瑞星反恶软引擎命令行扫描器（社区交流版）
编译于：Sep 22 2017 15:07:50
提示：
- 本工具供社区交流使用，请勿用于其他用途
- 本工具没有恶意软件删除、清除、隔离功能
- 本工具包含开发中的新特性，结果仅供参考
* 命令行中的选项开关：-output-json -log=F:\瑞星新引擎x64 18.2.4\ScanLog_180706231633.log
* 获取恶软签名库最新版本 ...
* 下载恶软签名库配置文件 ...
* 创建恶软签名库升级组件 ...
* 计算并下载增量文件 ...
* 升级恶软签名库 ...
* 恶软签名库升级成功
* 扫描目标 : (1) F:\PACKAGE 0706
* 加载恶软签名库： F:\瑞星新引擎x64 18.2.4/malware.rmd
* 恶软签名库加载成功，发布序号为 4537
* 读取恶软签名库配置 ...
* 云辅助扫描组件初始化失败.
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
* 初始化引擎环境 ...
扫描开始: Fri Jul 06 23:16:36 2018
{"filename":"F:\\PACKAGE 0706\\0706(13).exe","infect":{"engine":"rdmk","signature":"cmRtazrHDMG4j6/HCh4ohBFMQfl4","threat":"Malware.Heuristic!ET#91%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(16).exe","infect":{"engine":"rdmk","signature":"cmRtazogz2Retsupw0nd0Do+7FDQ","threat":"Malware.Heuristic!ET#92%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(15).exe","infect":{"engine":"rdmk","signature":"cmRtazrQ8YJHOjFxBsnbHxzlpEz1","threat":"Malware.Heuristic!ET#95%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(11).exe","infect":{"engine":"tfe","signature":"dGZlOgXTwcnBAEBpQg","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(10).exe","type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(17).exe","infect":{"engine":"rdmk","signature":"cmRtazr+nDIg2MWuRTtz+9HgO4cE","threat":"Malware.Heuristic!ET#94%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(14).exe","infect":{"engine":"rdmk","signature":"cmRtazrKMnZ5Iu/4/vSyCudCBUek","threat":"Malware.Heuristic!ET#82%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(12).exe","infect":{"engine":"rdmk","signature":"cmRtazrmKP1BDp8lDd6eHI2rXyhL","threat":"Malware.Heuristic!ET#96%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(1).exe","type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(2).exe","infect":{"engine":"tfe","signature":"dGZlOgVw7ZZ02Ny74Q","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(19).exe","infect":{"engine":"rdmk","signature":"cmRtazqmqSIrJ9TKae4V9n9g3L0u","threat":"Malware.Heuristic!ET#90%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(18).exe","infect":{"engine":"rdmk","signature":"cmRtazpf3k/gUdXfH1mVWd66r23u","threat":"Malware.Heuristic!ET#94%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(20).exe","infect":{"engine":"rdmk","signature":"cmRtazqOuHcdVl2rOI5lJI1F9xuV","threat":"Malware.Heuristic!ET#85%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(23).exe","infect":{"engine":"rdmk","signature":"cmRtazr/RLHLfjZWppzWqGU0dywe","threat":"Malware.Heuristic!ET#96%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(22).exe","infect":{"engine":"rdmk","signature":"cmRtazri1xxc/xYjwWYWzDZhH3aa","threat":"Malware.Heuristic!ET#90%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(24).exe","infect":{"engine":"rdmk","signature":"cmRtazoIRc3PcqgAS9WDCp7pT0A4","threat":"Malware.Heuristic!ET#96%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(26).exe","infect":{"engine":"rdmk","signature":"cmRtazpUSWEuHq/EaV4ebuJagQZ8","threat":"Malware.Heuristic!ET#84%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(21).exe","infect":{"engine":"tfe","signature":"dGZlOgXTwcnBAEBpQg","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(3).exe","infect":{"engine":"tfe","signature":"dGZlOgQKz5Dc0rbgbA","threat":"Trojan.GenKryptik!8.AA55"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(4).exe","infect":{"engine":"tfe","signature":"dGZlOgVw7ZZ02Ny74Q","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(6).exe","infect":{"engine":"tfe","signature":"dGZlOgVw7ZZ02Ny74Q","threat":"Trojan.Kryptik!8.8"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(5).exe","infect":{"engine":"rdmk","signature":"cmRtazpzx3I2SsoeIeg18Qi4hKAR","threat":"Malware.Heuristic!ET#86%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(9).exe","infect":{"engine":"rdmk","signature":"cmRtazqP/VRkUad9DlfX3Vy+jvbU","threat":"Malware.Heuristic!ET#95%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(7).exe","infect":{"engine":"rdmk","signature":"cmRtazqfZKaREq8GBXkGGvecH1Az","threat":"Malware.Heuristic!ET#88%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(8).exe","infect":{"engine":"rdmk","signature":"cmRtazoOUOwVFFBYcF6HS9ZWwbWH","threat":"Malware.Heuristic!ET#85%"},"type":"scan"}
{"filename":"F:\\PACKAGE 0706\\0706(25).exe","type":"scan"}
扫描结束: Fri Jul 06 23:16:36 2018
总扫描耗时: 0:0:449(m:s:ms)
总扫描对象: 29
总扫描文件: 26
总恶意文件: 23
有效检出率: 88.46% |
楼主: Jerry.Lin
[复制链接]
发表于 2018-7-6 22:41:58
个人猜测对于脚本小子来说，除了效果立竿见影的破坏性病毒（比如勒索），一般病毒想持久免杀联网的卡巴已经很难了。楼主的样本截至23:15只有样本10没有检出了，可能是由于测试电脑没有java，没运行成功触发上传自动机
