本帖最后由 小飞侠.net 于 2017-11-21 10:05 编辑
瑞星---(Windows 10 Creators Update(Redstone 2)....):云引擎(开)RDM+(开)
瑞星反恶软引擎命令行扫描器(社区交流版)
编译于:Sep 22 2017 15:07:50
提示:
- 本工具供社区交流使用,请勿用于其他用途
- 本工具没有恶意软件删除、清除、隔离功能
- 本工具包含开发中的新特性,结果仅供参考
* 命令行中的选项开关:-output-json -log=C:\瑞星RDM+引擎\ScanLog_171121095803.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120
* 加载恶软签名库: C:\瑞星RDM+引擎/malware.rmd
* 恶软签名库加载成功,发布序号为 3202
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Tue Nov 21 09:58:20 2017
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(11).vir.XLS","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(14).vir.rtf","infect":{"engine":"sha1","signature":"c2hhMTqaff9iHKxnx5vBrf7kIBZqf8q5bw","threat":"Exploit.CVE-2017-0199.Gen!1.AECA"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(15).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpwKN74z0fz9mj6mHY1fWFTXofoPg","threat":"Malware.Strealer!8.1EF"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(13).vir.html","infect":{"engine":"sha1","signature":"c2hhMToc8/3hjbH0EKpkkpxIvfi+vNLiWQ","threat":"Trojan.DL-Generic/JS!1.A4A8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(17).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTrNgLfIU/e5aI/9MpRAwlczuiRszw","threat":"Dropper.Generic!8.35E"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(18).vir.rtf","infect":{"engine":"sha1","signature":"c2hhMTpsE/t2zAZWhoG3mdwqi8R/340/Jw","threat":"Exploit.CVE-2017-0199.Gen!1.AECA"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(1).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTq+6IR6uvFSpXo96zieYQMbHXC7Tw","threat":"Trojan.Injector!1.AE36"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(16).vir.DOCX","infect":{"engine":"sha1","signature":"c2hhMTpPY8LV9lUiGN22ogGXgRM705icdg","threat":"Trojan.Agent!8.B1E"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(2).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTp6/GcqOc3dN0nKmvMI2RU+jOAjtA","threat":"Trojan.Injector!1.AE36"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(20).vir.vbs","infect":{"engine":"sha1","signature":"c2hhMTqa46pxRuZSdVhRD+/jqBkhTcEXiQ","threat":"Worm.Jenxcus!8.409"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(19).vir.rtf","infect":{"engine":"sha1","signature":"c2hhMTr+GR7r389YhA7Gk2hABf3JLpLrAg","threat":"Exploit.CVE-2017-8759.Gen!1.AEC4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(25).vir.js","infect":{"engine":"sha1","signature":"c2hhMTo63d1VGUFrR47UpXUyxzFZrEqvOw","threat":"Trojan.Obfuscated!8.4C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(12).vir.exe","infect":{"engine":"rdmk","signature":"cmRtazpRpLg7Cwus/jZp2D7smpdP","threat":"Malware.Heuristic!ET#88%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(24).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTp84wW/s6YL8p5Z6UcHFQdqgpO6yQ","threat":"Downloader.Delf!8.16F"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(22).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTrXQvfZrp9lMbYjIZLQJ6IqPGHj7Q","threat":"Ransom.Purgen!1.AC62"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(10).vir.dll","infect":{"engine":"sha1","signature":"c2hhMToYcK1SQ+4GJpcEHfD1FUB0rfHWPw","threat":"Trojan.Urlbot!8.2FD"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(27).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTqaorE0GRmBp35s641kZsnq+Bp14A","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(21).vir.exe","infect":{"engine":"rdmk","signature":"cmRtazpX+EjRujEzHAyAJtMaie33","threat":"Malware.Heuristic!ET#83%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(3).vir.rtf","infect":{"engine":"sha1","signature":"c2hhMTqqTzeWYa6QAxjU3+eW7TKLZ7RTRw","threat":"Exploit.CVE-2015-1650!8.EF7D"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(30).vir.rtf","infect":{"engine":"sha1","signature":"c2hhMTpDCu6SXvxc15WPYGGamLhTFm91og","threat":"Exploit.CVE-2017-0199.Gen!1.AECA"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(31).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTotfZI3OUF3d+wMRY452ZOnUkxfhw","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(35).vir.Linux_ELF","infect":{"engine":"classic","threat":"Trojan.DDoS-MrBlack/Linux!1.A484"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(23).vir.DOCX","infect":{"engine":"sha1","signature":"c2hhMTp0cgJPAiTpQY83xmCvbSLU4Kj3EQ","threat":"Downloader.Agent!8.B23"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(34).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTra2mqXABBtQoZL6h4qgi4iUvKGfg","threat":"Trojan.Generic!8.C3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(33).vir.vbs","infect":{"engine":"sha1","signature":"c2hhMToF49EJNtJ2pM02ABhdhT+mV7XybA","threat":"I-Worm.Qoma.b"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(39).vir.XLS","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(29).vir.DOCX","infect":{"engine":"sha1","signature":"c2hhMToHvscmR3P5jwqUvWzwoFUsQ3+/3A","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(32).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpCaqsnYlkQ0Z8JzJVduzFawBgGLA","threat":"Dropper.Generic!8.35E"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(36).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpsHijG0fgRMZMev6/ySBHlSAx0CA","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(4).vir.exe","infect":{"engine":"sha1","signature":"c2hhMToqkA6gjmkz0rkPfh+L7rueZySxKw","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(41).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTrEY9D2V0YF0jv8ZsPT5CWVwT1Q8w","threat":"Downloader.Dofoil!8.322"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(42).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTqzRGQvznGuLuTHnsKRcIeRVlVKHg","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(43).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTopBhr/J+eJmSnNmxI9RqWt8l72GQ","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(40).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTp8Qv5vOhkn8BR59vPQxGNZHeGr3w","threat":"Spyware.Recam!8.5E5"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(44).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpvyqJ5+oG6Cn9s5MLqzQIp5irGBQ","threat":"Downloader.Agent!8.B23"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(45).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpOR67fkOFDkEdc25PVPasXHO+Vfg","threat":"Spyware.Ursnif!8.1DEF"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(26).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTqLYfvrOiy+KlWOPbet7wzNPfR+dQ","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(5).vir.html","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(37).vir.DOC","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(47).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTqWNy4HaSUUQlZ58OKeQJifTjqnPA","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(48).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTp6oIGIK/F79cGGm15XzVSM00JZ1A","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(49).vir.Linux_ELF","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(46).vir.exe","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(7).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTp5+GvZborQEr5/svJmI+xppKxJvg","threat":"Malware.Undefined!8.C"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(6).vir.exe","infect":{"engine":"sha1","signature":"c2hhMTpYaWwFvT2kVze7zQJ0cEVMhI8AGA","threat":"Trojan.VBKrypt!8.5C0"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(9).vir.exe","infect":{"engine":"rdmk","signature":"cmRtazqwy1QSYYHXjEhBO6dbCRVS","threat":"Malware.Heuristic!ET#99%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(8).vir.exe","infect":{"engine":"rdmk","signature":"cmRtazoR/jmSt812yAN2POnD077N","threat":"Malware.Heuristic!ET#100%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(50).vir.jar","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(38).vir.exe","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\AE9016D4Up1120\\Virus50x 1120\\Virus(28).vir.jar","type":"scan"}
扫描结束: Tue Nov 21 09:58:34 2017
总扫描耗时: 0:13:531(m:s:ms)
总扫描对象: 1107
总扫描文件: 50
总恶意文件: 41
有效检出率: 82.00%
X-Sec Antivirus ---(Windows 10 Creators Update(Redstone 2)....):
Start Time: Tue Nov 21 10:01:24 2017
Scan Type: Custom Scan
Scan Target: C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120
Heuristic Engine: Enabled
Cloud Engine: Enabled
Resolve Threats: Scan only
Database Version: 2017.11.20.01
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(1).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(11).vir.XLS -> Cloud:Macro.MSExcel.Downloader
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(12).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(13).vir.html -> Cloud:Trojan.Script.Downloader
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(14).vir.rtf -> Cloud:Exploit.RTF.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(15).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(16).vir.DOCX -> Cloud:Malware.MSOffice.Dropper
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(17).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(18).vir.rtf -> Cloud:Exploit.RTF.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(19).vir.rtf -> Cloud:Exploit.RTF.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(2).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(20).vir.vbs -> Cloud:Malware.Script.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(21).vir.exe -> Cloud:Trojan.Win32.Gamethief
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(22).vir.exe -> Trojan.Win32.Ransom.Bl!GEN
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(23).vir.DOCX -> Cloud:Exploit.MSOffice.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(24).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(25).vir.js -> Cloud:Trojan.Script.Downloader
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(26).vir.exe -> Malware.Win32.Generic!MS
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(27).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(29).vir.DOCX -> Cloud:Malware.MSOffice.Dropper
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(3).vir.rtf -> Cloud:Exploit.RTF.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(30).vir.rtf -> Cloud:Exploit.RTF.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(31).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(32).vir.exe -> Hacktool.Win32.Confuser.Aa
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(33).vir.vbs -> Cloud:Malware.Script.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(34).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(36).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(37).vir.DOC -> Cloud:Macro.MSWord.Downloader
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(38).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(39).vir.XLS -> Cloud:Macro.MSExcel.Downloader
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(40).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(41).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(42).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(43).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(44).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(45).vir.exe -> Malware.Win32.Generic!MS
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(47).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(48).vir.exe -> Cloud:Trojan.Win32.Injector
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(5).vir.html -> Cloud:Malware.Script.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(6).vir.exe -> Cloud:Trojan.Win32.Generic
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(7).vir.exe -> Cloud:Trojan.Win32.Emotet
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(9).vir.exe -> Cloud:Trojan.Win32.Injector
Elapsed Time: 00:01:03
Total File: 50
Skipped File: 4
Infected File: 42
Emsisoft Emergency Kit - 版本 2017.10
上次更新: 2017/11/21 9:27:02
用户帐号: TECLAST\Admin
电脑名称: TECLAST
操作系统版本: Windows 10x64
扫描设置:
扫描方式: 自定义扫描
对象: Rootkits, 内存, C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\
检测流氓软件(PUPs): On
扫描压缩包: On
扫描邮件存档: On
ADS数据流: On
文件扩展名过滤: Off
直接磁盘访问: Off
扫描开始于: 2017/11/21 9:53:54
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(14).vir.rtf -> (dummy) 发现病毒: Exploit.RTF-ObfsStrm.Gen (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(18).vir.rtf -> (dummy) 发现病毒: Exploit.RTF-ObfsStrm.Gen (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(25).vir.js -> (INFECTED_JS) 发现病毒: JS:Trojan.Cryxos.976 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(23).vir.DOCX -> word/_rels/document.xml.rels 发现病毒: Trojan.Doc.Downloader.AFO (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(3).vir.rtf -> (dummy) 发现病毒: Exploit.RTF-ObfsStrm.Gen (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(30).vir.rtf -> (dummy) 发现病毒: Exploit.RTF-ObfsStrm.Gen (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(29).vir.DOCX -> word/embeddings/oleObject1.bin -> unblock.bat 发现病毒: Trojan.LNK.Downloader.BW (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/Owitedo.class 发现病毒: Java.Trojan.GenericGB.19960 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/MufaboYaqisur.class 发现病毒: Java.Trojan.GenericGB.19908 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/ForicOwajisup.class 发现病毒: Java.Trojan.GenericGB.19917 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/ZosodEhakinuf.class 发现病毒: Java.Trojan.GenericGB.19913 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/Orelode.class 发现病毒: Java.Trojan.GenericGB.19913 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar -> uru/bipozi/TovoXiqapipuv.class 发现病毒: Java.Trojan.GenericGB.19907 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(16).vir.DOCX 发现病毒: Trojan.Dropper.ZDX (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(1).vir.exe 发现病毒: Gen:Variant.Symmi.80282 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(17).vir.exe 发现病毒: Gen:Variant.MSILPerseus.118215 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(2).vir.exe 发现病毒: Gen:Variant.Symmi.80282 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(21).vir.exe 发现病毒: Gen:Variant.Johnnie.24510 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(22).vir.exe 发现病毒: Generic.Ransom.GlobeImposter.E09F0DBC (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(24).vir.exe 发现病毒: Trojan-Downloader.Delf (A) [291434]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(26).vir.exe 发现病毒: Trojan.Agent.CQNG (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(32).vir.exe 发现病毒: Trojan.Generic.22632711 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(31).vir.exe 发现病毒: Gen:Variant.Jaik.20210 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(34).vir.exe 发现病毒: Gen:Variant.Johnnie.76493 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(36).vir.exe 发现病毒: Trojan.Agent.CQOL (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(40).vir.exe 发现病毒: Trojan.Agent.CQOL (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(41).vir.exe 发现病毒: Trojan.GenericKD.12580269 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(43).vir.exe 发现病毒: Trojan.Agent (A) [289603]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(45).vir.exe 发现病毒: Trojan.Agent.CQOS (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(47).vir.exe 发现病毒: Gen:Variant.Midie.42073 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(48).vir.exe 发现病毒: Gen:Variant.Symmi.80303 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(49).vir.Linux_ELF 发现病毒: Trojan.Miner.F (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(6).vir.exe 发现病毒: Gen:Variant.Symmi.80273 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(7).vir.exe 发现病毒: Gen:Variant.Razy.222823 (B) [krnl.xmd]
已扫描 1677
发现 34
扫描完成后: 2017/11/21 9:54:28
扫描时间: 0:00:34
ESET Smart Security Premium 64位(高级启发式(Y)+压缩文件(Y)+自解压加壳(Y)+DNY智能签名(Y)++(Windows 10 Creators Update(Redstone 2)....):Found nothing
日志
正在扫描日志
检测引擎的版本: 16443P (20171120)
日期: 2017/11/21 时间: 9:45:53
已扫描的磁盘、文件夹和文件: C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(1).vir.exe - Win32/Injector.DTMG 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(10).vir.dll - Win32/Urlbot.NAX 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(11).vir.XLS - VBA/TrojanDownloader.Agent.FJI 特洛伊木马 - 已清除
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(12).vir.exe - Win32/PSW.Fareit.L 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(14).vir.rtf - Win32/Exploit.CVE-2017-0199.EE 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(15).vir.exe - Win32/Injector.DTRF 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(16).vir.DOCX - Java/Adwind.A 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(17).vir.exe - MSIL/Filecoder.FU 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(2).vir.exe - Win32/PSW.Fareit.A 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(20).vir.vbs - VBS/Kryptik.AV 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(22).vir.exe - Win32/Filecoder.FV 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(23).vir.DOCX - DOC/TrojanDownloader.Agent.CO 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(24).vir.exe - Win32/TrojanDownloader.Delf.CFW 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(25).vir.js - VBS/Obfuscated.G 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(26).vir.exe - Win32/Kryptik.FZGB 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(27).vir.exe - Win32/Injector.DTQR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(28).vir.jar - Java/Adwind.AAU 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(29).vir.DOCX - Generik.IQDJHC 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(30).vir.rtf - Win32/Exploit.CVE-2017-0199.EC 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(31).vir.exe - Win32/Injector.DTQY 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(32).vir.exe - MSIL/Packed.Confuser.J 可疑应用程序 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(33).vir.vbs - VBS/Kryptik.D 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(34).vir.exe - Win32/Filecoder.FV 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(35).vir.Linux_ELF - Linux/Dnsamp.D 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(36).vir.exe - Win32/Injector.DTRW 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(37).vir.DOC - VBA/TrojanDownloader.Agent.FJH 特洛伊木马 - 已清除
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(39).vir.XLS - VBA/TrojanDownloader.Agent.FJM 特洛伊木马 - 已清除
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(40).vir.exe - Win32/Injector.DTRW 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(41).vir.exe - Win32/GenKryptik.BDIN 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(42).vir.exe - Win32/GenKryptik.BDIN 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(43).vir.exe - MSIL/Injector.SSQ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(44).vir.exe > NSIS > Script.nsi - NSIS/TrojanDownloader.Agent.NWV 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(45).vir.exe - Win32/Spy.Ursnif.BK 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(47).vir.exe - Win32/Spy.Ursnif.AO 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(48).vir.exe - Win32/Injector.DTQS 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(49).vir.Linux_ELF - Linux/CoinMiner.B 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(5).vir.html - VBS/TrojanDownloader.Agent.PJI 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(50).vir.jar - Java/Adwind.AAU 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(6).vir.exe - Win32/Injector.DTRJ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(7).vir.exe - Win32/Emotet.AZ 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(8).vir.exe > ZIP > - 压缩文件已损坏
C:\Users\Admin\Desktop\AVtest100\AE9016D4Up1120\Virus50x 1120\Virus(9).vir.exe - Win32/Injector.DTRA 特洛伊木马 的变种 - 通过删除清除 [1]
已扫描的对象数: 762
发现的威胁数: 41
已清除对象数: 41
完成时间: 9:46:38 总扫描时间: 45 秒 (00:00:45)
备注:
[1] 由于对象中仅包含病毒主体,因此已被删除。
火绒安全---( Windows 7 Ultimate with SP1 简体中文旗舰版....):部分未知文件已发送到seclab@huorong.cn,等处理中。。。
病毒库:2017/11/20 16:09
开始时间:2017/11/21 09:35
总计用时:00:00:29
扫描对象:3360个
扫描文件:50个
发现风险:11个
已处理风险:0个
发现系统修复项:0个
处理系统修复项:0个
文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120.rar
文件大小: 11.7 MB (12,354,930 字节)
修改时间: 2017年11月21日,09:34:31
MD5: 3B02B77C06925771AC8B74062C534634
SHA1: E055311C2600BD90A0BE5C9599135B84CE6839EC
SHA256: DB62852D470045B6A5C2EF60D986F63614DFE50F9B5E0928C7D561E8105075CA
SHA512: 7BA9325F3F4D452252113F28B29B27EC33D3E562AC24B953C77E626F06F7499BD680DDFFAE3E893CB3AB9ABE231C12E00BCD1723246ACF828F22252977234057
CRC32: AE9016D4
计算时间: 0.31s
病毒详情
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(11).vir.XLS, 病毒名:HEUR:OMacro/Autoex.a, 病毒ID:[a845db595363c490], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(10).vir.dll, 病毒名:Trojan/Urlbot.b, 病毒ID:[20c51be6f78c41be], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(12).vir.exe, 病毒名:HVM:Trojan/Injector.gen!A, 病毒ID:[cc4a875f53a5d678], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(22).vir.exe, 病毒名:Ransom/Skunk.a, 病毒ID:[cc6a2d79f08bcaba], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(13).vir.html, 病毒名:SVM:TrojanDownloader/JS.Nemucod.y, 病毒ID:[89692fc7045db0f], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(34).vir.exe, 病毒名:VirTool/Kovter.p, 病毒ID:[e92bbf97494898d2], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(39).vir.XLS, 病毒名:OMacro/Downloader.vm, 病毒ID:[473d1835839b1d4e], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(41).vir.exe, 病毒名:Trojan/Generic!CC22F0F7D24CFBAC, 病毒ID:[cc22f0f7d24cfbac], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(47).vir.exe, 病毒名:HEUR:VirTool/Obfuscator.gen!C, 病毒ID:[9f7c74f7afee22c], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(8).vir.exe, 病毒名:Adware/Destiny, 病毒ID:[f1bc38934c79103a], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\刘1\艾2\61647309\85014225\孙3\Windows Defender\AVTestZipX\Virus50x 1120\Virus(9).vir.exe, 病毒名:Trojan/Injector.dl, 病毒ID:[cec17aa3dea03ae5], 处理结果:已忽略
|