本帖最后由 小飞侠.net 于 2018-4-10 22:00 编辑
火绒安全---( Windows 7 Ultimate with SP1 简体中文旗舰版....):部分未知文件已发送到seclab@huorong.cn,等处理中。。。
病毒库:2018-04-10 17:53
开始时间:2018-04-10 21:16
总计用时:00:00:10
扫描对象:48个
扫描文件:17个
发现风险:10个
已处理风险:0个
发现系统修复项:0个
处理系统修复项:0个
病毒详情
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus17x 0410\(13).exe, 病毒名:Trojan/MSIL.Obfuscated.aa, 病毒ID:[e9befd070708869c], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus17x 0410\(10).exe, 病毒名:Trojan/MSIL.Obfuscated.au, 病毒ID:[92524c6e479609de], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus17x 0410\(18).msi, 病毒名:Trojan/VBInject.b, 病毒ID:[e2ec2b122e102473], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus17x 0410\(15).exe, 病毒名:HVM:VirTool/Obfuscator.gen!A, 病毒ID:[b27d4294cde6a1ec], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus17x 0410\(11).exe, 病毒名:VirTool/Kovter.p, 病毒ID:[e92bbf97494898d2], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus17x 0410\(3).exe, 病毒名:Trojan/VBInject.b, 病毒ID:[e2ec2b122e102473], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus17x 0410\(5).exe, 病毒名:Trojan/VBInject.b, 病毒ID:[e2ec2b122e102473], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus17x 0410\(4).exe, 病毒名:Trojan/VBInject.b, 病毒ID:[e2ec2b122e102473], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus17x 0410\(7).exe, 病毒名:Trojan/MSIL.Obfuscated.au, 病毒ID:[92524c6e479609de], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus17x 0410\(9).exe, 病毒名:Trojan/VBInject.b, 病毒ID:[e2ec2b122e102473], 处理结果:已忽略
文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\Virus17x 0410.rar
文件大小: 7.05 MB (7,399,978 字节)
修改时间: 2018年04月10日,21:13:20
MD5: F208432143061AF8D91E5FFBE0FC579A
SHA1: 571194C9C57C6DFEEED970B707267FBD23E04511
SHA256: 5F2B15090B3E59D21B8191BDAA6408CF0109281CB9886A341D703A7AAA3638E6
SHA512: 545B10093394E3A8F288B81FEDFACA3C9E89CC9E3D566F578CDBF26416DD896CDA7BCC4C662318CF31B40CB10E5132E64F7E41F4F4928A137FD51B02320E2488
CRC32: 6FD49D51
计算时间: 0.19s
ESET Smart Security Premium 64位(高级启发式(Y)+压缩文件(Y)+自解压加壳(Y)+DNA智能签名(Y)++(Windows 10 Creators Update(Redstone 3)....):
日志
正在扫描日志
检测引擎的版本: 17198P (20180410)
日期: 2018/4/10 时间: 21:31:43
已扫描的磁盘、文件夹和文件: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(1).exe - MSIL/Kryptik.NGX 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(10).exe - MSIL/Kryptik.NMB 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(11).exe - Win32/Kryptik.GFKF 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(12).exe - Win32/Injector.DXFL 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(13).exe - MSIL/Kryptik.NOR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(14).exe - Win32/Injector.DXFE 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(15).exe - Win32/Kryptik.GFJM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(17).exe - MSIL/TrojanDownloader.Agent.EJI 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(18).msi > MSI > Binary._D7D112F049BA1A655B5D9A1D0702DEE5 - Win32/Injector.DXFB 特洛伊木马 的变种 - 扫描完成后再选择处理方式
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(2).exe - MSIL/Kryptik.NGX 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(3).exe - Win32/Injector.DXFT 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(4).exe - Win32/Injector.DXFT 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(5).exe - Win32/Injector.DXFB 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(6).exe - MSIL/Kryptik.NAS 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(7).exe - MSIL/Kryptik.NMB 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(8).exe - Win32/Spy.Zbot.ADC 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(9).exe - Win32/Injector.DXFB 特洛伊木马 的变种 - 通过删除清除 [1]
已扫描的对象数: 32
发现的威胁数: 17
已清除对象数: 16
完成时间: 21:32:08 总扫描时间: 25 秒 (00:00:25)
备注:
[1] 由于对象中仅包含病毒主体,因此已被删除。
Emsisoft Emergency Kit - 版本 2018.3
上次更新: 2018/4/10 21:25:43
用户帐号: TECLAST\Admin
电脑名称: TECLAST
操作系统版本: Windows 10x64
Emsisoft Emergency Kit 绿色免费版
(已开启)加入 Emsisoft 云、更新源:测试版
Bitdefender(B)+Emsisoft(A) 双引擎
扫描设置:
扫描方式: 自定义扫描
对象: Rootkits, 内存, C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\
检测流氓软件(PUPs): On
扫描压缩包: On
扫描邮件存档: Off
ADS数据流: On
文件扩展名过滤: Off
直接磁盘访问: Off
扫描开始于: 2018/4/10 21:49:40
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(18).msi -> (Embedded EXE) 发现风险: Gen:Variant.Razy.296743 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(10).exe 发现风险: Gen:Variant.Ursu.167712 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(1).exe 发现风险: Trojan.GenericKD.30576111 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(13).exe 发现风险: Trojan.GenericKD.30578024 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(14).exe 发现风险: Gen:Variant.Graftor.482982 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(5).exe 发现风险: Gen:Variant.Graftor.482971 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(3).exe 发现风险: Gen:Variant.Razy.296834 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(4).exe 发现风险: Gen:Variant.Razy.296834 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(9).exe 发现风险: Gen:Variant.Razy.296852 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(8).exe 发现风险: Gen:Variant.Strictor.161052 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(15).exe 发现风险: Trojan.Ransom.GandCrab.Gen.2 (B) [krnl.xmd]
已扫描 1889
发现 11
扫描完成后: 2018/4/10 21:50:07
扫描时间: 0:00:27
瑞星---(Windows 10 Creators Update(Redstone 3)....):云引擎(开)RDM+引擎(开)
瑞星反恶软引擎命令行扫描器(社区交流版)
编译于:Sep 22 2017 15:07:50
提示:
- 本工具供社区交流使用,请勿用于其他用途
- 本工具没有恶意软件删除、清除、隔离功能
- 本工具包含开发中的新特性,结果仅供参考
* 命令行中的选项开关:-output-json -log=C:\瑞星RDM+引擎\ScanLog_180410215508.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51
* 加载恶软签名库: C:\瑞星RDM+引擎/malware.rmd
* 恶软签名库加载成功,发布序号为 4036
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Tue Apr 10 21:55:25 2018
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(17).exe","infect":{"engine":"sha1","signature":"c2hhMTqo/eGSlRq3A4SU1C8owaR2G/G+bg","threat":"Trojan.Fuery!8.EAFB"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(14).exe","infect":{"engine":"rdmk","signature":"cmRtazppIQBXWehLtE2/JTXmi9X9","threat":"Malware.Heuristic!ET#100%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(12).exe","infect":{"engine":"sha1","signature":"c2hhMTosfOQkkMWGDY67YhPcwytKr0N2SQ","threat":"Trojan.Generic!8.C3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(1).exe","infect":{"engine":"sha1","signature":"c2hhMTp35Y6WHPUWDIb0RUqDg3UkKZlOeg","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(15).exe","infect":{"engine":"sha1","signature":"c2hhMTq+teZOF64hVLuM9HM0tOH6Jw94Xg","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(13).exe","infect":{"engine":"rdmk","signature":"cmRtazqrhkuJkINY8XjNRdFXPXGi","threat":"Malware.Heuristic!ET#86%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(10).exe","infect":{"engine":"sha1","signature":"c2hhMTqVBD4ulTIJmTgVbBUpV7eqpXT76A","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(18).msi","type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(11).exe","infect":{"engine":"sha1","signature":"c2hhMTqvLW1MXBvOZFtPRurRMDll9ONMOw","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(2).exe","infect":{"engine":"sha1","signature":"c2hhMTpCYEPhAOwDmPxRDg0xiQnVjaqm3g","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(5).exe","infect":{"engine":"sha1","signature":"c2hhMTr3Sznp4hpat7oQnxFpSdLUCXOFvQ","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(3).exe","infect":{"engine":"sha1","signature":"c2hhMTpf5/BC1RqXNoAjA2CbvIxVH8Mc4A","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(4).exe","infect":{"engine":"sha1","signature":"c2hhMTqs0nainlc3yisEmq8/bw7HrTzZSQ","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(6).exe","infect":{"engine":"sha1","signature":"c2hhMTqU4aZPEHXQyLylkqQLydf5XZFYfw","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(7).exe","infect":{"engine":"sha1","signature":"c2hhMTquVNhiKy7TVEunGw1GVmOFassZsQ","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(8).exe","infect":{"engine":"sha1","signature":"c2hhMTogfvJ+yOBNfCwQmQg5DPhTkN1GQQ","threat":"Spyware.Zbot!8.16B"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\Virus17x 0410t6FD49D51\\Virus17x 0410\\(9).exe","infect":{"engine":"sha1","signature":"c2hhMTorQZOo9FtwidOe1N280/zo+mkI0Q","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
扫描结束: Tue Apr 10 21:55:25 2018
总扫描耗时: 0:0:697(m:s:ms)
总扫描对象: 17
总扫描文件: 17
总恶意文件: 16
有效检出率: 94.12%
X-Sec Antivirus ---(Windows 10 Creators Update(Redstone 3)....):
Basic Info:
---------------------
Database Version: 2018.04.08.01
Program Version: 2.1.1.0
Heuristic Engine: Enabled
Cloud Engine: Enabled
Enhanced Mode: Disabled
Backup Before Resolve: Yes
Resolve Threats: Scan only
Scan Priority: Normal
---------------------
Targets:
---------------------
C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51
---------------------
2018/04/10 21:58:27 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(10).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/04/10 21:58:28 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(11).exe -- [Cloud] Cloud:Trojan.Win32.Banker
2018/04/10 21:58:29 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(12).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018/04/10 21:58:30 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(13).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/04/10 21:58:30 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(1).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/04/10 21:58:31 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(14).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018/04/10 21:58:31 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(15).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018/04/10 21:58:31 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(17).exe -- [Classic] Hacktool.Win32.Confuser.Aa
2018/04/10 21:58:32 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(18).msi -- [Cloud] Cloud:Malware.MSOffice.Generic
2018/04/10 21:58:41 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(2).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/04/10 21:58:41 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(3).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018/04/10 21:58:49 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(5).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018/04/10 21:58:49 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(4).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018/04/10 21:58:55 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(7).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/04/10 21:58:55 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(6).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018/04/10 21:58:59 Threat Detected: C:\Users\Admin\Desktop\AVtest100\Virus17x 0410t6FD49D51\Virus17x 0410\(9).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
|