【11.14】#VirusPackage 15x

Jerry.Lin

https://pan.baidu.com/s/1qYictZI

所采集样本均为当日流行病毒，建议二扫上报，欢迎双击。
质量提高

火绒KILL2

1. 病毒库：2017/11/14 17:11
   
2. 开始时间：2017/11/14 20:39
   
3. 总计用时：00:00:02
   
4. 扫描对象：35个
   
5. 扫描文件：15个
   
6. 发现风险：2个
   
7. 已处理风险：2个
   
8. 发现系统修复项：0个
   
9. 处理系统修复项：0个
   
10. 
    
11. 病毒详情
    
12. 
    
13. 风险路径：C:\Users\USER\Downloads\Compressed\Virus Test\Virus15x 1114\【Trojan】af7a4f04435f9b6ba3d8905e4e67cfa19ec5c3c32e9d35937ec0546cce2dd1ff.bin.exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：[b27d4294cde6a1ec], 处理结果：已处理
    
14. 风险路径：C:\Users\USER\Downloads\Compressed\Virus Test\Virus15x 1114\【Trojan.MSIL】51c1e6ce3ff1f42734bfa19a7142b5154172232afc5528dad4c527df3a44c0c1.bin.exe, 病毒名：TrojanDropper/Binder.a, 病毒ID：[815174898bac34b], 处理结果：已处理
    

复制代码

willjjyu

KIs 18 12.13毒库 KILL11 MISS 4 清除

已上报

zst470396853

3Q

ziyerain2015

反正2扫2个去不掉，应该是余7，要手动删

willjjyu

willjjyu 发表于 2017-11-14 20:47
KIs 18 12.13毒库 KILL11 MISS 4 清除

已上报

感谢您提交到 Kaspersky Lab。

文件、URL 或两者已在自动模式下扫描。

在防病毒数据库中未找到有关指定文件的信息：
í╛Trojan.Downloaderí┐ff5cdc26f4af06e9ec94d06df5442a590dd65d9e9314e92d086cb9faa17142fd.bin.DOCX
í╛Trojan.Ursuí┐d9525ddc640c0b3cb5a34e943f46409a0d7526b3e967263ab946c1c1a5e1fc5b.bin.exe

附加的文件包含恶意代码。有关此代码的信息将添加到防病毒数据库中：
í╛VBA.Agentí┐67947306e099951acd7c2b2e80f28ea667cbde9f9ce4f0b24b59775c9a709977.bin.DB - HEUR:Trojan-Downloader.Script.Generic
í╛VBA.Downloaderí┐9e555726b5514c6cd22e16fb80e7a44438a4c3b04ce3ff0590c49cda89e088e2.bin.DOC - HEUR:Trojan.Script.Agent.gen

我们将全面分析您发送的文件。如果分析结果与自动扫描结果不同，将通过电子邮件通知您。

这是自动生成的邮件，请勿回复。

Anti-Virus Lab, Kaspersky Lab HQ

"39A/3 Leningradskoe Shosse, Moscow, 125212, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com https://www.securelist.com"

dongwenqi

willjjyu 发表于 2017-11-14 20:57
感谢您提交到 Kaspersky Lab。

文件、URL 或两者已在自动模式下扫描。

OK，感谢上报

bbs2811125

ESET kill11x，其中修复2x

1. Log
   
2. C:\Users\Administrator\Desktop\Virus15x 1114\Virus15x 1114\【Injector】c80e3f51e3132ff146a93dfdde7c7878e16005bba92241833bf2f77a9e503278.bin.exe » WINRARSFX » ushata.dll - a variant of Win32/Korplug.ER trojan - cleaned by deleting [1]
   
3. C:\Users\Administrator\Desktop\Virus15x 1114\Virus15x 1114\【Injector】f4b0ca3cae501760cecddba5a9c34dda23e17fd246a35128d6fe863f2c8831d2.bin.exe » AUTOIT » script.bin - a variant of Win32/Injector.Autoit.DDK trojan - cleaned by deleting [1]
   
4. C:\Users\Administrator\Desktop\Virus15x 1114\Virus15x 1114\【Trojan.Downloader】7d385fd8e64f499d048136b5721aa299b8be3f9922b4578d4be8452ecec567a1.bin.JS - JS/Vjworm.A worm - cleaned by deleting [1]
   
5. C:\Users\Administrator\Desktop\Virus15x 1114\Virus15x 1114\【Trojan.Downloader】ff5cdc26f4af06e9ec94d06df5442a590dd65d9e9314e92d086cb9faa17142fd.bin.DOCX » ZIP » word/document.xml - VBA/DDE.A trojan - deleted
   
6. C:\Users\Administrator\Desktop\Virus15x 1114\Virus15x 1114\【Trojan.Korplug】db61a27e61aa2d830e1a6b0309478a2147cfba1a7c49ec9a8b7a265f0d6f69df.bin.exe » WINRARSFX » ChoiceGuard.dll - a variant of Win32/Korplug.ID trojan - cleaned by deleting [1]
   
7. C:\Users\Administrator\Desktop\Virus15x 1114\Virus15x 1114\【Trojan.Razy】1655a2c7d6248459cca90d21025d6c531803e33b4ae6b984cb434285d577cd50.bin.exe - a variant of MSIL/Kryptik.LLL trojan - cleaned by deleting [1]
   
8. C:\Users\Administrator\Desktop\Virus15x 1114\Virus15x 1114\【Trojan.Ursu】d9525ddc640c0b3cb5a34e943f46409a0d7526b3e967263ab946c1c1a5e1fc5b.bin.exe - Win32/TrojanDownloader.Banload.YCE trojan - cleaned by deleting [1]
   
9. C:\Users\Administrator\Desktop\Virus15x 1114\Virus15x 1114\【Trojan】af7a4f04435f9b6ba3d8905e4e67cfa19ec5c3c32e9d35937ec0546cce2dd1ff.bin.exe - Win32/Ilomo.I trojan - cleaned by deleting [1]
   
10. C:\Users\Administrator\Desktop\Virus15x 1114\Virus15x 1114\【Trojan】c583cacbcdbf02ec836bcfc2798db4b5f5e858d47d2de297009b2a45fefeab94.bin.exe - a variant of Win32/Kryptik.FYZV trojan - cleaned by deleting [1]
    
11. C:\Users\Administrator\Desktop\Virus15x 1114\Virus15x 1114\【VBA.Downloader】80da3054e95b9f3de920e0c2cb14a608fd3bb6469c602005518d457d52f9ebae.bin.XLS - VBA/TrojanDownloader.Agent.FBK trojan - cleaned
    
12. C:\Users\Administrator\Desktop\Virus15x 1114\Virus15x 1114\【VBA.Downloader】9e555726b5514c6cd22e16fb80e7a44438a4c3b04ce3ff0590c49cda89e088e2.bin.DOC - PowerShell/TrojanDownloader.Agent.Q trojan - cleaned
    

复制代码

SEP补充1x，剩余3x

ELOHIM

wiep miss 7
修复未知

chengleok

MSE kill 9 miss 6

我要打十個

1x..