楼主: Jerry.Lin
收起左侧

[病毒样本] #PACKAGE 0614

  [复制链接]
Severn'
发表于 2018-6-15 03:08:03 | 显示全部楼层

我用comodo扫描第一次全miss我还怕是不是我点错文件夹了再试了一次还是全miss,震惊。。。有虚拟机试试双击不
Severn'
发表于 2018-6-15 03:09:23 | 显示全部楼层

不过10 16 17 26在解压缩的时候被隔离了,算干掉4个吧
540923555
发表于 2018-6-15 08:40:34 | 显示全部楼层
我怀疑有人上传VT了。。。。我这里WD多半都是CL杀,以前样本从来没这样过,VT是要参与云端打分的。。。。如果是双击机器入库,不能这么巧合都停留在CL阶段吧。。。。。
StarlitFuture
发表于 2018-6-15 09:13:13 | 显示全部楼层
本帖最后由 StarlitFuture 于 2018-6-15 09:25 编辑

360杀毒  06/14  9:11
Samples(17/26)  65%
  1. 360杀毒扫描日志

  2. 病毒库版本:
  3. 扫描时间:2018-06-15 09:11:30
  4. 扫描用时:00:00:06
  5. 扫描类型:右键扫描
  6. 扫描文件总数:26
  7. 项目总数:17
  8. 清除项目数:17

  9. 扫描选项
  10. ----------------------
  11. 扫描所有文件:是
  12. 扫描压缩包:是
  13. 发现病毒处理方式:由360杀毒自动处理
  14. 扫描磁盘引导区:是
  15. 扫描 Rootkit:是
  16. 使用云查杀引擎:是
  17. 使用QVM人工智能引擎:是
  18. 扫描建议修复项:是
  19. 常规引擎设置:未使用

  20. 扫描内容
  21. ----------------------
  22. C:\Users\Home\Downloads\Samples


  23. 白名单设置
  24. ----------------------


  25. 扫描结果
  26. ======================
  27. 高危风险项
  28. ----------------------
  29. C:\Users\Home\Downloads\Samples\(11) .exe        感染型病毒(Win32/Trojan.2fc)        已删除
  30. C:\Users\Home\Downloads\Samples\(13) .exe        感染型病毒(Win32/Trojan.ade)        已删除
  31. C:\Users\Home\Downloads\Samples\(15) .exe        感染型病毒(Win32/Trojan.280)        已删除
  32. C:\Users\Home\Downloads\Samples\(20) .exe        HEUR/QVM05.1.D7A1.Malware.Gen        已删除
  33. C:\Users\Home\Downloads\Samples\(22) .exe        感染型病毒(Win32/Trojan.PSW.dee)        已删除
  34. C:\Users\Home\Downloads\Samples\(23) .exe        感染型病毒(Win32/Trojan.7be)        已删除
  35. C:\Users\Home\Downloads\Samples\(25) .exe        HEUR/QVM03.0.D7A1.Malware.Gen        已删除
  36. C:\Users\Home\Downloads\Samples\(3) .exe        感染型病毒(Win32/Trojan.BO.608)        已删除
  37. C:\Users\Home\Downloads\Samples\(9) .exe        感染型病毒(Win32/Backdoor.6e0)        已删除
  38. C:\Users\Home\Downloads\Samples\(19) .exe        感染型病毒(Win32/Trojan.Spy.94c)        已删除
  39. C:\Users\Home\Downloads\Samples\(2) .exe        感染型病毒(Win32/Trojan.Spy.e9a)        已删除
  40. C:\Users\Home\Downloads\Samples\(1) .exe        HEUR/QVM09.0.D8D5.Malware.Gen        已删除
  41. C:\Users\Home\Downloads\Samples\(4) .exe        感染型病毒(Win32/Trojan.Generic.bfd)        已删除
  42. C:\Users\Home\Downloads\Samples\(5) .exe        HEUR/QVM41.2.D8D5.Malware.Gen        已删除
  43. C:\Users\Home\Downloads\Samples\(7) .exe        感染型病毒(Win32/Trojan.Generic.aea)        已删除
  44. C:\Users\Home\Downloads\Samples\(21) .exe        感染型病毒(Win32/Trojan.03f)        已删除
  45. C:\Users\Home\Downloads\Samples\(18) .exe        HEUR/QVM27.0.D8D5.Malware.Gen        已删除



  46. 可疑文件上传结果
  47. ----------------------
  48. c:\users\home\downloads\samples\(18) .exe        上传成功
复制代码
ATP_synthase
发表于 2018-6-15 10:07:48 | 显示全部楼层
ccboxes 发表于 2018-6-15 01:01
所以说给个具体数据啊,一共杀14个?其余的都是什么情况?

其余都miss啊
B100D1E55
发表于 2018-6-15 12:45:20 | 显示全部楼层
本帖最后由 B100D1E55 于 2018-6-15 12:55 编辑
191196846 发表于 2018-6-14 22:48
EES   22: 55
Samples(18/26) 69%

我来迟了。刚刚看了一下,11、13、14、26仍旧没检出。其中11号后台其实检出是Agent了,但是没到阈值


测AMS一个是要等足够久,经常ursnif之类的要等四五分钟才会在内存中开始解密。此外有的反虚拟机,发现是虚拟机可能解密前就自动退出……

26可能是白文件,只观测到跑了一个ADSL的bat。13号释放了可疑程序,但是衍生物广度很低(>1台计算机。。)但是没观测到可疑行为
Jerry.Lin
 楼主| 发表于 2018-6-15 14:43:51 | 显示全部楼层
B100D1E55 发表于 2018-6-15 12:45
我来迟了。刚刚看了一下,11、13、14、26仍旧没检出。其中11号后台其实检出是Agent了,但是没到阈值


...

这个?

https://bbs.kafan.cn/thread-2125338-1-1.html
小飞侠.net
发表于 2018-6-18 08:56:22 | 显示全部楼层
本帖最后由 小飞侠.net 于 2018-6-18 09:31 编辑

X-Sec Antivirus ---(Windows 10 Creators Update(Redstone 4)....1803):

Basic Info:
---------------------
Database Version: 2018.06.15.01
Program Version: [图片]2.1.1.0
Heuristic Engine: Enabled
Cloud Engine: Enabled
Enhanced Mode: Disabled
Backup Before Resolve: Yes
Resolve Threats: Scan only
Scan Priority: Normal
---------------------
Targets:
---------------------
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857
---------------------
2018-06-18 09:28:50 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(1) .exe -- [Classic] [图片]Malware.Win32.RiskSign.Gd!BS
2018-06-18 09:28:52 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(11) .exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-18 09:28:52 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(10) .exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-18 09:29:06 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(12) .exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-18 09:29:07 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(14) .exe -- [Cloud] Cloud:Trojan.Win32.Downloader
2018-06-18 09:29:16 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(15) .exe -- [Cloud] Cloud:Trojan.Win32.Ursnif
2018-06-18 09:29:17 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(16) .exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-18 09:29:17 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(17) .exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-18 09:29:18 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(18) .exe -- [Cloud] Cloud:Trojan.Win32.Dropper
2018-06-18 09:29:19 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(19) .exe -- [Cloud] Cloud:Trojan.Win32.Infostealer
2018-06-18 09:29:24 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(2) .exe -- [Cloud] Cloud:Trojan.Win32.Infostealer
2018-06-18 09:29:24 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(20) .exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-18 09:29:25 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(21) .exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-18 09:29:30 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(22) .exe -- [Cloud] Cloud:Trojan.Win32.Infostealer
2018-06-18 09:29:30 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(23) .exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018-06-18 09:29:32 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(13) .exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-18 09:29:39 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(24) .exe -- [Cloud] Cloud:Trojan.Win32.Ursnif
2018-06-18 09:29:41 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(3) .exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-18 09:29:41 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(4) .exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-18 09:29:45 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(25) .exe -- [Cloud] Cloud:Backdoor.Win32.Remcos
2018-06-18 09:29:45 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(6) .exe -- [Classic] Trojan.Win32.InfoStealer.Ap
2018-06-18 09:29:45 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(7) .exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-18 09:29:50 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(5) .exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-18 09:29:50 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(8) .exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-18 09:29:51 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(9) .exe -- [Cloud] Cloud:Trojan.Win32.Generic

   
  瑞星---(Windows 10 Creators Update(Redstone 4)....1803):云引擎(开)RDM+引擎(开)     

                瑞星反恶软引擎命令行扫描器(社区交流版)                 


编译于:Sep 22 2017   15:07:50

提示:
  - 本工具供社区交流使用,请勿用于其他用途
  - 本工具没有恶意软件删除、清除、隔离功能
  - 本工具包含开发中的新特性,结果仅供参考

* 命令行中的选项开关:-output-json -log=C:\瑞星RDM+引擎\ScanLog_180618092534.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857

* 加载恶软签名库: C:\瑞星RDM+引擎/malware.rmd
* 恶软签名库加载成功,发布序号为 4427
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Mon Jun 18 09:25:54 2018

{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(1) .exe","infect":{"engine":"md5","signature":"bWQ1OreVduXFFUKSNKRIYRYFbPE","threat":"Downloader.Necurs!8.783"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(16) .exe","infect":{"engine":"md5","signature":"bWQ1OuucchEcEQ3Epu8oMWGuMFk","threat":"Trojan.Emotet!8.B95"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(15) .exe","infect":{"engine":"md5","signature":"bWQ1OkFFgRr/LITBOeulW/P5zqc","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(11) .exe","infect":{"engine":"md5","signature":"bWQ1OoKudvIIvUrz47AV70OLQck","threat":"Backdoor.Agent!8.C5D"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(10) .exe","infect":{"engine":"md5","signature":"bWQ1OuveZXNskwOSnsAN4iTp25Q","threat":"Trojan.Emotet!8.B95"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(14) .exe","infect":{"engine":"md5","signature":"bWQ1OgwqGXkWwLlSgO48BZ6bPOI","threat":"Downloader.Agent!8.B23"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(13) .exe","infect":{"engine":"md5","signature":"bWQ1OhM4DUKUai3Hapr2Xo68nEg","threat":"Trojan.Agent!8.B1E"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(12) .exe","infect":{"engine":"md5","signature":"bWQ1OtGye56HN8RvDoWrm+ifINc","threat":"Downloader.Banload!8.15B"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(17) .exe","infect":{"engine":"md5","signature":"bWQ1OsiwelqAMav+7rBu8ovfraA","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(18) .exe","infect":{"engine":"md5","signature":"bWQ1On9JnXCv/xsR7sgd9Hw7vC8","threat":"Dropper.Agent!8.2F"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(20) .exe","infect":{"engine":"md5","signature":"bWQ1OgQqMJoPokuNaZSRkoU1fiM","threat":"Dropper.Danabot!8.FAFD"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(19) .exe","infect":{"engine":"md5","signature":"bWQ1Otgjj2h9g59NnO7Z0JbPzxk","threat":"Spyware.Agent!8.C6"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(21) .exe","infect":{"engine":"md5","signature":"bWQ1OgCc0YAJD6OZkyb9P+SQ4p4","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(23) .exe","infect":{"engine":"md5","signature":"bWQ1OmZBpTU4KKYCTVTPFRawW5Y","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(22) .exe","infect":{"engine":"md5","signature":"bWQ1Oqsve8sJu4W6Qy7tf+ywFPY","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(2) .exe","infect":{"engine":"md5","signature":"bWQ1OiiIwEa03gLST0Us1gcwCAQ","threat":"Spyware.Agent!1.B243"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(3) .exe","infect":{"engine":"md5","signature":"bWQ1Or7BKYgO/DlD0VJGRxVe2Sk","threat":"Dropper.Danabot!8.FAFD"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(26) .exe","infect":{"engine":"md5","signature":"bWQ1OgNvg0lB8u5r3NvDFJPx6d8","threat":"Trojan.Tiggre!8.ED98"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(4) .exe","infect":{"engine":"md5","signature":"bWQ1OkJcfeqkovz5bNaqJ/tw2fw","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(25) .exe","infect":{"engine":"md5","signature":"bWQ1OngvsqZVMIS2xpwDzQ8Mt1g","threat":"Dropper.Generic!8.35E"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(24) .exe","infect":{"engine":"md5","signature":"bWQ1Oq/p4vT2O74TbCENmjacSEQ","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(6) .exe","infect":{"engine":"md5","signature":"bWQ1OoKzjqiuL/FEND9TlKFo1j4","threat":"Stealer.Delf!8.415"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(5) .exe","infect":{"engine":"md5","signature":"bWQ1OqktzqlQJbm/lc0Ee8UuYSk","threat":"Hack.Win32.SpyWare.aa"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(7) .exe","infect":{"engine":"md5","signature":"bWQ1OqO9ptOYoTMxhjnI/DuAgp0","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(8) .exe","infect":{"engine":"md5","signature":"bWQ1OvUfs3fJj6uqD4DzeFyAh80","threat":"Trojan.VBKrypt!8.5C0"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 0614Generic0857\\PACKAGE 0614\\(9) .exe","infect":{"engine":"md5","signature":"bWQ1OqbMWW8ZUeWPehAYbsuII8A","threat":"Backdoor.Agent!8.C5D"},"type":"scan"}

扫描结束: Mon Jun 18 09:25:55 2018

总扫描耗时: 0:1:60(m:s:ms)
总扫描对象: 26
总扫描文件: 26
总恶意文件: 26
有效检出率: 100.00%



Emsisoft Emergency Kit - 版本 2018.4
上次更新: 2018-06-18 8:39:30
用户帐号: TECLAST\Admin
电脑名称: TECLAST
操作系统版本: Windows 10 x64

Emsisoft Emergency Kit 绿色免费版
(已开启)加入 Emsisoft 云、更新源:测试版
    Bitdefender(B)+Emsisoft(A) 双引擎

扫描设置:

扫描方式: 自定义扫描
对象: Rootkits, C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\

检测流氓软件(PUPs): On
扫描压缩包: On
扫描邮件存档: Off
ADS数据流: On
文件扩展名过滤: Off
直接磁盘访问: Off

扫描开始于:        2018-06-18 9:22:16
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(1) .exe         发现风险: Trojan.GenericKD.30975462 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(10) .exe         发现风险: Trojan.GenericKD.30970379 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(14) .exe         发现风险: Trojan.GenericKD.30976844 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(11) .exe         发现风险: Gen:Variant.Ursu.196318 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(16) .exe         发现风险: Trojan.GenericKD.30971437 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(17) .exe         发现风险: Trojan.GenericKD.30970286 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(19) .exe         发现风险: Trojan.GenericKD.30972452 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(15) .exe         发现风险: Trojan.GenericKD.30971781 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(20) .exe         发现风险: Trojan.GenericKD.30970383 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(12) .exe         发现风险: Gen:Variant.Zusy.288985 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(21) .exe         发现风险: Trojan.GenericKD.30971860 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(13) .exe         发现风险: Trojan.GenericKD.30971023 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(2) .exe         发现风险: Gen:Variant.Zusy.287382 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(22) .exe         发现风险: Trojan.GenericKD.30972604 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(24) .exe         发现风险: Trojan.GenericKD.30976924 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(3) .exe         发现风险: Trojan.GenericKD.30968105 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(4) .exe         发现风险: Trojan.Emotet (A) [294236]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(25) .exe         发现风险: Trojan.GenericKD.30969163 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(6) .exe         发现风险: Gen:Variant.Zusy.283710 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(7) .exe         发现风险: Trojan.Emotet (A) [294230]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(5) .exe         发现风险: Gen:Trojan.Heur.Crifi.pv1@amo0MFPSf (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(9) .exe         发现风险: Trojan.GenericKD.30973816 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(8) .exe         发现风险: Trojan.GenericKD.30970663 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(23) .exe         发现风险: Gen:Variant.Ursu.221679 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(18) .exe         发现风险: Gen:Variant.Symmi.68475 (B) [krnl.xmd]

已扫描        620
发现        25

扫描完成后:        2018-06-18 9:22:29
扫描时间:        0:00:13



ESET Smart Security Premium 64位(高级启发式(Y)+压缩文件(Y)+自解压加壳(Y)+DNA智能签名(Y)++(Windows 10 Creators Update(Redstone 4)....1803):

日志
正在扫描日志
检测引擎的版本: 17568P (20180617)
日期: 2018-06-18  时间: 9:15:49
已扫描的磁盘、文件夹和文件: C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(1) .exe - Generik.FQDGXMK 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(10) .exe - Win32/Emotet.BK 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(11) .exe - Win32/Agent.SXN 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(12) .exe - Win32/TrojanDownloader.Banload.YEZ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(14) .exe - MSIL/TrojanDownloader.Agent.ERJ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(15) .exe - Win32/Kryptik.GHTR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(16) .exe - Win32/Emotet.BK 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(17) .exe - Win32/Kryptik.GHTO 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(18) .exe - Win32/TrojanDropper.Agent.RKZ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(19) .exe - Win32/Injector.DYQO 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(2) .exe - Win32/Spy.Agent.PLA 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(20) .exe - Win32/TrojanDropper.Danabot.C 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(21) .exe - Win32/Kryptik.GHUD 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(22) .exe - MSIL/NanoCore.E 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(23) .exe > NSIS > Script.nsi - NSIS/Injector.ABV 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(24) .exe - Win32/Kryptik.GHTR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(25) .exe - MSIL/Kryptik.JBL 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(3) .exe - Win32/TrojanDropper.Danabot.B 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(4) .exe - Win32/Emotet.BK 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(5) .exe > CAB > hrnrah.exe > AUTOIT - 压缩文件已损坏
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(5) .exe > CAB > vsqix.sbu - Win32/Agent.YMG 特洛伊木马 - 扫描完成后再选择处理方式
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(6) .exe - Win32/PSW.Delf.OSF 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(7) .exe - Win32/Kryptik.GHTB 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(8) .exe - Win32/ClipBanker.FF 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 0614Generic0857\PACKAGE 0614\(9) .exe - MSIL/Kryptik.ONE 特洛伊木马 的变种 - 通过删除清除 [1]
已扫描的对象数: 35
发现的威胁数: 24
已清除对象数: 23
完成时间: 9:17:13  总扫描时间: 84 秒 (00:01:24)

备注:
[1] 由于对象中仅包含病毒主体,因此已被删除。



Dr.Web CureIt! 简体中文绿色免费版---( Windows 7 Ultimate with SP1 简体中文旗舰版....):------不用说了,肯定有人上传VT,Dr.web的用户在本区不多吧?

-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Command line used:-rpcep:\pipe\1B86C9A42 -rpcpr:np

Limit the use of the computer resources to 100%
Instances used for this session: 10
Object(s) to scan:
- C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614


C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(14) .exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(11) .exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(17) .exe - infected with Trojan.Emotet.244
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(17) .exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(1) .exe - infected with BackDoor.Radmin.169
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(1) .exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(16) .exe - infected with Trojan.EmotetENT.240
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(16) .exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(21) .exe - infected with Trojan.Emotet.243
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(21) .exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(20) .exe - infected with Trojan.DownLoader26.50779
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(20) .exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(10) .exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(18) .exe - infected with Trojan.Siggen6.56769
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(18) .exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(15) .exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(23) .exe - infected with Trojan.PWS.Stealer.21240
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(23) .exe - infected
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(19) .exe - packed by PECOMPACT
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(3) .exe - infected with Trojan.PWS.DanaBot.18
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(3) .exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(26) .exe - infected with Trojan.Siggen5.59949
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(26) .exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(22) .exe - infected with Trojan.DownLoader26.50873
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(22) .exe - infected
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(4) .exe - packed by FLY-CODE
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(7) .exe - packed by FLY-CODE
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(6) .exe - infected with Trojan.PWS.Stealer.23946
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(6) .exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(7) .exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(4) .exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(2) .exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(19) .exe - infected with Trojan.PWS.Stealer.18836
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(19) .exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(25) .exe - infected with Trojan.PWS.Stealer.23577
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(25) .exe - infected
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(5) .exe is CAB archive
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(5) .exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(5) .exe - archive
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(24) .exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(12) .exe - Ok
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(9) .exe is NET container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(9) .exe - container
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(8) .exe - packed by UPX
Error to send CureIt! statistics:  (12029)
Error to send CureIt! statistics:  (12029)
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(8) .exe - Ok
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(13) .exe - packed by FLY-CODE
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(13) .exe - packed by VMPROTECT
>>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(13) .exe - packed by PESTUB
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(13) .exe - Ok

Total 20223977 bytes in 26 files scanned
Total 13 files are clean
Total 13 files are infected
Scan time is 00:00:04.003


火绒安全---( Windows 7 Ultimate with SP1 简体中文旗舰版....):部分未知文件已发送到seclab@huorong.cn,等处理中。。。

病毒库:2018-06-17 14:50
开始时间:2018-06-18 08:52
总计用时:00:00:05
扫描对象:30个
扫描文件:26个
发现风险:26个
已处理风险:0个
发现系统修复项:0个
处理系统修复项:0个

文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614.rar
文件大小: 12.2 MB (12,894,837 字节)
修改时间: 2018年06月18日,08:50:18
MD5: 0BF3C06073980B56704F37DA5D6D1AF3
SHA1: F6453BC373F459F7C60BF84E6916C06D3A943FC3
SHA256: FBA8E8CE4AABEAE3A0F7A848AC9515B1C9642365098EBABC6A642D01C187497C
SHA512: 3FA6E89466B766297163323CDA5E68147192D5420B7EF6F1DE5982E0EF9A9E6F3DFC596E4BA572BAC97549AACDAB708F11A6F393DC7AECAD5879E67831C05C5D
CRC32: 56F141C5
计算时间: 0.69s



病毒详情

风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(1) .exe, 病毒名:Trojan/Generic!5562724E07AE9A35, 病毒ID:[5562724e07ae9a35], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(11) .exe, 病毒名:Trojan/Generic!2CD20C13F961B573, 病毒ID:[2cd20c13f961b573], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(10) .exe, 病毒名:Trojan/Generic!5682833FAC93B354, 病毒ID:[5682833fac93b354], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(14) .exe, 病毒名:Trojan/Generic!841DF4ABB662E037, 病毒ID:[841df4abb662e037], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(15) .exe, 病毒名:Trojan/Generic!1FA473ABB3A3FC95, 病毒ID:[1fa473abb3a3fc95], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(12) .exe, 病毒名:Trojan/Generic!B07213F228E63F7F, 病毒ID:[b07213f228e63f7f], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(17) .exe, 病毒名:Trojan/Generic!4FF25DBE5E8FDE13, 病毒ID:[4ff25dbe5e8fde13], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(18) .exe, 病毒名:Trojan/Generic!68E6C45C12981EEC, 病毒ID:[68e6c45c12981eec], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(16) .exe, 病毒名:Trojan/Generic!240AB819099DFD96, 病毒ID:[240ab819099dfd96], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(19) .exe, 病毒名:Trojan/Generic!CB6C78100223B280, 病毒ID:[cb6c78100223b280], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(2) .exe, 病毒名:Trojan/Generic!7EE43308A2A8D2C7, 病毒ID:[7ee43308a2a8d2c7], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(21) .exe, 病毒名:Trojan/Generic!FF95E502B5EFB2DF, 病毒ID:[ff95e502b5efb2df], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(20) .exe, 病毒名:Trojan/Generic!101C9F09D0687AF4, 病毒ID:[101c9f09d0687af4], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(22) .exe, 病毒名:Trojan/Generic!DA6EB3C2D0E65655, 病毒ID:[da6eb3c2d0e65655], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(24) .exe, 病毒名:Trojan/Generic!A84F2FA04DB76E58, 病毒ID:[a84f2fa04db76e58], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(23) .exe, 病毒名:Trojan/Generic!FB5B039BEA3EE8D2, 病毒ID:[fb5b039bea3ee8d2], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(26) .exe, 病毒名:Trojan/Generic!8FF0A7D6943F85B9, 病毒ID:[8ff0a7d6943f85b9], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(3) .exe, 病毒名:Trojan/Generic!59FCEECCEF374CF1, 病毒ID:[59fceeccef374cf1], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(4) .exe, 病毒名:Trojan/Generic!FE800F10DEC410AB, 病毒ID:[fe800f10dec410ab], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(13) .exe, 病毒名:Trojan/Generic!EA539282A6DA15FB, 病毒ID:[ea539282a6da15fb], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(25) .exe, 病毒名:Trojan/Generic!7A0995F2C513DFDA, 病毒ID:[7a0995f2c513dfda], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(5) .exe, 病毒名:Trojan/Generic!09A2628C54D5A5A9, 病毒ID:[9a2628c54d5a5a9], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(6) .exe, 病毒名:Trojan/Generic!CF0FB3410BA1DC2C, 病毒ID:[cf0fb3410ba1dc2c], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(7) .exe, 病毒名:Trojan/Generic!BA23D224B1C5A77B, 病毒ID:[ba23d224b1c5a77b], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(9) .exe, 病毒名:Trojan/Generic!09C272BA17A2CE00, 病毒ID:[9c272ba17a2ce00], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 0614\(8) .exe, 病毒名:Trojan/Generic!416EB7C1AE89E407, 病毒ID:[416eb7c1ae89e407], 处理结果:已忽略

-----------Generic这么多????
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-11-24 17:31 , Processed in 0.104213 second(s), 14 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表