本帖最后由 小飞侠.net 于 2018-6-25 10:24 编辑
X-Sec Antivirus ---(Windows 10 Creators Update(Redstone 4)....1803):
Basic Info:
---------------------
Database Version: 2018.06.18.01
Program Version: 2.1.1.0
Heuristic Engine: Enabled
Cloud Engine: Enabled
Enhanced Mode: Disabled
Backup Before Resolve: Yes
Resolve Threats: Scan only
Scan Priority: Normal
---------------------
Targets:
---------------------
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918
---------------------
2018-06-25 10:21:09 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(10).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:21:09 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(1).exe -- [Cloud] Cloud:Trojan.Win32.Infostealer
2018-06-25 10:21:09 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(11).exe -- [Classic] Hacktool.Win32.Confuser.Aa
2018-06-25 10:21:10 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(12).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018-06-25 10:21:10 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(13).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:21:14 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(14).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:21:14 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(16).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:21:15 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(17).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018-06-25 10:21:16 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(18).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:21:21 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(19).exe -- [Cloud] Cloud:Trojan.Win32.LokiBot
2018-06-25 10:21:22 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(2).exe -- [Cloud] Cloud:Trojan.Win32.Injector
2018-06-25 10:21:31 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(20).exe -- [Cloud] Cloud:Trojan.Win32.Ursnif
2018-06-25 10:21:36 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(15).exe -- [Cloud] Cloud:Trojan.Win32.Infostealer
2018-06-25 10:21:36 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(21).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:21:37 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(22).exe -- [Cloud] Cloud:Backdoor.Win32.NanoCore
2018-06-25 10:21:37 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(23).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:21:37 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(25).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:22:02 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(26).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:22:03 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(3).exe -- [Cloud] Cloud:Trojan.Win32.Emotet
2018-06-25 10:22:03 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(4).exe -- [Classic] Backdoor.Win32.NanoCore.A
2018-06-25 10:22:05 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(5).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:22:13 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(24).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:23:03 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(7).exe -- [Cloud] Cloud:Trojan.Win32.Generic
2018-06-25 10:23:04 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(8).exe -- [Cloud] Cloud:Backdoor.Win32.Generic
2018-06-25 10:23:22 Threat Detected: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(9).exe -- [Classic] Hacktool.Win32.Confuser.Aa
瑞星---(Windows 10 Creators Update(Redstone 4)....1803):云引擎(开)RDM+引擎(开)
瑞星反恶软引擎命令行扫描器(社区交流版)
编译于:Sep 22 2017 15:07:50
提示:
- 本工具供社区交流使用,请勿用于其他用途
- 本工具没有恶意软件删除、清除、隔离功能
- 本工具包含开发中的新特性,结果仅供参考
* 命令行中的选项开关:-output-json -log=C:\瑞星RDM+引擎\ScanLog_180625101036.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918
* 加载恶软签名库: C:\瑞星RDM+引擎/malware.rmd
* 恶软签名库加载成功,发布序号为 4470
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败............又双叒叕上传到virustotal.com
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Mon Jun 25 10:13:03 2018
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(16).exe","infect":{"engine":"md5","signature":"bWQ1OgNT7TA3D3Zx+mLneKtr0EA","threat":"Dropper.Generic!8.35E"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(14).exe","infect":{"engine":"md5","signature":"bWQ1OgzfAp3TBgpmMZre0clpD5I","threat":"Downloader.Agent!8.B23"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(12).exe","infect":{"engine":"md5","signature":"bWQ1OgaqcKFZ+tFmHNdZdwkfQhc","threat":"Ransom.Agent!8.6B7"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(11).exe","infect":{"engine":"md5","signature":"bWQ1OtDCkI7WUpyEuaCQ59Zu5yM","threat":"Trojan.Generic!8.C3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(1).exe","infect":{"engine":"md5","signature":"bWQ1Olh6/PyMFOOUrbTW7CRH6R8","threat":"Backdoor.Agent!8.C5D"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(10).exe","infect":{"engine":"md5","signature":"bWQ1OtzV6j9jm+uRjPXZZVQ2HJQ","threat":"Backdoor.Agent!8.C5D"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(13).exe","infect":{"engine":"md5","signature":"bWQ1Og3JRhzdl5NkKNWfCvO8vDE","threat":"Trojan.Agentb!8.F8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(18).exe","infect":{"engine":"md5","signature":"bWQ1Oh7jA8klHvvYFK+51GWZHrw","threat":"Stealer.Fareit!8.170"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(23).exe","infect":{"engine":"md5","signature":"bWQ1OnTguRk0V0kxoGOmKxsxW90","threat":"Dropper.Danabot!8.FAFD"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(17).exe","infect":{"engine":"md5","signature":"bWQ1Ot5TVvNpyqVsK6jO58vwIZ8","threat":"Backdoor.Androm!8.113"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(15).exe","infect":{"engine":"md5","signature":"bWQ1OmAFifuV6fG1fZzdaHCdKK0","threat":"Dropper.Phpw!8.ECD4"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(22).exe","infect":{"engine":"md5","signature":"bWQ1OhaRznUWQ1ll6Mle4A16oNI","threat":"Backdoor.Noancooe!8.176"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(19).exe","infect":{"engine":"md5","signature":"bWQ1Oitn1VP2eelaSPkD7EEajss","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(21).exe","infect":{"engine":"md5","signature":"bWQ1OnD0UCSzMHDEkEMDrMgKeY0","threat":"Trojan.Injector!1.AFE3"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(25).exe","infect":{"engine":"md5","signature":"bWQ1OhyzX0NAo351r/H5AWKbWfM","threat":"Trojan.Agent!8.B1E"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(3).exe","infect":{"engine":"md5","signature":"bWQ1Ois9dFkwkgkDn6K3/COU/jc","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(5).exe","infect":{"engine":"md5","signature":"bWQ1OknRIJrmeJV0Rf96Xysa9BQ","threat":"Backdoor.Agent!8.C5D"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(2).exe","infect":{"engine":"md5","signature":"bWQ1On4Qc1YByHuELSD18GpdEqA","threat":"Spyware.Agent!8.C6"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(20).exe","infect":{"engine":"md5","signature":"bWQ1OuRQBBIWpu+UJ/PlgDochhw","threat":"Dropper.Agent!8.2F"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(26).exe","infect":{"engine":"md5","signature":"bWQ1OnmrU+HJ+pFlEIVpNiS9BeU","threat":"Backdoor.Fynloski!8.1FD"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(8).exe","infect":{"engine":"md5","signature":"bWQ1Orub8pI7Darp+5oyBYdhbCc","threat":"Backdoor.Bladabindi!8.B1F"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(4).exe","infect":{"engine":"md5","signature":"bWQ1OpSnm3evJi6UYr+WyKD1fmc","threat":"Backdoor.Noancooe!8.176"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(9).exe","infect":{"engine":"md5","signature":"bWQ1Or8+d7303wnAB/lmGl7Wkog","threat":"Spyware.Agent!8.C6"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(24).exe","infect":{"engine":"md5","signature":"bWQ1OmSeaQAAgE/I6aX0qVdBQJ0","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(7).exe","infect":{"engine":"md5","signature":"bWQ1OvNmkymBv229imjFWr7Phbw","threat":"Downloader.Banload!8.15B"},"type":"scan"}
{"filename":"C:\\Users\\Admin\\Desktop\\AVtest100\\PACKAGE 06212MalBehav0918\\PACKAGE 06212\\(6).exe","infect":{"engine":"md5","signature":"bWQ1Op00N7cacqG9BUzZwBSmabw","threat":"Backdoor.Androm!8.113"},"type":"scan"}
扫描结束: Mon Jun 25 10:13:06 2018
总扫描耗时: 0:2:722(m:s:ms)
总扫描对象: 26
总扫描文件: 26
总恶意文件: 26
有效检出率: 100.00%--又双叒叕上传到virustotal.com
Emsisoft Emergency Kit - 版本 2018.4
上次更新: 2018-06-25 10:05:12
用户帐号: TECLAST\Admin
电脑名称: TECLAST
操作系统版本: Windows 10 x64
Emsisoft Emergency Kit 绿色免费版
(已开启)加入 Emsisoft 云、更新源:测试版
Bitdefender(B)+Emsisoft(A) 双引擎
扫描设置:
扫描方式: 自定义扫描
对象: Rootkits, C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\
检测流氓软件(PUPs): On
扫描压缩包: On
扫描邮件存档: Off
ADS数据流: On
文件扩展名过滤: Off
直接磁盘访问: Off
扫描开始于: 2018-06-25 10:07:56
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(12).exe -> (NSIS o) -> bzip2_nsis0005 发现风险: Trojan.GenericKD.30997017 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(1).exe 发现风险: Trojan.Crypt (A) [294345]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(10).exe 发现风险: Trojan.GenericKD.30996712 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(14).exe 发现风险: Trojan.GenericKD.31000243 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(16).exe 发现风险: Trojan.GenericKD.31001702 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(11).exe 发现风险: Gen:Variant.Zusy.287505 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(17).exe 发现风险: Gen:Variant.Symmi.52604 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(19).exe 发现风险: Trojan.Delf.Agent.JS (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(13).exe 发现风险: Generic.Ransom.Magniber.FC38F068 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(2).exe 发现风险: Trojan.GenericKD.30997445 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(18).exe 发现风险: Gen:Trojan.Heur.FU.keX@au!z@4k (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(21).exe 发现风险: Trojan.GenericKD.30999314 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(20).exe 发现风险: Trojan.GenericKD.30999747 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(22).exe 发现风险: Trojan.GenericKD.30999373 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(23).exe 发现风险: Gen:Variant.Barys.59345 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(24).exe 发现风险: Trojan.GenericKD.31003561 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(3).exe 发现风险: Trojan.Emotet (A) [294347]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(26).exe 发现风险: Trojan.GenericKD.40293598 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(4).exe 发现风险: Backdoor.MSIL.Agent.GD (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(5).exe 发现风险: Trojan.GenericKD.30999769 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(8).exe 发现风险: Trojan.GenericKD.40291610 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(9).exe 发现风险: Gen:Variant.MSILPerseus.1558 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(7).exe 发现风险: Gen:Variant.Strictor.136014 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(6).exe 发现风险: Trojan.GenericKD.31002563 (B) [krnl.xmd]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(15).exe 发现风险: Gen:Variant.Symmi.70089 (B) [krnl.xmd]
已扫描 620
发现 25
扫描完成后: 2018-06-25 10:08:14
扫描时间: 0:00:18
ESET Smart Security Premium 64位(高级启发式(Y)+压缩文件(Y)+自解压加壳(Y)+DNA智能签名(Y)++(Windows 10 Creators Update(Redstone 4)....1803):
日志
正在扫描日志
检测引擎的版本: 17606P (20180624)
日期: 2018-06-25 时间: 9:54:07
已扫描的磁盘、文件夹和文件: C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(1).exe - MSIL/Kryptik.OIM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(10).exe - MSIL/Kryptik.OPN 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(11).exe - MSIL/Kryptik.NUV 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(12).exe > NSIS > aside.dll - Win32/Injector.DYTX 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(14).exe - MSIL/Kryptik.NBN 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(15).exe - Generik.NEWGKYH 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(16).exe - MSIL/Kryptik.IGL 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(17).exe - Win32/PSW.Fareit.L 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(18).exe - Win32/Formbook.AA 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(19).exe - Win32/Injector.DYUJ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(2).exe - MSIL/Injector.SWC 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(20).exe - Win32/GenKryptik.CDFE 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(21).exe - Win32/Injector.DYUJ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(22).exe - MSIL/Kryptik.ONB 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(23).exe - Win32/TrojanDropper.Danabot.D 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(24).exe > INNO > {tmp}\data.dll - Win32/Kryptik.GFYW 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(25).exe - Win32/Agent.SCT 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(26).exe - Win32/Injector.DXSR 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(3).exe - Win32/Kryptik.GHZP 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(4).exe - MSIL/NanoCore.E 特洛伊木马 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(5).exe - MSIL/Kryptik.OIM 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(6).exe - Generik.LMKLSRD 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(7).exe - Win32/TrojanDownloader.Banload.YEZ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(8).exe - MSIL/Kryptik.DTZ 特洛伊木马 的变种 - 通过删除清除 [1]
C:\Users\Admin\Desktop\AVtest100\PACKAGE 06212MalBehav0918\PACKAGE 06212\(9).exe - MSIL/Autorun.Spy.Agent.CM 蠕虫 的变种 - 通过删除清除 [1]
已扫描的对象数: 88
发现的威胁数: 25
已清除对象数: 25
完成时间: 9:56:36 总扫描时间: 149 秒 (00:02:29)
备注:
[1] 由于对象中仅包含病毒主体,因此已被删除。
Dr.Web CureIt! 简体中文绿色免费版---( Windows 7 Ultimate with SP1 简体中文旗舰版....):
-----------------------------------------------------------------------------
Start scanning
-----------------------------------------------------------------------------
Command line used:-rpcep:\pipe\311FD725F -rpcpr:np
Limit the use of the computer resources to 100%
Instances used for this session: 10
Object(s) to scan:
- C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(13).exe - Ok
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(16).exe - infected with BackDoor.RevetRat.2
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(16).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(12).exe - infected with Trojan.PWS.Stealer.21213
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(12).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(18).exe - infected with Trojan.PWS.Banker1.26525
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(18).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(15).exe - infected with Trojan.Siggen7.55145
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(15).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(1).exe - infected with Trojan.PWS.Stealer.19347
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(1).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(19).exe - infected with Trojan.PWS.Stealer.13025
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(19).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(10).exe - infected with Trojan.Betabot.263
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(10).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(14).exe - infected with Trojan.DownLoader26.53049
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(14).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(17).exe - infected with Trojan.PWS.Stealer.23680
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(17).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(2).exe - infected with Trojan.Inject1.54688
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(2).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(25).exe - infected with Trojan.MulDrop8.27204
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(25).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(23).exe - infected with Trojan.PWS.DanaBot.26
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(23).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(3).exe - infected with Trojan.EmotetENT.245
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(3).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(4).exe - infected with Trojan.Nanocore.23
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(4).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(8).exe - infected with BackDoor.Bladabindi.13678
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(8).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(22).exe - infected with Trojan.Inject3.4015
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(22).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(11).exe - infected with Trojan.PWS.Stealer.19347
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(11).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(5).exe - infected with Trojan.Siggen7.55153
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(5).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(21).exe - infected with Trojan.PWS.Stealer.13025
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(21).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(26).exe - infected with Trojan.Inject1.54688
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(26).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(7).exe - infected with Trojan.DownLoader26.52602
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(7).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(20).exe - infected with Trojan.PWS.Spy.20962
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(20).exe - infected
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(9).exe - infected with Trojan.DownLoader17.62847
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(9).exe - infected
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(6).exe - packed by ASPROTECT
>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(24).exe is INNO SETUP container
>>C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(24).exe\Script2.bin is BINARYRES container
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(24).exe - container
Error to send CureIt! statistics: (12002)
Error to send CureIt! statistics: (12002)
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(6).exe - infected with BackDoor.Comet.2042
C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(6).exe - infected
Total 29636793 bytes in 26 files scanned (84 objects)
Total 2 files (60 objects) are clean
Total 24 files are infected---又双叒叕上传到virustotal.com
Scan time is 00:00:31.655
火绒安全---( Windows 7 Ultimate with SP1 简体中文旗舰版....):部分未知文件已发送到seclab@huorong.cn,等处理中。。。
文件名称: C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212.zip
文件大小: 22.6 MB (23,758,173 字节)
修改时间: 2018年06月25日,09:10:27
MD5: 6111DAFB6C0003C91EDDBB2821E1B125
SHA1: 5828ABD7834F3DDCF499128B93316C7FB3407E92
SHA256: BE4C9E0292D67574B88480BF010114FE473200926FF98800D35EC076E9DF304E
SHA512: 1EB3AE7278A6E2A67E176295D882D3D9240FF347E4FBC173D7614496B134107A94C2CCA937FF037BBDADE68D383B0E3056391BA6784EAA4EC5FCA88FE1B63E0E
CRC32: 468315BA
计算时间: 0.61s
病毒库:2018-06-24 16:28
开始时间:2018-06-25 09:11
总计用时:00:00:06
扫描对象:36个
扫描文件:26个
发现风险:25个
已处理风险:0个
发现系统修复项:0个
处理系统修复项:0个
病毒详情
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(1).exe, 病毒名:Trojan/Generic!D24AABE7951BCF22, 病毒ID:[d24aabe7951bcf22], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(13).exe, 病毒名:Trojan/Generic!DA0D388CF539D78C, 病毒ID:[da0d388cf539d78c], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(10).exe, 病毒名:Trojan/Generic!4E4972CDFDA38B25, 病毒ID:[4e4972cdfda38b25], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(11).exe, 病毒名:Trojan/Generic!1FE6F6017151E85E, 病毒ID:[1fe6f6017151e85e], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(16).exe, 病毒名:Trojan/Generic!363D5B70389F7B03, 病毒ID:[363d5b70389f7b03], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(14).exe, 病毒名:Trojan/Generic!E3740080998B674D, 病毒ID:[e3740080998b674d], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(18).exe, 病毒名:Trojan/Generic!36F5F39FA0D88247, 病毒ID:[36f5f39fa0d88247], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(17).exe, 病毒名:Trojan/VBInject.b, 病毒ID:[e4beee39ea2e9885], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(19).exe, 病毒名:Trojan/Generic!BBF0FDD77CC21B7C, 病毒ID:[bbf0fdd77cc21b7c], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(2).exe, 病毒名:Trojan/Generic!D045C6539A544D3B, 病毒ID:[d045c6539a544d3b], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(21).exe, 病毒名:Trojan/Generic!7A402E8A8A624D2B, 病毒ID:[7a402e8a8a624d2b], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(12).exe, 病毒名:HVM:Trojan/MalBehav.gen!A, 病毒ID:[c6237e1e8884ed50], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(15).exe, 病毒名:Trojan/Generic!6D102717CAC1947A, 病毒ID:[6d102717cac1947a], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(22).exe, 病毒名:Trojan/Generic!116AB8F2F886306B, 病毒ID:[116ab8f2f886306b], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(25).exe, 病毒名:Trojan/Generic!CF6AB1A909144CAB, 病毒ID:[cf6ab1a909144cab], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(3).exe, 病毒名:Trojan/Generic!22BC23DCA5F025CF, 病毒ID:[22bc23dca5f025cf], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(23).exe, 病毒名:Trojan/Generic!A9290BCA4BD3F34D, 病毒ID:[a9290bca4bd3f34d], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(5).exe, 病毒名:Trojan/Generic!BBD107A6D6657D8A, 病毒ID:[bbd107a6d6657d8a], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(4).exe, 病毒名:Backdoor/Nanocore, 病毒ID:[72d284c62aeeb6cf], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(26).exe, 病毒名:Trojan/Generic!D27657C22B8868DF, 病毒ID:[d27657c22b8868df], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(24).exe, 病毒名:Trojan/Generic!2BF8AA367935DE9E, 病毒ID:[2bf8aa367935de9e], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(8).exe, 病毒名:Trojan/Generic!84ACFAE6BDC92771, 病毒ID:[84acfae6bdc92771], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(7).exe, 病毒名:Trojan/Generic!9937C5F6F5961858, 病毒ID:[9937c5f6f5961858], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(9).exe, 病毒名:HEUR:Trojan/MSIL.Injector.c, 病毒ID:[84623aa13f22497], 处理结果:已忽略
风险路径:C:\Users\xfxnet2000\Desktop\MX Player Pro\175418360\145802370\479704092\AVTest100\PACKAGE 06212\(6).exe, 病毒名:Trojan/Generic!4623A5734EC4E602, 病毒ID:[4623a5734ec4e602], 处理结果:已忽略
----Generic???? |