本帖最后由 小飞侠.net 于 2018-6-21 21:39 编辑
Emsisoft Emergency Kit - 版本 2018.4
上次更新: 2018-06-21 20:32:48
用户帐号: TECLAST\Admin
电脑名称: TECLAST
操作系统版本: Windows 10 x64
Emsisoft Emergency Kit 绿色免费版
(已开启)加入 Emsisoft 云、更新源:测试版
Bitdefender(B)+Emsisoft(A) 双引擎
扫描设置:
扫描方式: 自定义扫描
对象: Rootkits, 内存, C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\
检测流氓软件(PUPs): On
扫描压缩包: On
扫描邮件存档: Off
ADS数据流: On
文件扩展名过滤: Off
直接磁盘访问: Off
扫描开始于: 2018-06-21 21:29:19
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(10).exe 发现风险: Trojan.Emotet (A) [294317]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(12).exe 发现风险: Trojan.Emotet (A) [294317]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(13).exe 发现风险: Gen:Variant.Zusy.290354 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(14).exe 发现风险: Gen:Variant.Zusy.290336 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(17).exe 发现风险: Gen:Variant.Razy.351246 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(16).exe 发现风险: Gen:Variant.Zusy.290336 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(19).exe 发现风险: Gen:Variant.Razy.343926 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(2).exe 发现风险: Trojan.GenericKD.40287436 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(20).exe 发现风险: Trojan.GenericKDZ.44855 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(18).exe 发现风险: Trojan.GenericKD.30996627 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(22).exe 发现风险: Trojan.Emotet (A) [294317]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(21).exe 发现风险: Trojan.GenericKD.30997000 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(24).exe 发现风险: Trojan.GenericKD.40288674 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(25).exe 发现风险: Trojan.Emotet (A) [294317]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(27).exe 发现风险: Trojan.Injector (A) [294198]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(3).exe 发现风险: Trojan.Injector (A) [294198]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(5).exe 发现风险: Trojan.Injector (A) [294198]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(4).exe 发现风险: Gen:Variant.Razy.350680 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(6).exe 发现风险: Trojan.GenericKD.40288295 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(8).exe 发现风险: Trojan-PSW.Fareit (A) [291004]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(23).exe 发现风险: Gen:Variant.Zusy.290336 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(26).exe 发现风险: Gen:Variant.Zusy.290336 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(9).exe 发现风险: Trojan.GenericKD.40288926 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(7).exe 发现风险: Trojan.GenericKD.30995770 (B) [krnl.xmd]
已扫描 1921
发现 24
扫描完成后: 2018-06-21 21:29:43
扫描时间: 0:00:24
ESET Smart Security Premium 64位(高级启发式(Y)+压缩文件(Y)+自解压加壳(Y)+DNA智能签名(Y)++(Windows 10 Creators Update(Redstone 4)....1803):
日志
正在扫描日志
检测引擎的版本: 17588P (20180621)
日期: 2018-06-21 时间: 21:23:57
已扫描的磁盘、文件夹和文件: C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(1).exe > INNO > script_decompiled.pas - Win32/Kryptik.GHUC 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(10).exe - Win32/Emotet.BK 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(11).exe - Win32/Formbook.AA 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(12).exe - Win32/Kryptik.GHYP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(13).exe - Win32/Kryptik.ASII 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(14).exe - Win32/Injector.DYTP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(15).exe - Win32/Kryptik.GHXW 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(16).exe - Win32/Injector.DYTP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(17).exe - MSIL/Injector.TSD 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(18).exe - Win32/Injector.DYSV 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(19).exe - MSIL/Kryptik.MZR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(2).exe - Win32/Kryptik.GHZR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(20).exe - Generik.DUEHES 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(21).exe - MSIL/Kryptik.OIM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(22).exe - Win32/Emotet.BK 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(23).exe - Win32/Injector.DYTP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(24).exe - Win32/GenKryptik.CDAS 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(25).exe - Win32/Kryptik.GHYU 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(26).exe - Win32/Injector.DYTP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(27).exe - Win32/Injector.DYTR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(3).exe - Win32/Injector.DYTF 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(4).exe - Win32/Emotet.BK 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(5).exe - Win32/Injector.DYTR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(6).exe - Win32/Injector.DYUF 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(7).exe - Win32/GenKryptik.CDAT 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(8).exe - Win32/PSW.Fareit.L 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059\PACKAGE0620\(9).exe - MSIL/Kryptik.OIJ 特洛伊木马 的变种 - 通过删除清除 [1]
已扫描的对象数: 91
发现的威胁数: 27
已清除对象数: 27
完成时间: 21:24:52 总扫描时间: 55 秒 (00:00:55)
备注:
[1] 由于对象中仅包含病毒主体,因此已被删除。
火绒安全---( Windows 7 Ultimate with SP1 简体中文旗舰版....):部分未知文件已发送到seclab@huorong.cn,等处理中。。。
病毒库:2018-06-21 16:24
开始时间:2018-06-21 20:56
总计用时:00:00:16
扫描对象:30个
扫描文件:27个
发现风险:25个
已处理风险:0个
发现系统修复项:0个
处理系统修复项:0个
病毒详情
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe, 病毒名:Trojan/Generic!853E4E1D62A0C281, 病毒ID:[853e4e1d62a0c281], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(12).exe, 病毒名:Trojan/Generic!70E614547E1163A8, 病毒ID:[70e614547e1163a8], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(10).exe, 病毒名:Trojan/Generic!879DA600D9C28560, 病毒ID:[879da600d9c28560], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(15).exe, 病毒名:Trojan/Generic!EE9E2BEEE52AD3F6, 病毒ID:[ee9e2beee52ad3f6], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(14).exe, 病毒名:Trojan/Generic!59D009FF730705B8, 病毒ID:[59d009ff730705b8], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(11).exe, 病毒名:Trojan/Generic!AC07E2E60FA909CB, 病毒ID:[ac07e2e60fa909cb], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(16).exe, 病毒名:Trojan/Generic!ABB65C54C8F403B0, 病毒ID:[abb65c54c8f403b0], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(19).exe, 病毒名:Trojan/Generic!C85C6FEE178D1430, 病毒ID:[c85c6fee178d1430], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(17).exe, 病毒名:Trojan/Generic!4A31B2F4FD54AB97, 病毒ID:[4a31b2f4fd54ab97], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(20).exe, 病毒名:Trojan/Generic!1DCACDF4CA3E0583, 病毒ID:[1dcacdf4ca3e0583], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(18).exe, 病毒名:Trojan/Agent.an, 病毒ID:[2f1304a53f937e6c], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(22).exe, 病毒名:Trojan/Generic!6225E10DC6FEA98F, 病毒ID:[6225e10dc6fea98f], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(21).exe, 病毒名:Trojan/Generic!46D0C5F60EC5BD8C, 病毒ID:[46d0c5f60ec5bd8c], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(23).exe, 病毒名:Trojan/Generic!D0BBACCE54C502B9, 病毒ID:[d0bbacce54c502b9], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(25).exe, 病毒名:Trojan/Generic!76C9B195A630A61E, 病毒ID:[76c9b195a630a61e], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(26).exe, 病毒名:Trojan/Generic!585B139E2F6ED781, 病毒ID:[585b139e2f6ed781], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(3).exe, 病毒名:HEUR:VirTool/VB.Obfuscator.gen!A, 病毒ID:[636e99dfed83873b], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(4).exe, 病毒名:Trojan/Generic!8CD7BDF028085210, 病毒ID:[8cd7bdf028085210], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(5).exe, 病毒名:HEUR:VirTool/VB.Obfuscator.gen!A, 病毒ID:[636e99dfed83873b], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(6).exe, 病毒名:Trojan/Generic!286C88995F760CE6, 病毒ID:[286c88995f760ce6], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(8).exe, 病毒名:TrojanSpy/Fareit.f, 病毒ID:[45c7833cc5a9872b], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(9).exe, 病毒名:Trojan/Generic!D6B5AD33041369D2, 病毒ID:[d6b5ad33041369d2], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(13).exe, 病毒名:HVM:VirTool/Obfuscator.gen!A, 病毒ID:[b27d4294cde6a1ec], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(27).exe, 病毒名:HEUR:VirTool/VB.Obfuscator.gen!A, 病毒ID:[636e99dfed83873b], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(2).exe, 病毒名:HEUR:VirTool/Obfuscator.gen!A, 病毒ID:[a5a7938d38833819], 处理结果:已忽略
文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620.zip
文件大小: 12.4 MB (13,024,318 字节)
修改时间: 2018年06月21日,20:53:03
MD5: 622F99DF52EB964F206E41D30CE2EA2B
SHA1: F5250044DFD810B6A5864AEBF2C0EE85995BB528
SHA256: 1FA874DB389353A1117CED78C84DEAFE1C608B56643C2834CAEB81EE601EE536
SHA512: 7E56C00A21C5017399FE55BEFDFCBC4D8DF48C0DC46EF00C3E7347DA689C1707B405244A6E78CB5552EB4100F01DD65346781E62934432938BBE82FD4B919270
CRC32: 18BBBF8E
计算时间: 0.33s
Dr.Web CureIt! 简体中文绿色免费版---( Windows 7 Ultimate with SP1 简体中文旗舰版....):
-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Command line used:-rpcep:\pipe\1DE8649DF -rpcpr:np
Limit the use of the computer resources to 100%
Instances used for this session: 10
Object(s) to scan:
- C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(12).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(10).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(13).exe - Ok
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(15).exe - packed by UPX
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(14).exe - infected with Trojan.BtcMine.2894
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(14).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(15).exe - infected with Trojan.MulDrop8.27036
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(15).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(17).exe - infected with Trojan.DownLoader26.39159
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(17).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(16).exe - infected with Trojan.BtcMine.2894
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(16).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(20).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(21).exe - infected with Trojan.DownLoader26.39159
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(21).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(2).exe - infected with Trojan.PWS.Stealer.23807
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(2).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(18).exe - infected with Trojan.PWS.Stealer.23680
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(18).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(11).exe - infected with Trojan.Inject1.54688
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(11).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(19).exe - infected with Trojan.Nanocore.23
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(19).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(4).exe - infected with Trojan.Emotet.252
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(4).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(22).exe - infected with Trojan.Emotet.244
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(22).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(25).exe - infected with Trojan.Emotet.253
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(25).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(23).exe - infected with Trojan.BtcMine.2894
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(23).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(6).exe - infected with Trojan.Encoder.10700
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(6).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(8).exe - infected with Trojan.PWS.Stealer.23680
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(8).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(27).exe - infected with Trojan.PWS.Stealer.24062
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(27).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(3).exe - infected with Trojan.PWS.Stealer.24061
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(3).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(5).exe - infected with Trojan.PWS.Stealer.19557
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(5).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(7).exe - infected with Trojan.PWS.Spy.20960
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(7).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(9).exe - infected with Trojan.Inject2.63042
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(9).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(26).exe - infected with Trojan.BtcMine.2894
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(26).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(24).exe - infected with Trojan.IcedID.12
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(24).exe - infected
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe is INNO SETUP container
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe\Script2.bin is BINARYRES container
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe\{tmp}\libeay32.dll - packed by FLY-CODE
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe\{tmp}\libevent-2-0-5.dll is BINARYRES container
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe\{tmp}\libevent_extra-2-0-5.dll - packed by FLY-CODE
>>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe\{tmp}\libevent_extra-2-0-5.dll is BINARYRES container
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe\{tmp}\libgcc_s_sjlj-1.dll - packed by FLY-CODE
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe\{tmp}\libgmp-10.dll - packed by FLY-CODE
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe\{tmp}\libssp-0.dll - packed by FLY-CODE
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe\{tmp}\ssleay32.dll - packed by FLY-CODE
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe\{tmp}\tor.exe is BINARYRES container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE0620\(1).exe - container
Total 20749180 bytes in 27 files scanned (99 objects)
Total 5 files (77 objects) are clean
Total 22 files are infected---又双叒叕上传virustotal.com???
Scan time is 00:00:10.871
,,, ,,,
瑞星---(Windows 10 Creators Update(Redstone 4)....1803):云引擎(开)RDM+引擎(开)
瑞星反恶软引擎命令行扫描器(社区交流版)
编译于:Sep 22 2017 15:07:50
提示:
- 本工具供社区交流使用,请勿用于其他用途
- 本工具没有恶意软件删除、清除、隔离功能
- 本工具包含开发中的新特性,结果仅供参考
* 命令行中的选项开关:-output-json -log=C:\瑞星RDM+引擎\ScanLog_180621213231.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\PACKAGE0620Obfuscator2059
* 加载恶软签名库: C:\瑞星RDM+引擎/malware.rmd
* 恶软签名库加载成功,发布序号为 4449
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Thu Jun 21 21:32:55 2018
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(11).exe","infect":{"engine":"md5","signature":"bWQ1OiyU8XPaTLU6XFgy4tn0Ri4","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(13).exe","infect":{"engine":"md5","signature":"bWQ1OiZfv6JpV7apTV9mPU/+PaA","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(10).exe","infect":{"engine":"md5","signature":"bWQ1OjGJpuf1nH1d/NpMexgqMQY","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(12).exe","infect":{"engine":"md5","signature":"bWQ1OiCYYylC8FSPuMq0W0Q7cuI","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(15).exe","infect":{"engine":"md5","signature":"bWQ1Og5emtazSeXloEmVhtPaQ84","threat":"Spyware.Panda!8.AFED"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(16).exe","infect":{"engine":"md5","signature":"bWQ1OgTGwd7p4TR9/QjJjPlj0wY","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(14).exe","infect":{"engine":"md5","signature":"bWQ1OuaNEoTT6gM+aNxFietdlBY","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(1).exe","infect":{"engine":"md5","signature":"bWQ1OsKLLJ3kDg1q3KAzqlPgfyE","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(19).exe","infect":{"engine":"md5","signature":"bWQ1Or6zi3ak7q/CEmNAZemj9/0","threat":"Backdoor.Noancooe!8.176"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(2).exe","infect":{"engine":"md5","signature":"bWQ1OgSc7a2Cdcu7jQABmvG53SQ","threat":"Stealer.Delf!8.415"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(20).exe","infect":{"engine":"rdmk","signature":"cmRtazrYZx6sXD0NLRluDV6V0dbj","threat":"Trojan.Bicololo!8.91"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(17).exe","infect":{"engine":"md5","signature":"bWQ1OpVKos65Q5ZerO/xYY27zkg","threat":"Spyware.Agent!8.C6"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(22).exe","infect":{"engine":"md5","signature":"bWQ1OgHbBXgbHuWkJBuAjs5tbA4","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(21).exe","infect":{"engine":"md5","signature":"bWQ1OhmIucxQ8E6zBM3IUXnj8yE","threat":"Backdoor.Agent!8.C5D"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(18).exe","infect":{"engine":"tfe","signature":"dGZlOgXN6JEeSDpPxQ","threat":"Backdoor.Rescoms!8.B8A4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(25).exe","infect":{"engine":"md5","signature":"bWQ1OnWrT58nhVV78k0oDLdLlV4","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(23).exe","infect":{"engine":"md5","signature":"bWQ1Oonp6lNKpSqCfkCJ7LmQZG0","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(4).exe","infect":{"engine":"md5","signature":"bWQ1OnxjGyyXXiSIfA7U8gR+NsU","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(24).exe","infect":{"engine":"md5","signature":"bWQ1OhO57QUsxL83hc0lD2mFQGo","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(27).exe","infect":{"engine":"md5","signature":"bWQ1OnLWOlidxN2OR+hRrJcbAbM","threat":"Backdoor.Androm!8.113"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(3).exe","infect":{"engine":"md5","signature":"bWQ1OiQHWFi4akdgz3ax1ejc/VQ","threat":"Spyware.Noon!8.E7C9"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(26).exe","infect":{"engine":"md5","signature":"bWQ1OuvmvS8BOPKoyTfTNBvSO8w","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(6).exe","infect":{"engine":"md5","signature":"bWQ1Otvlsj/NlN9Xr/dc7ktLJgw","threat":"Trojan.Khalesi!8.F103"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(5).exe","infect":{"engine":"md5","signature":"bWQ1OnHcW8xhTkN+gmBuV7IO730","threat":"Trojan.Injector!8.C4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(8).exe","infect":{"engine":"rdmk","signature":"cmRtazq8jIdyDMIvrIri9G6kaWnZ","threat":"Stealer.Fareit!8.170"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(9).exe","infect":{"engine":"md5","signature":"bWQ1OnmPZGzDi+fyf4M8qn2gwjU","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE0620Obfuscator2059\\PACKAGE0620\\(7).exe","infect":{"engine":"md5","signature":"bWQ1OhjUl8nwi9Z+IiIKKyDbHOk","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
扫描结束: Thu Jun 21 21:32:56 2018
总扫描耗时: 0:1:157(m:s:ms)
总扫描对象: 27
总扫描文件: 27
总恶意文件: 27
有效检出率: 100.00%---又双叒叕上传virustotal.com???
|