收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 【11.20】#VirusPackage 50x
1234下一页
返回列表 发新帖
楼主: Jerry.Lin
 收起左侧

[病毒样本] 【11.20】#VirusPackage 50x

[复制链接]
DPT1
发表于 2017-11-20 22:52:35 | 显示全部楼层
本帖最后由 DPT1 于 2017-11-21 00:23 编辑

一扫

二嫂，杀13个其中修复四个，

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

xxmattyboi
发表于 2017-11-20 23:58:48 | 显示全部楼层
本帖最后由 xxmattyboi 于 2017-11-21 00:01 编辑

趋势 Kill 7X 主防清了一个 所以只扫描了49个

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

小飞侠.net
发表于 2017-11-21 03:30:16 来自手机 | 显示全部楼层
本帖最后由 小飞侠.net 于 2017-11-21 10:05 编辑

瑞星---（Windows 10 Creators Update（Redstone 2）....）：云引擎（开）RDM+（开）   
                瑞星反恶软引擎命令行扫描器（社区交流版）                 
                                                                     


编译于：Sep 22 2017   15:07:50


提示：
  - 本工具供社区交流使用，请勿用于其他用途
  - 本工具没有恶意软件删除、清除、隔离功能
  - 本工具包含开发中的新特性，结果仅供参考


* 命令行中的选项开关：-output-json -log=C:\瑞星RDM+引擎\ScanLog_171121095803.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120


* 加载恶软签名库： C:\瑞星RDM+引擎/malware.rmd
* 恶软签名库加载成功，发布序号为 3202
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Tue Nov 21 09:58:20 2017


{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(11).vir.XLS","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(14).vir.rtf","infect":{"engine":"sha1","signature":"c2hhMTqaff9iHKxnx5vBrf7kIBZqf8q5bw","threat":"Exploit.CVE-2017-0199.Gen!1.AECA"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(15).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpwKN74z0fz9mj6mHY1fWFTXofoPg","threat":"Malware.Strealer!8.1EF"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(13).vir.html","infect":{"engine":"sha1","signature":"c2hhMToc8/3hjbH0EKpkkpxIvfi+vNLiWQ","threat":"Trojan.DL-Generic/JS!1.A4A8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(17).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTrNgLfIU/e5aI/9MpRAwlczuiRszw","threat":"Dropper.Generic!8.35E"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(18).vir.rtf","infect":{"engine":"sha1","signature":"c2hhMTpsE/t2zAZWhoG3mdwqi8R/340/Jw","threat":"Exploit.CVE-2017-0199.Gen!1.AECA"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(1).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTq+6IR6uvFSpXo96zieYQMbHXC7Tw","threat":"Trojan.Injector!1.AE36"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(16).vir.DOCX","infect":{"engine":"sha1","signature":"c2hhMTpPY8LV9lUiGN22ogGXgRM705icdg","threat":"Trojan.Agent!8.B1E"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(2).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTp6/GcqOc3dN0nKmvMI2RU+jOAjtA","threat":"Trojan.Injector!1.AE36"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(20).vir.vbs","infect":{"engine":"sha1","signature":"c2hhMTqa46pxRuZSdVhRD+/jqBkhTcEXiQ","threat":"Worm.Jenxcus!8.409"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(19).vir.rtf","infect":{"engine":"sha1","signature":"c2hhMTr+GR7r389YhA7Gk2hABf3JLpLrAg","threat":"Exploit.CVE-2017-8759.Gen!1.AEC4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(25).vir.js","infect":{"engine":"sha1","signature":"c2hhMTo63d1VGUFrR47UpXUyxzFZrEqvOw","threat":"Trojan.Obfuscated!8.4C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(12).vir.exe","infect":{"engine":"rdmk","signature":"cmRtazpRpLg7Cwus/jZp2D7smpdP","threat":"Malware.Heuristic!ET#88%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(24).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTp84wW/s6YL8p5Z6UcHFQdqgpO6yQ","threat":"Downloader.Delf!8.16F"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(22).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTrXQvfZrp9lMbYjIZLQJ6IqPGHj7Q","threat":"Ransom.Purgen!1.AC62"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(10).vir.dll","infect":{"engine":"sha1","signature":"c2hhMToYcK1SQ+4GJpcEHfD1FUB0rfHWPw","threat":"Trojan.Urlbot!8.2FD"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(27).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTqaorE0GRmBp35s641kZsnq+Bp14A","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(21).vir.exe","infect":{"engine":"rdmk","signature":"cmRtazpX+EjRujEzHAyAJtMaie33","threat":"Malware.Heuristic!ET#83%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(3).vir.rtf","infect":{"engine":"sha1","signature":"c2hhMTqqTzeWYa6QAxjU3+eW7TKLZ7RTRw","threat":"Exploit.CVE-2015-1650!8.EF7D"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(30).vir.rtf","infect":{"engine":"sha1","signature":"c2hhMTpDCu6SXvxc15WPYGGamLhTFm91og","threat":"Exploit.CVE-2017-0199.Gen!1.AECA"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(31).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTotfZI3OUF3d+wMRY452ZOnUkxfhw","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(35).vir.Linux_ELF","infect":{"engine":"classic","threat":"Trojan.DDoS-MrBlack/Linux!1.A484"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(23).vir.DOCX","infect":{"engine":"sha1","signature":"c2hhMTp0cgJPAiTpQY83xmCvbSLU4Kj3EQ","threat":"Downloader.Agent!8.B23"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(34).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTra2mqXABBtQoZL6h4qgi4iUvKGfg","threat":"Trojan.Generic!8.C3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(33).vir.vbs","infect":{"engine":"sha1","signature":"c2hhMToF49EJNtJ2pM02ABhdhT+mV7XybA","threat":"I-Worm.Qoma.b"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(39).vir.XLS","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(29).vir.DOCX","infect":{"engine":"sha1","signature":"c2hhMToHvscmR3P5jwqUvWzwoFUsQ3+/3A","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(32).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpCaqsnYlkQ0Z8JzJVduzFawBgGLA","threat":"Dropper.Generic!8.35E"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(36).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpsHijG0fgRMZMev6/ySBHlSAx0CA","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(4).vir.exe","infect":{"engine":"sha1","signature":"c2hhMToqkA6gjmkz0rkPfh+L7rueZySxKw","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(41).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTrEY9D2V0YF0jv8ZsPT5CWVwT1Q8w","threat":"Downloader.Dofoil!8.322"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(42).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTqzRGQvznGuLuTHnsKRcIeRVlVKHg","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(43).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTopBhr/J+eJmSnNmxI9RqWt8l72GQ","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(40).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTp8Qv5vOhkn8BR59vPQxGNZHeGr3w","threat":"Spyware.Recam!8.5E5"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(44).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpvyqJ5+oG6Cn9s5MLqzQIp5irGBQ","threat":"Downloader.Agent!8.B23"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(45).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpOR67fkOFDkEdc25PVPasXHO+Vfg","threat":"Spyware.Ursnif!8.1DEF"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(26).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTqLYfvrOiy+KlWOPbet7wzNPfR+dQ","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(5).vir.html","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(37).vir.DOC","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(47).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTqWNy4HaSUUQlZ58OKeQJifTjqnPA","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(48).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTp6oIGIK/F79cGGm15XzVSM00JZ1A","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(49).vir.Linux_ELF","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(46).vir.exe","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(7).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTp5+GvZborQEr5/svJmI+xppKxJvg","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(6).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpYaWwFvT2kVze7zQJ0cEVMhI8AGA","threat":"Trojan.VBKrypt!8.5C0"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(9).vir.exe","infect":{"engine":"rdmk","signature":"cmRtazqwy1QSYYHXjEhBO6dbCRVS","threat":"Malware.Heuristic!ET#99%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(8).vir.exe","infect":{"engine":"rdmk","signature":"cmRtazoR/jmSt812yAN2POnD077N","threat":"Malware.Heuristic!ET#100%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(50).vir.jar","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(38).vir.exe","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(28).vir.jar","type":"scan"}


扫描结束: Tue Nov 21 09:58:34 2017


总扫描耗时: 0:13:531(m:s:ms)
总扫描对象: 1107
总扫描文件: 50
总恶意文件: 41
有效检出率: 82.00%

X-Sec Antivirus ---（Windows 10 Creators Update（Redstone 2）....）：

Start Time: Tue Nov 21 10:01:24 2017
Scan Type: Custom Scan
Scan Target: C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120
Heuristic Engine: Enabled
Cloud Engine: Enabled
Resolve Threats: Scan only
Database Version: 2017.11.20.01
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(1).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(11).vir.XLS -> Cloud:Macro.MSExcel.Downloader
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(12).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(13).vir.html -> Cloud:Trojan.Script.Downloader
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(14).vir.rtf -> Cloud:Exploit.RTF.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(15).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(16).vir.DOCX -> Cloud:Malware.MSOffice.Dropper
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(17).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(18).vir.rtf -> Cloud:Exploit.RTF.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(19).vir.rtf -> Cloud:Exploit.RTF.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(2).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(20).vir.vbs -> Cloud:Malware.Script.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(21).vir.exe -> Cloud:Trojan.Win32.Gamethief
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(22).vir.exe -> Trojan.Win32.Ransom.Bl!GEN
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(23).vir.DOCX -> Cloud:Exploit.MSOffice.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(24).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(25).vir.js -> Cloud:Trojan.Script.Downloader
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(26).vir.exe -> Malware.Win32.Generic!MS
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(27).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(29).vir.DOCX -> Cloud:Malware.MSOffice.Dropper
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(3).vir.rtf -> Cloud:Exploit.RTF.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(30).vir.rtf -> Cloud:Exploit.RTF.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(31).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(32).vir.exe -> Hacktool.Win32.Confuser.Aa
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(33).vir.vbs -> Cloud:Malware.Script.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(34).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(36).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(37).vir.DOC -> Cloud:Macro.MSWord.Downloader
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(38).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(39).vir.XLS -> Cloud:Macro.MSExcel.Downloader
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(40).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(41).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(42).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(43).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(44).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(45).vir.exe -> Malware.Win32.Generic!MS
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(47).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(48).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(5).vir.html -> Cloud:Malware.Script.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(6).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(7).vir.exe -> Cloud:Trojan.Win32.Emotet
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(9).vir.exe -> Cloud:Trojan.Win32.Injector
Elapsed Time: 00:01:03
Total File: 50
Skipped File: 4
Infected File: 42



Emsisoft Emergency Kit - 版本 2017.10
上次更新： 2017/11/21 9:27:02
用户帐号： TECLAST\Admin
电脑名称： TECLAST
操作系统版本： Windows 10x64

扫描设置：

扫描方式： 自定义扫描
对象： Rootkits, 内存, C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\

检测流氓软件(PUPs)： On
扫描压缩包： On
扫描邮件存档： On
ADS数据流： On
文件扩展名过滤： Off
直接磁盘访问： Off

扫描开始于：        2017/11/21 9:53:54
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(14).vir.rtf -> (dummy)         发现病毒： Exploit.RTF-ObfsStrm.Gen (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(18).vir.rtf -> (dummy)         发现病毒： Exploit.RTF-ObfsStrm.Gen (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(25).vir.js -> (INFECTED_JS)         发现病毒： JS:Trojan.Cryxos.976 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(23).vir.DOCX -> word/_rels/document.xml.rels         发现病毒： Trojan.Doc.Downloader.AFO (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(3).vir.rtf -> (dummy)         发现病毒： Exploit.RTF-ObfsStrm.Gen (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(30).vir.rtf -> (dummy)         发现病毒： Exploit.RTF-ObfsStrm.Gen (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(29).vir.DOCX -> word/embeddings/oleObject1.bin -> unblock.bat         发现病毒： Trojan.LNK.Downloader.BW (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/Owitedo.class         发现病毒： Java.Trojan.GenericGB.19960 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/MufaboYaqisur.class         发现病毒： Java.Trojan.GenericGB.19908 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/ForicOwajisup.class         发现病毒： Java.Trojan.GenericGB.19917 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/ZosodEhakinuf.class         发现病毒： Java.Trojan.GenericGB.19913 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/Orelode.class         发现病毒： Java.Trojan.GenericGB.19913 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/TovoXiqapipuv.class         发现病毒： Java.Trojan.GenericGB.19907 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(16).vir.DOCX         发现病毒： Trojan.Dropper.ZDX (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(1).vir.exe         发现病毒： Gen:Variant.Symmi.80282 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(17).vir.exe         发现病毒： Gen:Variant.MSILPerseus.118215 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(2).vir.exe         发现病毒： Gen:Variant.Symmi.80282 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(21).vir.exe         发现病毒： Gen:Variant.Johnnie.24510 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(22).vir.exe         发现病毒： Generic.Ransom.GlobeImposter.E09F0DBC (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(24).vir.exe         发现病毒： Trojan-Downloader.Delf (A) [291434]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(26).vir.exe         发现病毒： Trojan.Agent.CQNG (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(32).vir.exe         发现病毒： Trojan.Generic.22632711 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(31).vir.exe         发现病毒： Gen:Variant.Jaik.20210 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(34).vir.exe         发现病毒： Gen:Variant.Johnnie.76493 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(36).vir.exe         发现病毒： Trojan.Agent.CQOL (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(40).vir.exe         发现病毒： Trojan.Agent.CQOL (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(41).vir.exe         发现病毒： Trojan.GenericKD.12580269 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(43).vir.exe         发现病毒： Trojan.Agent (A) [289603]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(45).vir.exe         发现病毒： Trojan.Agent.CQOS (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(47).vir.exe         发现病毒： Gen:Variant.Midie.42073 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(48).vir.exe         发现病毒： Gen:Variant.Symmi.80303 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(49).vir.Linux_ELF         发现病毒： Trojan.Miner.F (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(6).vir.exe         发现病毒： Gen:Variant.Symmi.80273 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(7).vir.exe         发现病毒： Gen:Variant.Razy.222823 (B) [krnl.xmd]

已扫描        1677
发现        34

扫描完成后：        2017/11/21 9:54:28
扫描时间：        0:00:34




ESET Smart Security Premium 64位（高级启发式（Y）+压缩文件（Y）+自解压加壳（Y）+DNY智能签名（Y）++（Windows 10 Creators Update（Redstone 2）....）：Found nothing

日志
正在扫描日志
检测引擎的版本: 16443P (20171120)
日期: 2017/11/21  时间: 9:45:53
已扫描的磁盘、文件夹和文件: C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(1).vir.exe - Win32/Injector.DTMG 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(10).vir.dll - Win32/Urlbot.NAX 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(11).vir.XLS - VBA/TrojanDownloader.Agent.FJI 特洛伊木马 - 已清除
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(12).vir.exe - Win32/PSW.Fareit.L 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(14).vir.rtf - Win32/Exploit.CVE-2017-0199.EE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(15).vir.exe - Win32/Injector.DTRF 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(16).vir.DOCX - Java/Adwind.A 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(17).vir.exe - MSIL/Filecoder.FU 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(2).vir.exe - Win32/PSW.Fareit.A 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(20).vir.vbs - VBS/Kryptik.AV 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(22).vir.exe - Win32/Filecoder.FV 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(23).vir.DOCX - DOC/TrojanDownloader.Agent.CO 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(24).vir.exe - Win32/TrojanDownloader.Delf.CFW 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(25).vir.js - VBS/Obfuscated.G 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(26).vir.exe - Win32/Kryptik.FZGB 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(27).vir.exe - Win32/Injector.DTQR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(28).vir.jar - Java/Adwind.AAU 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(29).vir.DOCX - Generik.IQDJHC 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(30).vir.rtf - Win32/Exploit.CVE-2017-0199.EC 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(31).vir.exe - Win32/Injector.DTQY 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(32).vir.exe - MSIL/Packed.Confuser.J 可疑应用程序 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(33).vir.vbs - VBS/Kryptik.D 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(34).vir.exe - Win32/Filecoder.FV 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(35).vir.Linux_ELF - Linux/Dnsamp.D 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(36).vir.exe - Win32/Injector.DTRW 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(37).vir.DOC - VBA/TrojanDownloader.Agent.FJH 特洛伊木马 - 已清除
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(39).vir.XLS - VBA/TrojanDownloader.Agent.FJM 特洛伊木马 - 已清除
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(40).vir.exe - Win32/Injector.DTRW 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(41).vir.exe - Win32/GenKryptik.BDIN 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(42).vir.exe - Win32/GenKryptik.BDIN 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(43).vir.exe - MSIL/Injector.SSQ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(44).vir.exe > NSIS > Script.nsi - NSIS/TrojanDownloader.Agent.NWV 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(45).vir.exe - Win32/Spy.Ursnif.BK 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(47).vir.exe - Win32/Spy.Ursnif.AO 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(48).vir.exe - Win32/Injector.DTQS 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(49).vir.Linux_ELF - Linux/CoinMiner.B 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(5).vir.html - VBS/TrojanDownloader.Agent.PJI 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar - Java/Adwind.AAU 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(6).vir.exe - Win32/Injector.DTRJ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(7).vir.exe - Win32/Emotet.AZ 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(8).vir.exe > ZIP >  - 压缩文件已损坏
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(9).vir.exe - Win32/Injector.DTRA 特洛伊木马 的变种 - 通过删除清除 [1]
已扫描的对象数: 762
发现的威胁数: 41
已清除对象数: 41
完成时间: 9:46:38  总扫描时间: 45 秒 (00:00:45)

备注:
[1] 由于对象中仅包含病毒主体，因此已被删除。



火绒安全---（ Windows 7 Ultimate with SP1 简体中文旗舰版....）：部分未知文件已发送到seclab@huorong.cn，等处理中。。。

病毒库：2017/11/20 16:09
开始时间：2017/11/21 09:35
总计用时：00:00:29
扫描对象：3360个
扫描文件：50个
发现风险：11个
已处理风险：0个


发现系统修复项：0个
处理系统修复项：0个
文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120.rar
文件大小: 11.7 MB (12,354,930 字节)
修改时间: 2017年11月21日，09:34:31
MD5: 3B02B77C06925771AC8B74062C534634
SHA1: E055311C2600BD90A0BE5C9599135B84CE6839EC
SHA256: DB62852D470045B6A5C2EF60D986F63614DFE50F9B5E0928C7D561E8105075CA
SHA512: 7BA9325F3F4D452252113F28B29B27EC33D3E562AC24B953C77E626F06F7499BD680DDFFAE3E893CB3AB9ABE231C12E00BCD1723246ACF828F22252977234057
CRC32: AE9016D4
计算时间: 0.31s


病毒详情

风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(11).vir.XLS, 病毒名：HEUR:OMacro/Autoex.a, 病毒ID：[a845db595363c490], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(10).vir.dll, 病毒名：Trojan/Urlbot.b, 病毒ID：[20c51be6f78c41be], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(12).vir.exe, 病毒名：HVM:Trojan/Injector.gen!A, 病毒ID：[cc4a875f53a5d678], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(22).vir.exe, 病毒名：Ransom/Skunk.a, 病毒ID：[cc6a2d79f08bcaba], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(13).vir.html, 病毒名：SVM:TrojanDownloader/JS.Nemucod.y, 病毒ID：[89692fc7045db0f], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(34).vir.exe, 病毒名：VirTool/Kovter.p, 病毒ID：[e92bbf97494898d2], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(39).vir.XLS, 病毒名：OMacro/Downloader.vm, 病毒ID：[473d1835839b1d4e], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(41).vir.exe, 病毒名：Trojan/Generic!CC22F0F7D24CFBAC, 病毒ID：[cc22f0f7d24cfbac], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(47).vir.exe, 病毒名：HEUR:VirTool/Obfuscator.gen!C, 病毒ID：[9f7c74f7afee22c], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(8).vir.exe, 病毒名：Adware/Destiny, 病毒ID：[f1bc38934c79103a], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(9).vir.exe, 病毒名：Trojan/Injector.dl, 病毒ID：[cec17aa3dea03ae5], 处理结果：已忽略

回复

举报

dongwenqi
发表于 2017-11-21 08:05:15 | 显示全部楼层
xxmattyboi 发表于 2017-11-20 23:58
趋势 Kill 7X 主防清了一个 所以只扫描了49个

怀念VISTA SP2
回复

举报

dolphin
发表于 2017-11-21 09:50:14 | 显示全部楼层
SEP 35x
数字卫士补3x
大蜘蛛纯扫描再补3x
剩余9x
回复

举报

桑德尔
头像被屏蔽
发表于 2017-11-21 10:01:03 | 显示全部楼层
红伞杀38，剩12
回复

举报

dongwenqi
发表于 2017-11-21 10:40:55 | 显示全部楼层
68221281 发表于 2017-11-20 20:35
卡巴kill38x，其中清除16号docx（但貌似清的不彻底，清除后的文件https://www.virustotal.com/#/file/d2f9c ...

尊敬的用户您好！

该样本已经可以被检测出，请将数据库更新到最新后试一下。
Virus(11).vir.XLS - HEUR:Trojan.Script.Agent.gen
Virus(12).vir.exe - Backdoor.Win32.Buterat.fnyr
Virus(28).vir.jar - HEUR:Trojan.Java.Agent.gen
Virus(37).vir.DOC - HEUR:Trojan.Script.Agent.gen
Virus(39).vir.XLS - HEUR:Trojan.OLE2.Agent.gen
Virus(9).vir.exe - Backdoor.Win32.Androm.onjc

感谢您的帮助，在您提交的样本中有新的检测，请稍后更新最新数据库试一下。
Virus(21).vir.exe - Constructor.MSIL.Agent.jo
Virus(25).vir.js - Trojan-Dropper.JS.Agent.nn
Virus(29).vir.DOCX - Trojan.BAT.Agent.aua
Virus(32).vir.exe - Backdoor.MSIL.Agent.yow

Virus(46).vir.exe - not-a-virus:RemoteAdmin.Win32.RemoteSupport.b
Virus(23).vir.docm - hxxps://files[.]catbox[.]moe/s5xolv[.]doc

感谢您对卡巴斯基的信任与支持！
回复

举报

cemiko 该用户已被删除
发表于 2017-11-21 11:13:16 | 显示全部楼层
dongwenqi 发表于 2017-11-21 10:40
尊敬的用户您好！

该样本已经可以被检测出，请将数据库更新到最新后试一下。

卡巴的样本处理速度还是不错的
回复

举报

dongwenqi
发表于 2017-11-21 11:16:46 | 显示全部楼层
68221281 发表于 2017-11-21 11:13
卡巴的样本处理速度还是不错的

实际上昨天早就入库了，今早发邮件通知
回复

举报

maomao110
发表于 2017-11-21 14:44:15 | 显示全部楼层
ELOHIM 发表于 2017-11-20 20:22
一扫余文件如下：

这是WD的成绩？
回复

举报

下一页 »
1234下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-28 14:48 , Processed in 0.104781 second(s), 14 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表