本帖最后由 小飞侠.net 于 2018-6-16 23:01 编辑
X-Sec Antivirus ---（Windows 10 Creators Update（Redstone 4）....1803）：
Basic Info:
---------------------
Database Version: 2018.06.13.01
Program Version: 2.1.1.0
Heuristic Engine: Enabled
Cloud Engine: Enabled
Enhanced Mode: Disabled
Backup Before Resolve: Yes
Resolve Threats: Scan only
Scan Priority: Normal
---------------------
Targets:
---------------------
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140
---------------------
2018-06-16 22:55:25 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(10).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-16 22:55:25 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(11).exe -- [Cloud] Cloud:Trojan.Win32.Trickbot
2018-06-16 22:55:26 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(12).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-16 22:55:29 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(1).exe -- [Cloud] Cloud:Trojan.Win32.Ransom
2018-06-16 22:55:29 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(14).exe -- [Cloud] Cloud:Trojan.Win32.Infostealer
2018-06-16 22:55:32 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(13).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018-06-16 22:55:33 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(16).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-16 22:55:34 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(15).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018-06-16 22:55:35 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(18).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-16 22:55:39 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(17).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018-06-16 22:55:47 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(3).exe -- [Cloud] Cloud:Trojan.Win32.Infostealer
2018-06-16 22:55:47 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(4).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-16 22:55:49 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(2).exe -- [Cloud] Cloud:Adware.Win32.Generic
2018-06-16 22:55:56 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(6).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-16 22:55:58 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(5).exe -- [Cloud] Cloud:Trojan.Win32.Autoit
2018-06-16 22:55:58 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(7).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018-06-16 22:55:59 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(8).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-16 22:56:10 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(9).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-16 22:56:10 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(10).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-16 22:56:12 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(11).exe -- [Cloud] Cloud:Trojan.Win32.Trickbot
2018-06-16 22:56:13 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(12).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-16 22:56:14 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(1).exe -- [Cloud] Cloud:Trojan.Win32.Ransom
2018-06-16 22:56:15 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(14).exe -- [Cloud] Cloud:Trojan.Win32.Infostealer
2018-06-16 22:56:27 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(15).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018-06-16 22:56:29 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(13).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018-06-16 22:56:30 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(16).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-16 22:56:31 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(18).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-16 22:56:42 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(17).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018-06-16 22:57:00 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(3).exe -- [Cloud] Cloud:Trojan.Win32.Infostealer
2018-06-16 22:57:01 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(4).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-16 22:57:05 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(2).exe -- [Cloud] Cloud:Adware.Win32.Generic
2018-06-16 22:57:17 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(6).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-16 22:57:18 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(5).exe -- [Cloud] Cloud:Trojan.Win32.Autoit
2018-06-16 22:57:19 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(7).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018-06-16 22:57:19 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(8).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-16 22:57:27 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(9).exe -- [Cloud] Cloud:Trojan.Win32.Generic
瑞星---（Windows 10 Creators Update（Redstone 4）....1803）：云引擎（开）RDM+引擎（开）
瑞星反恶软引擎命令行扫描器（社区交流版）
编译于：Sep 22 2017 15:07:50
提示：
- 本工具供社区交流使用，请勿用于其他用途
- 本工具没有恶意软件删除、清除、隔离功能
- 本工具包含开发中的新特性，结果仅供参考
* 命令行中的选项开关：-output-json -log=C:\瑞星RDM+引擎\ScanLog_180616225104.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140
* 加载恶软签名库： C:\瑞星RDM+引擎/malware.rmd
* 恶软签名库加载成功，发布序号为 4419
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Sat Jun 16 22:51:09 2018
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(12).exe","infect":{"engine":"md5","signature":"bWQ1OkTgLOW1VhsLoV8VIO7D3yk","threat":"Dropper.Danabot!8.FAFD"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(14).exe","infect":{"engine":"md5","signature":"bWQ1Ok02oKPoG2on33bcVDa7C4E","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(10).exe","infect":{"engine":"rdmk","signature":"cmRtazpo8AjSN16PvdzOLn+tqzaZ","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(11).exe","infect":{"engine":"md5","signature":"bWQ1OjiMG52zvumafkIh4ccav5A","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(16).exe","infect":{"engine":"rdmk","signature":"cmRtazo/LfYORDjMfYDv1ueu1tFI","threat":"Downloader.Dapato!8.B87"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(1).exe","infect":{"engine":"rdmk","signature":"cmRtazpQeKwnEPsXqiUWZzX+/Lu3","threat":"Ransom.Cryptor!8.10A9"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(15).exe","infect":{"engine":"rdmk","signature":"cmRtazp/svWY6qeZhqpFlOOqrFAZ","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(13).exe","infect":{"engine":"md5","signature":"bWQ1OmGdOdTjenxHie/RoI5q8L4","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(18).exe","infect":{"engine":"rdmk","signature":"cmRtazqo79azUxFR3gHNWK3ctFwk","threat":"Malware.Heuristic!ET#86%"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(4).exe","infect":{"engine":"md5","signature":"bWQ1OmgOXk4glzS++wGcnVgzKi8","threat":"Trojan.Emotet!8.B95"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(17).exe","infect":{"engine":"md5","signature":"bWQ1OpiblrXxKnzZH+ANqi0J31A","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(7).exe","infect":{"engine":"md5","signature":"bWQ1OhemxVF8o4pC7/3vxQVE8ns","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(6).exe","infect":{"engine":"md5","signature":"bWQ1OjuBX5H9kSBcuyUzyNo7Ixs","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(3).exe","infect":{"engine":"md5","signature":"bWQ1Os6jYpHhDFsDn18djORVj4A","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(8).exe","infect":{"engine":"md5","signature":"bWQ1Ouo/T/6+JEF0ZEyn9cWG27Y","threat":"Dropper.Danabot!8.FAFD"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(5).exe","infect":{"engine":"md5","signature":"bWQ1OvvaXV9fsSMHKWyHqxXDG0A","threat":"Backdoor.Xtreme!8.25A"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(2).exe","infect":{"engine":"md5","signature":"bWQ1OmlUstqzFdBxtSl0+9eMlww","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(10).exe","infect":{"engine":"md5","signature":"bWQ1OheoBU7b88i1q/06HvuKAWs","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Modified Samples\\(9).exe","infect":{"engine":"md5","signature":"bWQ1OqDUCtV/BGWBvFv6fqM+y6c","threat":"Spyware.Noon!8.E7C9"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(11).exe","infect":{"engine":"md5","signature":"bWQ1OvUZKklg/V72kDLnj06LOMk","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(14).exe","infect":{"engine":"md5","signature":"bWQ1Ora3+mku3YQ9GuwLre5vl+8","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(13).exe","infect":{"engine":"md5","signature":"bWQ1OlzwoK2lVZk+obpYvGq22qo","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(16).exe","infect":{"engine":"md5","signature":"bWQ1Otx8XFV95+toeClOMT4jCDo","threat":"Downloader.Dapato!8.B87"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(15).exe","infect":{"engine":"md5","signature":"bWQ1OgbJmQpTYsTBAESc1PljMZE","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(18).exe","infect":{"engine":"md5","signature":"bWQ1OrqWPFsgN1P5vwTPu//B9bQ","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(17).exe","infect":{"engine":"md5","signature":"bWQ1OlI3OdTnLEOJFbKClsTRaP8","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(4).exe","infect":{"engine":"md5","signature":"bWQ1OjGtD13QHBMCnhli5IUmIOE","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(3).exe","infect":{"engine":"md5","signature":"bWQ1OtOJZoUjWytA/ReS2aCxu6M","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(2).exe","infect":{"engine":"md5","signature":"bWQ1Oic3hz0t7kSFXqIfP+47BeM","threat":"Trojan.Win32.Generic.19F4B248"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(6).exe","infect":{"engine":"md5","signature":"bWQ1OqRPYDYNaxYINC+9mLsUcLk","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(7).exe","infect":{"engine":"md5","signature":"bWQ1OjcKzPo0bh1KmbFe7YumBPY","threat":"Spyware.Noon!8.E7C9"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(5).exe","infect":{"engine":"md5","signature":"bWQ1OuK7I2Z3awKH4OYGF88ASN0","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(8).exe","infect":{"engine":"md5","signature":"bWQ1OvXlobEtQUOXb+bDRF4DbD8","threat":"Dropper.Danabot!8.FAFD"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(9).exe","infect":{"engine":"md5","signature":"bWQ1OuvC1stUzJfG579SYwiqqyk","threat":"Spyware.Noon!8.E7C9"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(1).exe","infect":{"engine":"md5","signature":"bWQ1OpnjGYlyFX3AkldWXVWhyVM","threat":"Ransom.Cryptor!8.10A9"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0613BTCware2140\\PACKAGE 0613\\Samples\\(12).exe","infect":{"engine":"md5","signature":"bWQ1OgexWGZgpTO3GZ9mPReUFJg","threat":"Dropper.Danabot!8.FAFD"},"type":"scan"}
扫描结束: Sat Jun 16 22:51:11 2018
总扫描耗时: 0:1:792(m:s:ms)
总扫描对象: 36
总扫描文件: 36
总恶意文件: 36
有效检出率: 100.00%
Emsisoft Emergency Kit - 版本 2018.4
上次更新： 2018-06-16 22:28:36
用户帐号： TECLAST\Admin
电脑名称： TECLAST
操作系统版本： Windows 10 x64
Emsisoft Emergency Kit 绿色免费版
(已开启)加入 Emsisoft 云、更新源：测试版
Bitdefender（B）+Emsisoft（A） 双引擎
扫描设置：
扫描方式： 自定义扫描
对象： Rootkits, C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\
检测流氓软件(PUPs)： On
扫描压缩包： On
扫描邮件存档： Off
ADS数据流： On
文件扩展名过滤： Off
直接磁盘访问： Off
扫描开始于： 2018-06-16 22:33:15
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(5).exe -> (AutoIT Script) -> (unicode) 发现风险： AIT:Trojan.Nymeria.364 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(5).exe -> (AutoIT r) -> (AutoIT Script) -> (unicode) 发现风险： AIT:Trojan.Nymeria.364 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(5).exe -> (AutoIT r) -> (AutoIT Script) -> (unicode) 发现风险： AIT:Trojan.Nymeria.364 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(5).exe -> (AutoIT Script) -> (unicode) 发现风险： AIT:Trojan.Nymeria.364 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(7).exe -> (NSIS o) -> lzma_nsis0003 发现风险： Trojan.GenericKD.30919210 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(2).exe -> (Instyler o) -> (Instyler Module 40) 发现风险： Trojan.GenericKD.30966332 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(2).exe -> (Instyler o) -> (Instyler Module 40) 发现风险： Trojan.GenericKD.30966332 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(10).exe 发现风险： Trojan.Emotet (A) [294194]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(11).exe 发现风险： Trojan.Agent (A) [294228]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(13).exe 发现风险： Trojan.Injector (A) [294206]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(12).exe 发现风险： Trojan.GenericKD.30970454 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(16).exe 发现风险： Trojan.GenericKD.30969331 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(18).exe 发现风险： Trojan.Emotet (A) [294194]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(14).exe 发现风险： Gen:Heur.PonyStealer.2 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(17).exe 发现风险： Trojan.GenericKDZ.44583 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(4).exe 发现风险： Trojan.Emotet (A) [294213]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(3).exe 发现风险： Trojan.Injector (A) [294198]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(6).exe 发现风险： Trojan.Injector (A) [294116]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(15).exe 发现风险： Gen:Variant.Graftor.496311 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(7).exe 发现风险： Trojan.GenericKD.30976405 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(9).exe 发现风险： Trojan.Injector (A) [294198]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(8).exe 发现风险： Trojan.GenericKD.30970459 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(1).exe 发现风险： Generic.Ransom.Rapid.1231AEB3 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(10).exe 发现风险： Trojan.Emotet (A) [294194]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(11).exe 发现风险： Trojan.Agent (A) [294228]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(13).exe 发现风险： Trojan.Injector (A) [294206]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(12).exe 发现风险： Trojan.GenericKD.30965742 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(1).exe 发现风险： Generic.Ransom.Rapid.DD112D7A (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(14).exe 发现风险： Gen:Heur.PonyStealer.2 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(17).exe 发现风险： Trojan.GenericKD.30957189 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(18).exe 发现风险： Trojan.Emotet (A) [294194]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(16).exe 发现风险： Gen:Variant.Zusy.289685 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(15).exe 发现风险： Gen:Variant.Strictor.165705 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(4).exe 发现风险： Trojan.Emotet (A) [294213]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(3).exe 发现风险： Trojan.Injector (A) [294198]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(6).exe 发现风险： Trojan.Injector (A) [294116]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(8).exe 发现风险： Trojan.GenericKD.30965745 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(9).exe 发现风险： Trojan.Injector (A) [294198]
已扫描 630
发现 38
扫描完成后： 2018-06-16 22:33:29
扫描时间： 0:00:14
ESET Smart Security Premium 64位（高级启发式（Y）+压缩文件（Y）+自解压加壳（Y）+DNA智能签名（Y）++（Windows 10 Creators Update（Redstone 4）....1803）：
日志
正在扫描日志
检测引擎的版本: 17562P (20180616)
日期: 2018-06-16 时间: 22:15:14
已扫描的磁盘、文件夹和文件: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(1).exe - Win32/Filecoder.Rapid.A 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(10).exe - Win32/Kryptik.GHSP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(11).exe - Win32/Injector.DYRK 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(12).exe - Win32/TrojanDropper.Danabot.B 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(13).exe - Win32/Injector.DYPX 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(14).exe - Win32/Injector.CQQA 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(15).exe - Win32/Injector.DYQC 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(16).exe - Win32/GenKryptik.CCLE 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(17).exe - Win32/Injector.DYOX 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(18).exe - Win32/Kryptik.GHSP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(2).exe > INNO > {tmp}\dependency.dll - Win32/Kryptik.GEPR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(2).exe > INNO > script_decompiled.pas - Win32/Kryptik.GHUC 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(3).exe - Win32/Injector.DYPT 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(4).exe - Win32/Emotet.BK 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(5).exe > AUTOIT > script.bin - Win32/Injector.Autoit.DGN 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(6).exe - Win32/Injector.DYNC 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(7).exe > NSIS > individualists.dll - Win32/Injector.DYKG 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(8).exe - Win32/TrojanDropper.Danabot.B 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Modified Samples\(9).exe - Win32/Injector.DYQF 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(1).exe - Win32/Filecoder.Rapid.A 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(10).exe - Win32/Kryptik.GHSP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(11).exe - Win32/Injector.DYRK 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(12).exe - Win32/TrojanDropper.Danabot.B 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(13).exe - Win32/Injector.DYPX 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(14).exe - Win32/Injector.CQQA 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(15).exe - Win32/Injector.DYQC 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(16).exe - Generik.FQDGXMK 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(17).exe - Win32/Injector.DYOX 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(18).exe - Win32/Kryptik.GHSP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(2).exe > INNO > {tmp}\dependency.dll - Win32/Kryptik.GEPR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(2).exe > INNO > script_decompiled.pas - Win32/Kryptik.GHUC 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(3).exe - Win32/Injector.DYPT 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(4).exe - Win32/Emotet.BK 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(5).exe > AUTOIT > script.bin - Win32/Injector.Autoit.DGN 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(6).exe - Win32/Injector.DYNC 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(7).exe - Win32/Formbook.AA 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(8).exe - Win32/TrojanDropper.Danabot.B 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0613BTCware2140\PACKAGE 0613\Samples\(9).exe - Win32/Injector.DYQF 特洛伊木马 的变种 - 通过删除清除 [1]
已扫描的对象数: 153
发现的威胁数: 38
已清除对象数: 38
完成时间: 22:17:32 总扫描时间: 138 秒 (00:02:18)
备注:
[1] 由于对象中仅包含病毒主体，因此已被删除。
Dr.Web CureIt! 简体中文绿色免费版---（ Windows 7 Ultimate with SP1 简体中文旗舰版....）：
-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Command line used:-rpcep:\pipe\28815946C -rpcpr:np
Limit the use of the computer resources to 100%
Instances used for this session: 10
Object(s) to scan:
- C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(10).exe - infected with Trojan.EmotetENT.242
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(10).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(14).exe - infected with Trojan.PWS.Stealer.21854
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(14).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(18).exe - infected with Trojan.Emotet.240
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(18).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(12).exe - infected with Trojan.PWS.DanaBot.18
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(12).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(11).exe - infected with Trojan.DownLoader26.50667
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(11).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(4).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(7).exe - infected with Trojan.Inject1.54688
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(7).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(15).exe - infected with Trojan.Inject1.54688
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(15).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(8).exe - infected with Trojan.DownLoader26.50629
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(8).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(17).exe - infected with Trojan.PWS.Stealer.1932
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(17).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(10).exe - infected with Trojan.EmotetENT.242
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(10).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(11).exe - infected with Trojan.DownLoader26.50667
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(11).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(3).exe - infected with Trojan.Inject1.54688
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(3).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(9).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(6).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(13).exe - infected with Trojan.Nanocore.23
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(13).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(14).exe - infected with Trojan.PWS.Stealer.21854
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(14).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(5).exe - infected with Trojan.Virtumod.11842
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(5).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(18).exe - infected with Trojan.Emotet.240
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(18).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(1).exe - infected with Trojan.Encoder.24249
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(1).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(1).exe - infected with Trojan.Encoder.24249
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(1).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(12).exe - infected with Trojan.PWS.DanaBot.18
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(12).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(13).exe - infected with Trojan.Nanocore.23
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(13).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(4).exe - Ok
Error to send CureIt! statistics: (12029)
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(17).exe - infected with Trojan.PWS.Stealer.1932
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(17).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(7).exe - infected with Trojan.Inject1.54688
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(7).exe - infected
Error to send CureIt! statistics: (12029)
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(6).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(5).exe - infected with Trojan.Virtumod.11842
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(5).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(15).exe - infected with Trojan.Inject1.54688
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(15).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(9).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(3).exe - infected with Trojan.Inject1.54688
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(3).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(8).exe - infected with Trojan.DownLoader26.50629
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(8).exe - infected
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(2).exe is INNO SETUP container
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(2).exe is INNO SETUP container
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(2).exe\Script2.bin is BINARYRES container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(16).exe - infected with BackDoor.Radmin.169
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(16).exe - infected
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(2).exe\Script2.bin is BINARYRES container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(16).exe - infected with BackDoor.Radmin.169
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(16).exe - infected
Error to send CureIt! statistics: (12029)
Error to send CureIt! statistics: (12029)
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(2).exe - container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(2).exe - container
Total 21367514 bytes in 36 files scanned (150 objects)
Total 8 files (122 objects) are clean
Total 28 files are infected
Scan time is 00:00:05.877
火绒安全---（ Windows 7 Ultimate with SP1 简体中文旗舰版....）：部分未知文件已发送到seclab@huorong.cn，等处理中。。。
文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613.rar
文件大小: 10.9 MB (11,519,599 字节)
修改时间: 2018年06月15日，21:32:00
MD5: 9E86316380B17082648945ECD27586D5
SHA1: 252F39B714F8D71489CEF5D825AA1A5FB4DCCFF8
SHA256: 09FACBFFA180E84946031757402BB8B2A49F35360DDDA30889AEE2D343053147
SHA512: 9174A47541E0FCC3058A19FD8D58587EF856E0090A75D72A2D64CCEA87F9DBB71AA3417742E4178344C9B5D740A9056728881A98AD7A7D7F379184E7CA47B27D
CRC32: 1FCAC0D1
计算时间: 0.58s
病毒库：2018-06-15 16:40
开始时间：2018-06-15 21:34
总计用时：00:00:04
扫描对象：46个
扫描文件：36个
发现风险：36个
已处理风险：0个
发现系统修复项：0个
处理系统修复项：0个
病毒详情
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(1).exe, 病毒名：Ransom/BTCware.b, 病毒ID：[f9f8369cc3e7a30f], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(10).exe, 病毒名：Trojan/Generic!DBB52145CA32BD3C, 病毒ID：[dbb52145ca32bd3c], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(14).exe, 病毒名：Trojan/Generic!06F509CCBEE8F1A0, 病毒ID：[6f509ccbee8f1a0], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(12).exe, 病毒名：Trojan/Generic!04CB029617A99130, 病毒ID：[4cb029617a99130], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(11).exe, 病毒名：Trojan/Generic!30BB4EFFFFBA72FA, 病毒ID：[30bb4effffba72fa], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(16).exe, 病毒名：Trojan/Generic!513AA178CFEFC0E8, 病毒ID：[513aa178cfefc0e8], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(15).exe, 病毒名：Trojan/Generic!FFE0F23436E4AB5A, 病毒ID：[ffe0f23436e4ab5a], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(18).exe, 病毒名：Trojan/Generic!9AC8884F5592F2B2, 病毒ID：[9ac8884f5592f2b2], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(13).exe, 病毒名：Trojan/Generic!CB660AFA16FD89E8, 病毒ID：[cb660afa16fd89e8], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(17).exe, 病毒名：Trojan/Generic!5630974BD49B4E61, 病毒ID：[5630974bd49b4e61], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(3).exe, 病毒名：HEUR:Trojan/VBCode.be, 病毒ID：[58ecd128ab121f57], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(4).exe, 病毒名：Trojan/Generic!AE5364972F632219, 病毒ID：[ae5364972f632219], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(5).exe, 病毒名：Trojan/Generic!2573CB5BB6909656, 病毒ID：[2573cb5bb6909656], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(6).exe, 病毒名：Trojan/Generic!B845418FC9ED3D98, 病毒ID：[b845418fc9ed3d98], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(8).exe, 病毒名：Trojan/Generic!2B42812CEF59877C, 病毒ID：[2b42812cef59877c], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(2).exe, 病毒名：Trojan/Generic!AA3E06513F734E37, 病毒ID：[aa3e06513f734e37], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(10).exe, 病毒名：Trojan/Generic!CCEA82AAA8FA3916, 病毒ID：[ccea82aaa8fa3916], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(9).exe, 病毒名：HEUR:Trojan/VBCode.be, 病毒ID：[58ecd128ab121f57], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Modified Samples\(7).exe, 病毒名：Trojan/Generic!DB32DE80EAE65201, 病毒ID：[db32de80eae65201], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(12).exe, 病毒名：Trojan/Generic!8E60C3F658E3666E, 病毒ID：[8e60c3f658e3666e], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(11).exe, 病毒名：Trojan/Generic!06301290E402F8C9, 病毒ID：[6301290e402f8c9], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(1).exe, 病毒名：Ransom/BTCware.b, 病毒ID：[f9f8369cc3e7a30f], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(14).exe, 病毒名：Trojan/Generic!5D1C02134F865B84, 病毒ID：[5d1c02134f865b84], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(13).exe, 病毒名：Trojan/Generic!1247FD13FA6B712A, 病毒ID：[1247fd13fa6b712a], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(16).exe, 病毒名：Trojan/Generic!DB314E8047707153, 病毒ID：[db314e8047707153], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(15).exe, 病毒名：Trojan/Generic!FC90C0B4CEF46CFE, 病毒ID：[fc90c0b4cef46cfe], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(18).exe, 病毒名：Trojan/Generic!2AD6E4FCF5FADC86, 病毒ID：[2ad6e4fcf5fadc86], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(4).exe, 病毒名：Trojan/Generic!4434DCF71DF3B991, 病毒ID：[4434dcf71df3b991], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(17).exe, 病毒名：Trojan/Generic!234EA04C81FCCC2F, 病毒ID：[234ea04c81fccc2f], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(2).exe, 病毒名：Trojan/Generic!EBE69BE91878317A, 病毒ID：[ebe69be91878317a], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(6).exe, 病毒名：Trojan/Generic!67AE0197778C21AF, 病毒ID：[67ae0197778c21af], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(5).exe, 病毒名：Trojan/Generic!866D7FE14DCB17F4, 病毒ID：[866d7fe14dcb17f4], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(7).exe, 病毒名：Trojan/Generic!D132D6D5F9A75580, 病毒ID：[d132d6d5f9a75580], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(8).exe, 病毒名：Trojan/Generic!508956696BA57892, 病毒ID：[508956696ba57892], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(3).exe, 病毒名：HEUR:Trojan/VBCode.be, 病毒ID：[58ecd128ab121f57], 处理结果：已忽略
风险路径：C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0613\Samples\(9).exe, 病毒名：HEUR:Trojan/VBCode.be, 病毒ID：[58ecd128ab121f57], 处理结果：已忽略
|
楼主: Jerry.Lin
[复制链接]
发表于 2018-6-14 01:25:13
