16x（20200216）

QVM360

下载

静影沉璧

ESET

Scan:15/16

1. Log
   
2. Scan Log
   
3. Version of detection engine: 20847 (20200215)
   
4. Date: 2020/2/16  Time: 12:14:28
   
5. Scanned disks, folders and files: C:\Users\Administrator\Desktop\16x（20200216）
   
6. C:\Users\Administrator\Desktop\16x（20200216）\AgentTesla_a70e01cdaeb0eac2a5d0b1e62c3f2284.exe - Win32/Delf.NBA virus - action selection postponed until scan completion
   
7. C:\Users\Administrator\Desktop\16x（20200216）\Nota de pago de EFG_0093746573.docx - DOC/TrojanDownloader.Agent.ASV trojan - cleaned by deleting [1]
   
8. C:\Users\Administrator\Desktop\16x（20200216）\PI-INVTRD13022020_pdf.js - JS/Vjworm.BD worm - cleaned by deleting [1]
   
9. C:\Users\Administrator\Desktop\16x（20200216）\PO_ 2006599868900 - NEW ORDER.exe - a variant of Win32/Injector.EKNO trojan - cleaned by deleting [1]
   
10. C:\Users\Administrator\Desktop\16x（20200216）\Purchase Order.doc » RTF » resource.ole2 - probably a variant of Win32/Exploit.CVE-2017-11882.A trojan - cleaned by deleting [1]
    
11. C:\Users\Administrator\Desktop\16x（20200216）\Purchase Order.doc » RTF - a variant of DOC/Abnormal.B trojan - cleaned by deleting [1]
    
12. C:\Users\Administrator\Desktop\16x（20200216）\back4.exe - a variant of Win32/Rozena.ED trojan - cleaned by deleting [1]
    
13. C:\Users\Administrator\Desktop\16x（20200216）\bin_feda.msi » MSI » Binary._D7D112F049BA1A655B5D9A1D0702DEE5 - a variant of Win32/Injector.EKOA trojan - action selection postponed until scan completion
    
14. C:\Users\Administrator\Desktop\16x（20200216）\hatsune.zip » ZIP » hatsune/hatsuneloader.exe - a variant of Win32/Packed.Enigma.CC trojan - action selection postponed until scan completion
    
15. C:\Users\Administrator\Desktop\16x（20200216）\hatsuneloader.exe - a variant of Win32/Packed.Enigma.CC trojan - cleaned by deleting [1]
    
16. C:\Users\Administrator\Desktop\16x（20200216）\inject.exe - a variant of MSIL/Bladabindi.AS trojan - cleaned by deleting [1]
    
17. C:\Users\Administrator\Desktop\16x（20200216）\macit.exe - a variant of Win32/TrojanDownloader.Zurgop.DA trojan - cleaned by deleting [1]
    
18. C:\Users\Administrator\Desktop\16x（20200216）\microsoft.exe - a variant of Win32/Kryptik.HBBU trojan - cleaned by deleting [1]
    
19. C:\Users\Administrator\Desktop\16x（20200216）\sample.exe - a variant of Win32/Kryptik.HBCF trojan - cleaned by deleting [1]
    
20. C:\Users\Administrator\Desktop\16x（20200216）\test.exe - a variant of Win32/Rozena.ED trojan - cleaned by deleting [1]
    
21. C:\Users\Administrator\Desktop\16x（20200216）\tradition.exe - a variant of Generik.FIFHXVI trojan - cleaned by deleting [1]
    
22. C:\Users\Administrator\Desktop\16x（20200216）\AgentTesla_a70e01cdaeb0eac2a5d0b1e62c3f2284.exe - Win32/Delf.NBA virus - deleted
    
23. C:\Users\Administrator\Desktop\16x（20200216）\bin_feda.msi » MSI » Binary._D7D112F049BA1A655B5D9A1D0702DEE5 - a variant of Win32/Injector.EKOA trojan - deleted
    
24. C:\Users\Administrator\Desktop\16x（20200216）\hatsune.zip » ZIP » hatsune/hatsuneloader.exe - a variant of Win32/Packed.Enigma.CC trojan - deleted
    
25. Number of scanned objects: 37
    
26. Number of detections: 16
    
27. Number of cleaned objects: 16
    
28. Time of completion: 12:14:40  Total scanning time: 12 sec (00:00:12)
    
29. 
    
30. Notes:
    
31. [1] Object has been deleted as it only contained the virus body.
    

复制代码

ATP_synthase

卡巴扫描剩余，zip解压后杀exe

Nocria

IKARUS - 13/16

---

Panda Dome - 5/16

a233

Dr.Web扫描剩一个bat

双击unpack_me_1.bat，cmd界面一闪而过，然后就没了

renyifei

bitdefender14/16

剩下个压缩包解压里面为一个DLL。另一个也是dll

梦辍

360卫士
默认引擎：9x
加qvm：12x
加红伞：13x

hklwk

McAfee 扫瞄12X


Nota de pago de EFG_0093746573.docx -> 3DED1065.doc                Exploit-CVE2017-11882.ah
tradition.exe                                                        JTI/Suspect.196612!b8fb44a0af27
PI-INVTRD13022020_pdf.js -> kl-plugin.exe                        Trojan-FIPI!7099A939FA30
unpack_me_1.bat                                                        Miss

心醉咖啡

毒霸

1. 扫描时间：[2020-02-16 13:07:44]
   
2. 扫描用时：[00:00:34]
   
3. 扫描类型：自定义查杀
   
4. 扫描文件总数：38
   
5. 扫描速度：1文件/秒
   
6. 发现威胁：8个
   
7. 清除威胁：8个
   
8. =============================================
   
9. [2020-02-16 13:08:39]
   
10. 威胁：f:\浏览器下载\16x（20200216）\agenttesla_a70e01cdaeb0eac2a5d0b1e62c3f2284.exe
    
11. 类型：win32.infected.autoinfector.a.(kcloud)
    
12. 处理方式：修复
    
13. 
    
14. [2020-02-16 13:08:39]
    
15. 威胁：f:\浏览器下载\16x（20200216）\back4.exe
    
16. 类型：win32.heur.kvm011.a
    
17. 处理方式：删除
    
18. 
    
19. [2020-02-16 13:08:39]
    
20. 威胁：f:\浏览器下载\16x（20200216）\inject.exe
    
21. 类型：win32.troj.undef.(kcloud)
    
22. 处理方式：删除
    
23. 
    
24. [2020-02-16 13:08:39]
    
25. 威胁：f:\浏览器下载\16x（20200216）\macit.exe
    
26. 类型：win32.heur.kvmh008.a.(kcloud)
    
27. 处理方式：删除
    
28. 
    
29. [2020-02-16 13:08:39]
    
30. 威胁：f:\浏览器下载\16x（20200216）\microsoft.exe
    
31. 类型：win32.troj.generic_a.a.(kcloud)
    
32. 处理方式：删除
    
33. 
    
34. [2020-02-16 13:08:39]
    
35. 威胁：f:\浏览器下载\16x（20200216）\po_ 2006599868900 - new order.exe
    
36. 类型：win32.troj.undef.(kcloud)
    
37. 处理方式：删除
    
38. 
    
39. [2020-02-16 13:08:39]
    
40. 威胁：f:\浏览器下载\16x（20200216）\test.exe
    
41. 类型：win32.heur.kvm011.a
    
42. 处理方式：删除
    
43. 
    
44. [2020-02-16 13:08:39]
    
45. 威胁：f:\浏览器下载\16x（20200216）\tradition.exe
    
46. 类型：win32.troj.generic.yz.(kcloud)
    
47. 处理方式：删除
    
48. 
    

复制代码

www-tekeze

火绒杀8X，智量杀14X，留一个bat和压缩档，解压后杀！