S5+M5(.doc|emotet)（18.06.14）

petr0vic

https://my.mixtape.moe/llqnop.rar

infected

StarlitFuture

360杀毒  06 14 16:29

Samples(5/5) + M(5/5) = Total(10/10)  100%

1. 360杀毒扫描日志
   
2. 
   
3. 病毒库版本：
   
4. 扫描时间：2018-06-14 16:28:13
   
5. 扫描用时：00:00:01
   
6. 扫描类型：右键扫描
   
7. 扫描文件总数：5
   
8. 项目总数：5
   
9. 清除项目数：5
   
10. 
    
11. 扫描选项
    
12. ----------------------
    
13. 扫描所有文件：是
    
14. 扫描压缩包：是
    
15. 发现病毒处理方式：由360杀毒自动处理
    
16. 扫描磁盘引导区：是
    
17. 扫描 Rootkit：是
    
18. 使用云查杀引擎：是
    
19. 使用QVM人工智能引擎：是
    
20. 扫描建议修复项：是
    
21. 常规引擎设置：未使用
    
22. 
    
23. 扫描内容
    
24. ----------------------
    
25. C:\Users\Home\Downloads\Vir\1.doc
    
26. C:\Users\Home\Downloads\Vir\2.doc
    
27. C:\Users\Home\Downloads\Vir\3.doc
    
28. C:\Users\Home\Downloads\Vir\4.doc
    
29. C:\Users\Home\Downloads\Vir\5.doc
    
30. 
    
31. 
    
32. 白名单设置
    
33. ----------------------
    
34. 
    
35. 
    
36. 扫描结果
    
37. ======================
    
38. 高危风险项
    
39. ----------------------
    
40. C:\Users\Home\Downloads\Vir\1.doc        virus.office.qexvmc.1085        已修复
    
41. C:\Users\Home\Downloads\Vir\2.doc        virus.office.qexvmc.1085        已修复
    
42. C:\Users\Home\Downloads\Vir\5.doc        virus.office.obfuscated.4        已修复
    
43. C:\Users\Home\Downloads\Vir\4.doc        virus.office.obfuscated.4        已修复
    
44. C:\Users\Home\Downloads\Vir\3.doc        virus.office.obfuscated.4        已修复
    

复制代码

1. 360杀毒扫描日志
   
2. 
   
3. 病毒库版本：
   
4. 扫描时间：2018-06-14 16:28:24
   
5. 扫描用时：00:00:01
   
6. 扫描类型：右键扫描
   
7. 扫描文件总数：5
   
8. 项目总数：5
   
9. 清除项目数：5
   
10. 
    
11. 扫描选项
    
12. ----------------------
    
13. 扫描所有文件：是
    
14. 扫描压缩包：是
    
15. 发现病毒处理方式：由360杀毒自动处理
    
16. 扫描磁盘引导区：是
    
17. 扫描 Rootkit：是
    
18. 使用云查杀引擎：是
    
19. 使用QVM人工智能引擎：是
    
20. 扫描建议修复项：是
    
21. 常规引擎设置：未使用
    
22. 
    
23. 扫描内容
    
24. ----------------------
    
25. C:\Users\Home\Downloads\Vir\M
    
26. 
    
27. 
    
28. 白名单设置
    
29. ----------------------
    
30. 
    
31. 
    
32. 扫描结果
    
33. ======================
    
34. 高危风险项
    
35. ----------------------
    
36. C:\Users\Home\Downloads\Vir\M\1.doc        virus.office.qexvmc.1085        已修复
    
37. C:\Users\Home\Downloads\Vir\M\2.doc        virus.office.qexvmc.1085        已修复
    
38. C:\Users\Home\Downloads\Vir\M\5.doc        virus.office.obfuscated.4        已修复
    
39. C:\Users\Home\Downloads\Vir\M\4.doc        virus.office.obfuscated.4        已修复
    
40. C:\Users\Home\Downloads\Vir\M\3.doc        virus.office.obfuscated.4        已修复
    
41. 
    
42. 
    
43. 
    
44. 可疑文件上传结果
    
45. ----------------------
    
46. c:\users\home\downloads\vir\m\1.doc        上传成功
    
47. c:\users\home\downloads\vir\m\4.doc        上传成功
    
48. c:\users\home\downloads\vir\m\5.doc        上传成功
    

复制代码

761773275

Baidu Antivirus
Samples(0/5) + M(0/5) = Total(0/10)

Nocria

G DATA has no detection.

YU2711

Symantec  Endpoint Protection
Samples(5/5) + M(5/5) = Total(10/10)
ISB.Downloader!gen80ISB.Downloader!gen80

ATP_synthase

卡巴全灭

540923555

WD清空

ATP_synthase

StarlitFuture 发表于 2018-6-14 16:31
360杀毒  06 14 16:29

Samples(5/5) + M(5/5) = Total(10/10)  100%

360修复文件了吗，没删除

Jerry.Lin

1. 
   
2. Antivirus Pro
   
3. Report file date: 2018-06-14 17:17:54
   
4. 
   
5. 
   
6. The program is running as an unrestricted full version.
   
7. 
   
8. 
   
9. 
   
10. Configuration settings for the scan:
    
11. AutoActionOnDetection: on
    
12. Network scanning enabled: on
    
13. Upload to cloud enabled: on
    
14. Upload to cloud confirmation needed: off
    
15. DetectionUnpackedGen: off
    
16. DetectionDamagedGen: off
    
17. Maximum number of clients: 10
    
18. Heuristic macro: 1
    
19. Heuristic files: 3
    
20. Scan archives: on
    
21. Smart extensions: on
    
22. Archive scan types:
    
23. Limit recursion depth: on
    
24. Recursion depth: 20
    
25. Maximum unpack size: 1073741824
    
26. Unpack ratio: 250
    
27. Excluded files:
    
28. C:\Users\zhong\Downloads\Compressed\Corel VideoStudio\Keygen.exe
    
29. 
    
30. Start of the scan: 2018-06-14 17:17:54
    
31. 06/14/2018,17-17-54        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\m\3.doc
    
32. 06/14/2018,17-17-54        [INFO]        [DETECTION] file contains 'W97M/Agent.8308720'
    
33. 06/14/2018,17-17-54        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\m\4.doc
    
34. 06/14/2018,17-17-54        [INFO]        [DETECTION] file contains 'W97M/Agent.8308720'
    
35. 06/14/2018,17-17-55        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\m\5.doc
    
36. 06/14/2018,17-17-55        [INFO]        [DETECTION] file contains 'W97M/Agent.8308721'
    
37. 06/14/2018,17-17-55        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\3.doc
    
38. 06/14/2018,17-17-55        [INFO]        [DETECTION] file contains 'W97M/Agent.8308720'
    
39. 06/14/2018,17-17-55        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\4.doc
    
40. 06/14/2018,17-17-55        [INFO]        [DETECTION] file contains 'W97M/Agent.8308720'
    
41. 06/14/2018,17-17-55        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\5.doc
    
42. 06/14/2018,17-17-55        [INFO]        [DETECTION] file contains 'W97M/Agent.8308720'
    
43. 06/14/2018,17-17-55        [INFO]        repair.rdf loaded (version: 1.0.42.4)
    
44. 06/14/2018,17-17-55        [INFO]        Repair of Generic started.
    
45. 06/14/2018,17-17-57        [INFO]        Repair of Generic finished successfully.
    
46. 06/14/2018,17-17-57        [INFO]        Repair of W97M/Agent.8308720 started.
    
47. 06/14/2018,17-17-59        [INFO]        Repair of W97M/Agent.8308720 finished successfully.
    
48. 06/14/2018,17-18-00        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\m\3.doc
    
49. 06/14/2018,17-18-00        [INFO]        [ACTION] Clean
    
50. 06/14/2018,17-18-00        [WARN]        The file could not be repaired by Engine: c:\users\zhong\downloads\compressed\virus test\llqnop\vir\m\3.doc. Virus: W97M/Agent.8308720. Category: virus. Error Code: 0
    
51. 06/14/2018,17-18-00        [INFO]        Repair of W97M/Agent.8308720 started.
    
52. 06/14/2018,17-18-00        [INFO]        Repair of W97M/Agent.8308720 finished successfully.
    
53. 06/14/2018,17-18-01        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\m\4.doc
    
54. 06/14/2018,17-18-01        [INFO]        [ACTION] Clean
    
55. 06/14/2018,17-18-01        [INFO]        Repair of W97M/Agent.8308721 started.
    
56. 06/14/2018,17-18-01        [INFO]        Repair of W97M/Agent.8308721 finished successfully.
    
57. 06/14/2018,17-18-01        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\m\5.doc
    
58. 06/14/2018,17-18-01        [INFO]        [ACTION] Clean
    
59. 06/14/2018,17-18-01        [INFO]        Repair of W97M/Agent.8308720 started.
    
60. 06/14/2018,17-18-01        [INFO]        Repair of W97M/Agent.8308720 finished successfully.
    
61. 06/14/2018,17-18-02        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\3.doc
    
62. 06/14/2018,17-18-02        [INFO]        [ACTION] Clean
    
63. 06/14/2018,17-18-02        [INFO]        Repair of W97M/Agent.8308720 started.
    
64. 06/14/2018,17-18-02        [INFO]        Repair of W97M/Agent.8308720 finished successfully.
    
65. 06/14/2018,17-18-02        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\4.doc
    
66. 06/14/2018,17-18-02        [INFO]        [ACTION] Clean
    
67. 06/14/2018,17-18-02        [INFO]        Repair of W97M/Agent.8308720 started.
    
68. 06/14/2018,17-18-02        [INFO]        Repair of W97M/Agent.8308720 finished successfully.
    
69. 06/14/2018,17-18-03        [INFO]        c:\users\zhong\downloads\compressed\virus test\llqnop\vir\5.doc
    
70. 06/14/2018,17-18-03        [INFO]        [ACTION] Clean
    
71. 
    
72. ---------------------------------------------------------
    
73. 
    
74. End of scan : 2018-06-14 17:18:03
    
75. Duration : 00m:08s:818ms
    
76. 
    
77. The scan has been done completely.
    
78. 
    
79.       2 Scanned directories
    
80.       0 Scanned archives
    
81.      10 Scanned files
    
82.       0 Skipped files
    
83.       0 Ignored files
    
84.       6 Detected files
    
85.       5 Infected files cleaned
    
86.       1 Warnings
    
87. 
    
88. ---------------------------------------------------------
    

复制代码

Dust-;羅錠

191196846 发表于 2018-6-14 17:22

我今天试用了一下Avira antivirus pro business edition，结果把我的启动项全删得干干净净，只剩下红伞自己，我也是醉了。这还是business edition？