
总共耗时: 0:1:234(m:s:ms)
总扫描文件: 12
总恶意文件: 11
有效检出率: 91.67%
火绒安全---(Windows 10 Creators Update(Redstone 2)....):
病毒库:2017/08/09 16:12
开始时间:2017/08/11 12:19
总计用时:00:00:27
扫描对象:606个
扫描文件:12个
发现风险:4个
已处理风险:0个
发现系统修复项:0个
处理系统修复项:0个
病毒详情
[mw_shl_code=javascript,true]
风险路径:C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-2.Backdoor.Bladabindi.exe.infected, 病毒名:Backdoor/Bladabindi.l, 病毒ID:[7debbd141a975060], 处理结果:已忽略
风险路径:C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-4.Backdoor.Bladabindi.exe.infected, 病毒名:Backdoor/Bladabindi.l, 病毒ID:[7debbd141a975060], 处理结果:已忽略
风险路径:C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-10.Ransom.Locky.exe.infected, 病毒名:HVM:Trojan/MalBehav.gen!E, 病毒ID:[8d1593ba2838fa52], 处理结果:已忽略
风险路径:C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-7.Backdoor.DarkKomet.exe.infected, 病毒名:Backdoor/Fynloski.a, 病毒ID:[853f2ad2e234ab95], 处理结果:已忽略[/mw_shl_code]
X-Sec Antivirus ---(Windows 10 Creators Update(Redstone 2)....):
Start Time: Fri Aug 11 12:08:49 2017
Scan Type: Custom Scan
Scan Target: C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7
Heuristic Engine: Enabled
Cloud Engine: Enabled
Resolve Threats: Scan only
Database Version: 2017.08.09.01
[mw_shl_code=javascript,true]C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-1.Keylogger.PWS-39581f.exe.infected -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-10.Ransom.Locky.exe.infected -> Cloud:Trojan.Win32.Ransom
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-11.Keylogger.Hawkeye.exe.infected -> Cloud:Trojan.Win32.Keylogger
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-12.Ransom.Purge.exe.infected -> Cloud:Trojan.Win32.Ransom
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-2.Backdoor.Bladabindi.exe.infected -> Backdoor.Win32.Bladabindi.A
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-3.Keylogger.Py2Exe.exe.infected -> Cloud:Trojan.Win32.Keylogger
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-4.Backdoor.Bladabindi.exe.infected -> Backdoor.Win32.Bladabindi.A
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-5.PUP.FackSkype.exe.infected -> Cloud:Trojan.Win32.Dropper
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-6.Exploit.CVE-2015-2545.doc.infected -> Cloud:Exploit.MSOffice.Generic
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-7.Backdoor.DarkKomet.exe.infected -> Backdoor.Win32.DarkComet.A
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-8.Backdoor.Chthonic.exe.infected -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\170810up2126cbb7\170810\170810-9.Trojan.Outbreak.exe.infected -> Hacktool.Win32.Confuser.Aa[/mw_shl_code]
Elapsed Time: 00:02:07
Total File: 12
Skipped File: 0
Infected File: 12
360 Total Security扫描日志
扫描时间:2017-08-11 12:09:12
扫描用时:00:00:04
扫描项目总数:12
威胁总数:10
处理威胁数:10
扫描选项
----------------------
扫描压缩包:是
常规引擎设置:Bitdefender引擎, 小红伞引擎
扫描内容
----------------------
文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\8501克星4225\孙3\Windows Defender\AVTestZipX\170810up2126cbb7.7z
文件大小: 7.37 MB (7,728,742 字节)
修改时间: 2017年08月11日,12:06:09
MD5: be3b9db7e45594cb933dd362e429461e
SHA1: efa9866fb04e93c8e1e1580f01062c501ea91bba
SHA256: 4325b2970c476e0f39cd746d1fcfa5efc380838e8899ab9fe9848bafefdba6e3
CRC32: d10ab6e7
计算时间: 0.09s
扫描结果
======================
高风险项目
----------------------
[mw_shl_code=javascript,true]C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\8501克星4225\孙3\Windows Defender\AVTestZipX\170810\170810-1.Keylogger.PWS-39581f.exe.infected HEUR/QVM41.2.12D3.Malware.Gen 已处理
C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\8501克星4225\孙3\Windows Defender\AVTestZipX\170810\170810-12.Ransom.Purge.exe.infected Win32/Trojan.Ransom.ad7 已处理
C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\8501克星4225\孙3\Windows Defender\AVTestZipX\170810\170810-11.Keylogger.Hawkeye.exe.infected Win32/Trojan.Dropper.3d3 已处理
C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\8501克星4225\孙3\Windows Defender\AVTestZipX\170810\170810-3.Keylogger.Py2Exe.exe.infected Win32/Trojan.IM.2b4 已处理
C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\8501克星4225\孙3\Windows Defender\AVTestZipX\170810\170810-2.Backdoor.Bladabindi.exe.infected Win32/Trojan.7bf 已处理
C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\8501克星4225\孙3\Windows Defender\AVTestZipX\170810\170810-5.PUP.FackSkype.exe.infected Win32/Trojan.2d1 已处理
C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\8501克星4225\孙3\Windows Defender\AVTestZipX\170810\170810-7.Backdoor.DarkKomet.exe.infected Malware.Radar01.Gen 已处理
C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\8501克星4225\孙3\Windows Defender\AVTestZipX\170810\170810-8.Backdoor.Chthonic.exe.infected Win32/Trojan.Downloader.a20 已处理
C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\8501克星4225\孙3\Windows Defender\AVTestZipX\170810\170810-4.Backdoor.Bladabindi.exe.infected HEUR/QVM03.0.12D3.Malware.Gen 已处理
C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\8501克星4225\孙3\Windows Defender\AVTestZipX\170810\170810-10.Ransom.Locky.exe.infected HEUR/QVM19.1.0CCA.Malware.Gen 已处理[/mw_shl_code]
金山毒霸--(Windows XP SP3)
扫描时间:[2017-08-11 12:30:07]
扫描用时:[00:00:11]
扫描类型:自定义查杀
扫描文件总数:305
扫描速度:25文件/秒
发现威胁:4个
清除威胁:4个
=============================================
[mw_shl_code=html,true][2017-08-11 12:30:34]
威胁:c:\documents and settings\administrator\桌面\170810up2126cbb7\170810\170810-12.ransom.purge.exe.infected
类型:win32.heur.kvm007.a
处理方式:删除
[2017-08-11 12:30:34]
威胁:c:\documents and settings\administrator\桌面\170810up2126cbb7\170810\170810-2.backdoor.bladabindi.exe.infected
类型:heur.ssc.1633263.1216.(kcloud)
处理方式:删除
[2017-08-11 12:30:34]
威胁:c:\documents and settings\administrator\桌面\170810up2126cbb7\170810\170810-4.backdoor.bladabindi.exe.infected
类型:heur.ssc.2709778.1216.(kcloud)
处理方式:删除
[2017-08-11 12:30:34]
威胁:c:\documents and settings\administrator\桌面\170810up2126cbb7\170810\170810-7.backdoor.darkkomet.exe.infected
类型:win32.hack.huigezit.cz
处理方式:删除
[/mw_shl_code]
|