【11.15】#VirusPackage 34x

Jerry.Lin

https://pan.baidu.com/s/1mh6qNGk

分类好累……

质量提升
建议二扫上报

欢迎双击
火绒KILL4

1. 病毒库：2017/11/14 17:11
   
2. 开始时间：2017/11/15 19:38
   
3. 总计用时：00:00:11
   
4. 扫描对象：1975个
   
5. 扫描文件：34个
   
6. 发现风险：4个
   
7. 已处理风险：4个
   
8. 发现系统修复项：0个
   
9. 处理系统修复项：0个
   
10. 
    
11. 病毒详情
    
12. 
    
13. 风险路径：C:\Users\USER\Downloads\Compressed\Virus Test\Virus34x 1115\[Downloader]bd7c63262f87d371b63acb55c38ad0d1231a657dfcbf7571bcb8d217d5a9f31f.bin.DOCM >> word\vbaProject.bin, 病毒名：OMacro/Downloader.vj, 病毒ID：[f0f4e889de82f34d], 处理结果：已处理
    
14. 风险路径：C:\Users\USER\Downloads\Compressed\Virus Test\Virus34x 1115\[Dropper]cd7f04d3a459383ea126dc15034ce3f66375f6f9756b079da2b1bb94d6bac7f5.bin.exe, 病毒名：HEUR:Trojan/HVM2B, 病毒ID：[55acd62362112b45], 处理结果：已处理
    
15. 风险路径：C:\Users\USER\Downloads\Compressed\Virus Test\Virus34x 1115\[Trojan.js]705876c51b6e6c32f3be3d54349c7892e3657535a02f28748d186aa4f3a710c9.bin.DOCM >> word\vbaProject.bin, 病毒名：OMacro/Downloader.vj, 病毒ID：[f0f4e889de82f34d], 处理结果：已处理
    
16. 风险路径：C:\Users\USER\Downloads\Compressed\Virus Test\Virus34x 1115\[Trojan]39c49f6d1d7636698f7b1da3f7528798ed4c72d4ba2fb836abfe36cb26b77a0d.bin.exe, 病毒名：HVM:VirTool/Obfuscator.gen!A, 病毒ID：[b27d4294cde6a1ec], 处理结果：已处理
    

复制代码

诸葛亮

熊猫真好

欧阳宣

mbam右键12x，双击文档后漏洞防御剩余1x文档，后台无反应。
剩余exe双击，两个无反应，一个是adware，未杀
剩余js双击，一个出错，一个跑起来了，观察中
vbe跑起来了……

自己的机器瞬间成了一个毒窝……

Jerry.Lin

欧阳宣 发表于 2017-11-15 20:01
mbam右键12x，双击文档后漏洞防御剩余1x文档，后台无反应。
剩余exe双击，两个无反应，一个是adware，未杀 ...

实机诶？

有勇气

bambooslip

360 kill 24



安天 kill 15




景云 kill 1

浅暮、浅离

卡巴剩14个！！！

心醉咖啡

360

1. 360杀毒扫描日志
   
2. 
   
3. 病毒库版本：
   
4. 扫描时间：2017-11-15 20:20:33
   
5. 扫描用时：00:00:08
   
6. 扫描类型：右键扫描
   
7. 扫描文件总数：240
   
8. 项目总数：24
   
9. 清除项目数：24
   
10. 
    
11. 扫描选项
    
12. ----------------------
    
13. 扫描所有文件：是
    
14. 扫描压缩包：是
    
15. 发现病毒处理方式：由用户选择处理
    
16. 扫描磁盘引导区：是
    
17. 扫描 Rootkit：是
    
18. 使用云查杀引擎：是
    
19. 使用QVM人工智能引擎：是
    
20. 扫描建议修复项：是
    
21. 常规引擎设置：未使用
    
22. 
    
23. 扫描内容
    
24. ----------------------
    
25. F:\浏览器下载\Virus34x 1115
    
26. 
    
27. 
    
28. 白名单设置
    
29. ----------------------
    
30. 
    
31. 
    
32. 扫描结果
    
33. ======================
    
34. 高危风险项
    
35. ----------------------
    
36. F:\浏览器下载\Virus34x 1115\[Exploit]daf085f4f54495f86297be0b10c9c2b2489925dccc1d8be748dbd81bcf2e9dc8.bin.rtf        virus.exp.20170199        已删除
    
37. F:\浏览器下载\Virus34x 1115\[Backdoor]3b3a15762d20c30bcc2b16d723d5e97a50fc0ce387d89809e2380e90941b9b16.bin.exe        HEUR/QVM05.1.33C1.Malware.Gen        已删除
    
38. F:\浏览器下载\Virus34x 1115\[Downloader]b5d88fee7000cd53e4fd8aed2ddc8b78e888bf3c88285502da3701f4248e63e0.bin.exe        HEUR/QVM20.1.306B.Malware.Gen        已删除
    
39. F:\浏览器下载\Virus34x 1115\[Dropper]85e118e081de910206b4b16dc879d364aca5e80520249c97af13842c4b9bf02b.bin.exe        HEUR/QVM03.0.33C1.Malware.Gen        已删除
    
40. F:\浏览器下载\Virus34x 1115\[Injector]030944666a743ecbb5eb821af9d1cf8a5e835a20d45ea02d4c4c46a2457a6c1f.bin.exe        HEUR/QVM03.0.2801.Malware.Gen        已删除
    
41. F:\浏览器下载\Virus34x 1115\[Injector]9c0a6bc83123176093c677ee724d76c4449ae38aa09f0e983a7a634d315450f5.bin.exe        HEUR/QVM20.1.33C1.Malware.Gen        已删除
    
42. F:\浏览器下载\Virus34x 1115\[Injector]f5b7c5e7702bc17b7435c8f35fd0b1dc2a33535b4c67871f391b9812afeac76d.bin.exe        HEUR/QVM05.1.306B.Malware.Gen        已删除
    
43. F:\浏览器下载\Virus34x 1115\[Trojan]47376664f0ebd6cf799abaee60fbfd4c018df94ef8973c71bfa692cdacc805e5.bin.exe        HEUR/QVM20.1.33C1.Malware.Gen        已删除
    
44. F:\浏览器下载\Virus34x 1115\[Trojan]f904ebddd3dc7c293a311041bf3abe1b6048b405abcdc66ed9d2060fd1629c9f.bin.exe        感染型病毒(Win32/Backdoor.7ea)        已删除
    
45. F:\浏览器下载\Virus34x 1115\[Injector]d7b079350f9365275d0299bcc20486050d94b8b5d59482bc9d4fe29cd82a0c5c.bin.exe        HEUR/QVM06.2.33DF.Malware.Gen        已删除
    
46. F:\浏览器下载\Virus34x 1115\[Ransom]d22455e48c032ecb70bbd5ffcc8c5e7254dd6d2c149637344ef33b4cf9709307.bin.exe        HEUR/QVM03.0.33DF.Malware.Gen        已删除
    
47. F:\浏览器下载\Virus34x 1115\[Trojan.TrickBot]a1466d34aec7dd65892cccee71f5a4722a6b850fb1d849777c9bcc3613e75473.bin.exe        HEUR/QVM20.1.33DF.Malware.Gen        已删除
    
48. F:\浏览器下载\Virus34x 1115\[Trojan]39c49f6d1d7636698f7b1da3f7528798ed4c72d4ba2fb836abfe36cb26b77a0d.bin.exe        HEUR/QVM20.1.33DF.Malware.Gen        已删除
    
49. F:\浏览器下载\Virus34x 1115\[VBKrypt]f0652125b5af4e5512ad2e5834d1d0c807eeefafbe5057d6f89aa5d19b87df27.bin.exe        HEUR/QVM03.0.33DF.Malware.Gen        已删除
    
50. F:\浏览器下载\Virus34x 1115\[VirTool]69968faeeb37a9fe7a41946f98a87765ce4e4b2dd307252228fb142d519609a1.bin.exe        HEUR/QVM05.1.33DF.Malware.Gen        已删除
    
51. F:\浏览器下载\Virus34x 1115\[CoinMiner]92a86a480f77d6a23fb2793836e72c9013c2fa65eb680a472f1230a373e36448.bin.JS        virus.js.qexvmc.1        已删除
    
52. F:\浏览器下载\Virus34x 1115\[Downloader]01f2a5bdd4175bbaf03c3827e073dca34cbb6416c681cf2f7a3c154f67b4cb15_3KIKBhSYtn.bin.DOCX        virus.vbs.houdini.b        已删除
    
53. F:\浏览器下载\Virus34x 1115\[Downloader]d52c563d2d4b6a2a75379b338b5cc831b53694195556ae6ddab7713c0b9d32c5_wmMIhZzyTq.bin.DOCX        virus.vbs.houdini.b        已删除
    
54. F:\浏览器下载\Virus34x 1115\[Exploit]de0c9b3a9639d38f0143f202a9cd599699854604126d4204e9c104d23ec4242e.bin.DOC        感染型病毒(Win32/Trojan.7e6)        已删除
    
55. F:\浏览器下载\Virus34x 1115\[Downloader]763e358946b323a6153e7ab3940144b54be60bc7e4271107daad3dd5bee3dbc4.bin.DOC        virus.office.qexvmc.1080        已修复
    
56. F:\浏览器下载\Virus34x 1115\[Downloader]bd7c63262f87d371b63acb55c38ad0d1231a657dfcbf7571bcb8d217d5a9f31f.bin.DOCM        virus.office.qexvmc.1085        已修复
    
57. F:\浏览器下载\Virus34x 1115\[Downloader]ed94199c36787ac9fb191d242ab0ac40c0a7b25dd2e086f71576ac3e3ac605b8.bin.DOCX        virus.vbs.houdini.b        已删除
    
58. F:\浏览器下载\Virus34x 1115\[Macro]164245625fabdfc0af1296b6deb4cccce5aab179c973d9f5659be9f4b3fce51d.bin.DOC        virus.office.qexvmc.1080        已修复
    
59. F:\浏览器下载\Virus34x 1115\[Trojan.js]705876c51b6e6c32f3be3d54349c7892e3657535a02f28748d186aa4f3a710c9.bin.DOCM        virus.office.qexvmc.1085        已修复
    
60. 
    
61. 
    
62. 
    
63. 可疑文件上传结果
    
64. ----------------------
    
65. f:\浏览器下载\virus34x 1115\[injector]d7b079350f9365275d0299bcc20486050d94b8b5d59482bc9d4fe29cd82a0c5c.bin.exe        上传成功
    
66. f:\浏览器下载\virus34x 1115\[trojan]39c49f6d1d7636698f7b1da3f7528798ed4c72d4ba2fb836abfe36cb26b77a0d.bin.exe        上传成功
    

复制代码

dongwenqi

卡巴修复5个，剩余10个，其他全部删除

ELOHIM

1. [Adware.Hoax]ce3792aebc0fa81688c68b71b03d973372de6f1aa0349f5f01dbc20324089619.bin.exe
   
2. [Backdoor]3b3a15762d20c30bcc2b16d723d5e97a50fc0ce387d89809e2380e90941b9b16.bin.exe
   
3. [Backdoor]3cd02fb56ac222506c65d5cb1087f4fe3958711cbabd66b4ffa41c43a45e66ba.bin.jar
   
4. [CoinMiner]92a86a480f77d6a23fb2793836e72c9013c2fa65eb680a472f1230a373e36448.bin.JS
   
5. [Downloader]01f2a5bdd4175bbaf03c3827e073dca34cbb6416c681cf2f7a3c154f67b4cb15_3KIKBhSYtn.bin.DOCX
   
6. [Downloader]b5d88fee7000cd53e4fd8aed2ddc8b78e888bf3c88285502da3701f4248e63e0.bin.exe
   
7. [Downloader]b5fcc77c1584e09bfebf6cf74400afcf559ea548287f793d93240ececb7db701.bin.XLS
   
8. [Downloader]bd7c63262f87d371b63acb55c38ad0d1231a657dfcbf7571bcb8d217d5a9f31f.bin.DOCM
   
9. [Downloader]d52c563d2d4b6a2a75379b338b5cc831b53694195556ae6ddab7713c0b9d32c5_wmMIhZzyTq.bin.DOCX
   
10. [Downloader]ed94199c36787ac9fb191d242ab0ac40c0a7b25dd2e086f71576ac3e3ac605b8.bin.DOCX
    
11. [Dropper]85e118e081de910206b4b16dc879d364aca5e80520249c97af13842c4b9bf02b.bin.exe
    
12. [Exploit]3c47295e2fb9bdd9b6e1623204a2dfc9db74498d076e04bd32e64041b0e7b758.bin.rtf
    
13. [Exploit]42b94a48148c3ffd0f92c992a55c9763adfeaea66a0336357e7ebeb3f57f78ba.bin.rtf
    
14. [Exploit]84593a125442a9541b2992a2934f4db5cbe1a87b6e5f5edd17982e677667c53f.bin.doc
    
15. [Exploit]daf085f4f54495f86297be0b10c9c2b2489925dccc1d8be748dbd81bcf2e9dc8.bin.rtf
    
16. [Exploit]de0c9b3a9639d38f0143f202a9cd599699854604126d4204e9c104d23ec4242e.bin.DOC
    
17. [Injector]9c0a6bc83123176093c677ee724d76c4449ae38aa09f0e983a7a634d315450f5.bin.exe
    
18. [Injector]d7b079350f9365275d0299bcc20486050d94b8b5d59482bc9d4fe29cd82a0c5c.bin.exe
    
19. [Injector]f5b7c5e7702bc17b7435c8f35fd0b1dc2a33535b4c67871f391b9812afeac76d.bin.exe
    
20. [Java.Agent]7f389b308e96b3771ed4a2108c6e5ae86de186f4dcc57651d7b9169d30bfd168.bin.jar
    
21. [Trojan.js]705876c51b6e6c32f3be3d54349c7892e3657535a02f28748d186aa4f3a710c9.bin.DOCM
    
22. [Trojan.js]e20f782397dc791f3d673a98e3c5d12a2bce40ef0fdae8234b694310993102a3.js
    
23. [Trojan.TrickBot]a1466d34aec7dd65892cccee71f5a4722a6b850fb1d849777c9bcc3613e75473.bin.exe
    
24. [Trojan]39c49f6d1d7636698f7b1da3f7528798ed4c72d4ba2fb836abfe36cb26b77a0d.bin.exe
    
25. [Trojan]47376664f0ebd6cf799abaee60fbfd4c018df94ef8973c71bfa692cdacc805e5.bin.exe
    
26. [Trojan]f904ebddd3dc7c293a311041bf3abe1b6048b405abcdc66ed9d2060fd1629c9f.bin.exe

复制代码

————————————
SCEP 余 以上，修复未统计。

Eset小粉絲

Bitdefender 18x

1. [Downloader]01f2a5bdd4175bbaf03c3827e073dca34cbb6416c681cf2f7a3c154f67b4cb15_3KIKBhSYtn.bin.DOCX=>word=>embeddings=>oleObject1.bin=>1.vbs"  threatName="VB:Trojan.VBA.Agent.PL"
   
2. [VBKrypt]f0652125b5af4e5512ad2e5834d1d0c807eeefafbe5057d6f89aa5d19b87df27.bin.exe"  threatName="Trojan.GenericKD.12570702"
   
3. [Trojan]f904ebddd3dc7c293a311041bf3abe1b6048b405abcdc66ed9d2060fd1629c9f.bin.exe"  threatName="Trojan.Agent.CQFR"
   
4. [Injector]030944666a743ecbb5eb821af9d1cf8a5e835a20d45ea02d4c4c46a2457a6c1f.bin.exe"  threatName="Trojan.GenericKD.6195608"
   
5. [Dropper]cd7f04d3a459383ea126dc15034ce3f66375f6f9756b079da2b1bb94d6bac7f5.bin.exe"  threatName="Trojan.GenericKD.2502444"
   
6. [Injector]f5b7c5e7702bc17b7435c8f35fd0b1dc2a33535b4c67871f391b9812afeac76d.bin.exe"  threatName="Trojan.GenericKD.6195631"
   
7. [Trojan.TrickBot]a1466d34aec7dd65892cccee71f5a4722a6b850fb1d849777c9bcc3613e75473.bin.exe"  threatName="Gen:Suspicious.Cloud.1.zq0@aOnOCceO"
   
8. [Java.Agent]7f389b308e96b3771ed4a2108c6e5ae86de186f4dcc57651d7b9169d30bfd168.bin.jar"  threatName="Trojan.GenericKD.12569117"
   
9. [Dropper]85e118e081de910206b4b16dc879d364aca5e80520249c97af13842c4b9bf02b.bin.exe"  threatName="Gen:Suspicious.Cloud.1.@m0@aSfMeAie"
   
10. [Exploit]de0c9b3a9639d38f0143f202a9cd599699854604126d4204e9c104d23ec4242e.bin.DOC=>microsoftlfileformatconvater.jar"  threatName="Exploit.OLE-JAR.Gen.1"
    
11. [Exploit]daf085f4f54495f86297be0b10c9c2b2489925dccc1d8be748dbd81bcf2e9dc8.bin.rtf=>(objdata)=>(Embedded DocFile g)"  threatName="Exploit.CVE-2017-0199.Gen"
    
12. [VirTool]69968faeeb37a9fe7a41946f98a87765ce4e4b2dd307252228fb142d519609a1.bin.exe"  threatName="Gen:Variant.Zusy.253353"
    
13. [CoinMiner]92a86a480f77d6a23fb2793836e72c9013c2fa65eb680a472f1230a373e36448.bin.JS" threatType="6" threatName="Application.BitCoinMiner.SX"
    
14. [Downloader]d52c563d2d4b6a2a75379b338b5cc831b53694195556ae6ddab7713c0b9d32c5_wmMIhZzyTq.bin.DOCX=>word=>embeddings=>oleObject1.bin=>3.vbs"  threatName="VB:Trojan.VBA.Agent.PL"
    
15. [Downloader]bd7c63262f87d371b63acb55c38ad0d1231a657dfcbf7571bcb8d217d5a9f31f.bin.DOCM=>word/vbaProject.bin"  threatName="VB:Trojan.VBA.Downloader.HJ"
    
16. [Backdoor]3b3a15762d20c30bcc2b16d723d5e97a50fc0ce387d89809e2380e90941b9b16.bin.exe"  threatName="Trojan.Agent.CQGF"
    
17. [Injector]9c0a6bc83123176093c677ee724d76c4449ae38aa09f0e983a7a634d315450f5.bin.exe"  threatName="Gen:Suspicious.Cloud.1.WGZ@aaAxbkV"
    
18. [Trojan]47376664f0ebd6cf799abaee60fbfd4c018df94ef8973c71bfa692cdacc805e5.bin.exe"  threatName="Gen:Suspicious.Cloud.1.3GZ@aGikTnL"

复制代码