apt攻击样本6x

wwwab

就是360云沙箱报告精选那6个，统统都是10分满分级别的病毒

微云：https://share.weiyun.com/Yp11zycu文叔叔：https://ws28.cn/f/5y4qydavyy8 复制链接到浏览器打开

aboringman

Norton：All

solstice1988

智量就扫出来一个

薪媛

Malwarebytes 3

yg19

BD：下载前拦截

1. Online Threat Prevention
   
2. 
   
3. 为了保护你，我们屏蔽了这个危险的页面:
   
4. https://down.ws59.cn/86vbgyt/5/y4/5y4k86vbgyt?cdn_sign=1626750278-35-0-f0964c16ad332a7614e563ff185fa328&exp=120&response-content-disposition=attachment%3B%20filename%3D%22%E5%BD%92%E6%A1%A3.zip%22%3B%20filename%2A%3Dutf-8%27%27%25E5%25BD%2592%25E6%25A1%25A3.zip
   
5. 威胁名称: Gen:HackTool.WinCred.2
   
6. 危险的网页试图安装软件，可以损害设备，收集个人信息或未经您的同意操作。
   

复制代码

泉州晋江

卡巴斯基剩下一个压缩包

秋日之殇

卡巴清空，剩余的一个940卡巴清除了

救命稻草

G DATA

1. Archive: ca6a04f9f5d1a15be1816d9bd8e16bdb52ede8fecc621572126fa2a766106f54.rtf
   
2.         Path: C:\Users\Jkc\Desktop\virus\归档 (2)
   
3.         Status: Virus detected
   
4.         Virus: Exploit.CVE-2018-0802.Gen (2x) (Engine A)
   
5.         ----------------------------------------------------------------
   
6.         Object: (objdata)=>()
   
7.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\ca6a04f9f5d1a15be1816d9bd8e16bdb52ede8fecc621572126fa2a766106f54.rtf
   
8.                 Status: Virus detected
   
9.                 Virus: Exploit.CVE-2018-0802.Gen
   
10.         Object: (objdata)=>(Embedded DocFile g)
    
11.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\ca6a04f9f5d1a15be1816d9bd8e16bdb52ede8fecc621572126fa2a766106f54.rtf
    
12.                 Status: Virus detected
    
13.                 Virus: Exploit.CVE-2018-0802.Gen
    
14.         ----------------------------------------------------------------
    
15. 
    
16. Object: dac2647367ae934133d0dae72b23d61b169dad4fac42976658cbfb8db3bb0ab5.exe
    
17.         Path: C:\Users\Jkc\Desktop\virus\归档 (2)
    
18.         Status: Virus detected
    
19.         Virus: DeepScan:Generic.Ransom.Sodinokibi.0D04E91C (Engine A)
    
20. 
    
21. Archive: 940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
22.         Path: C:\Users\Jkc\Desktop\virus\归档 (2)
    
23.         Status: Virus detected
    
24.         Virus: Exploit.CVE-2012-1856.Gen (80x), Trojan.GenericKD.5153825 (2x), Trojan.GenericKD.5226166 (2x), Trojan.RTF-COM-Dropper.Gen (Engine A)
    
25.         ----------------------------------------------------------------
    
26.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX1.bin
    
27.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
28.                 Status: Virus detected
    
29.                 Virus: Trojan.GenericKD.5153825
    
30.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX1.xml=>(dummy)
    
31.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
32.                 Status: Virus detected
    
33.                 Virus: Exploit.CVE-2012-1856.Gen
    
34.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX10.xml=>(dummy)
    
35.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
36.                 Status: Virus detected
    
37.                 Virus: Exploit.CVE-2012-1856.Gen
    
38.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX11.xml=>(dummy)
    
39.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
40.                 Status: Virus detected
    
41.                 Virus: Exploit.CVE-2012-1856.Gen
    
42.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX12.xml=>(dummy)
    
43.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
44.                 Status: Virus detected
    
45.                 Virus: Exploit.CVE-2012-1856.Gen
    
46.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX13.xml=>(dummy)
    
47.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
48.                 Status: Virus detected
    
49.                 Virus: Exploit.CVE-2012-1856.Gen
    
50.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX14.xml=>(dummy)
    
51.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
52.                 Status: Virus detected
    
53.                 Virus: Exploit.CVE-2012-1856.Gen
    
54.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX15.xml=>(dummy)
    
55.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
56.                 Status: Virus detected
    
57.                 Virus: Exploit.CVE-2012-1856.Gen
    
58.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX16.xml=>(dummy)
    
59.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
60.                 Status: Virus detected
    
61.                 Virus: Exploit.CVE-2012-1856.Gen
    
62.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX17.xml=>(dummy)
    
63.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
64.                 Status: Virus detected
    
65.                 Virus: Exploit.CVE-2012-1856.Gen
    
66.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX18.xml=>(dummy)
    
67.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
68.                 Status: Virus detected
    
69.                 Virus: Exploit.CVE-2012-1856.Gen
    
70.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX19.xml=>(dummy)
    
71.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
72.                 Status: Virus detected
    
73.                 Virus: Exploit.CVE-2012-1856.Gen
    
74.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX2.xml=>(dummy)
    
75.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
76.                 Status: Virus detected
    
77.                 Virus: Exploit.CVE-2012-1856.Gen
    
78.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX20.xml=>(dummy)
    
79.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
80.                 Status: Virus detected
    
81.                 Virus: Exploit.CVE-2012-1856.Gen
    
82.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX21.xml=>(dummy)
    
83.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
84.                 Status: Virus detected
    
85.                 Virus: Exploit.CVE-2012-1856.Gen
    
86.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX22.xml=>(dummy)
    
87.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
88.                 Status: Virus detected
    
89.                 Virus: Exploit.CVE-2012-1856.Gen
    
90.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX23.xml=>(dummy)
    
91.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
92.                 Status: Virus detected
    
93.                 Virus: Exploit.CVE-2012-1856.Gen
    
94.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX24.xml=>(dummy)
    
95.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
96.                 Status: Virus detected
    
97.                 Virus: Exploit.CVE-2012-1856.Gen
    
98.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX25.xml=>(dummy)
    
99.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
    
100.                 Status: Virus detected
     
101.                 Virus: Exploit.CVE-2012-1856.Gen
     
102.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX26.xml=>(dummy)
     
103.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
104.                 Status: Virus detected
     
105.                 Virus: Exploit.CVE-2012-1856.Gen
     
106.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX27.xml=>(dummy)
     
107.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
108.                 Status: Virus detected
     
109.                 Virus: Exploit.CVE-2012-1856.Gen
     
110.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX28.xml=>(dummy)
     
111.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
112.                 Status: Virus detected
     
113.                 Virus: Exploit.CVE-2012-1856.Gen
     
114.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX29.xml=>(dummy)
     
115.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
116.                 Status: Virus detected
     
117.                 Virus: Exploit.CVE-2012-1856.Gen
     
118.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX3.xml=>(dummy)
     
119.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
120.                 Status: Virus detected
     
121.                 Virus: Exploit.CVE-2012-1856.Gen
     
122.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX30.xml=>(dummy)
     
123.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
124.                 Status: Virus detected
     
125.                 Virus: Exploit.CVE-2012-1856.Gen
     
126.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX31.xml=>(dummy)
     
127.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
128.                 Status: Virus detected
     
129.                 Virus: Exploit.CVE-2012-1856.Gen
     
130.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX32.xml=>(dummy)
     
131.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
132.                 Status: Virus detected
     
133.                 Virus: Exploit.CVE-2012-1856.Gen
     
134.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX33.xml=>(dummy)
     
135.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
136.                 Status: Virus detected
     
137.                 Virus: Exploit.CVE-2012-1856.Gen
     
138.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX34.xml=>(dummy)
     
139.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
140.                 Status: Virus detected
     
141.                 Virus: Exploit.CVE-2012-1856.Gen
     
142.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX35.xml=>(dummy)
     
143.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
144.                 Status: Virus detected
     
145.                 Virus: Exploit.CVE-2012-1856.Gen
     
146.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX36.xml=>(dummy)
     
147.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
148.                 Status: Virus detected
     
149.                 Virus: Exploit.CVE-2012-1856.Gen
     
150.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX37.xml=>(dummy)
     
151.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
152.                 Status: Virus detected
     
153.                 Virus: Exploit.CVE-2012-1856.Gen
     
154.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX38.xml=>(dummy)
     
155.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
156.                 Status: Virus detected
     
157.                 Virus: Exploit.CVE-2012-1856.Gen
     
158.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX39.xml=>(dummy)
     
159.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
160.                 Status: Virus detected
     
161.                 Virus: Exploit.CVE-2012-1856.Gen
     
162.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX4.xml=>(dummy)
     
163.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
164.                 Status: Virus detected
     
165.                 Virus: Exploit.CVE-2012-1856.Gen
     
166.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX40.xml=>(dummy)
     
167.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
168.                 Status: Virus detected
     
169.                 Virus: Exploit.CVE-2012-1856.Gen
     
170.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX5.xml=>(dummy)
     
171.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
172.                 Status: Virus detected
     
173.                 Virus: Exploit.CVE-2012-1856.Gen
     
174.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX6.xml=>(dummy)
     
175.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
176.                 Status: Virus detected
     
177.                 Virus: Exploit.CVE-2012-1856.Gen
     
178.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX7.xml=>(dummy)
     
179.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
180.                 Status: Virus detected
     
181.                 Virus: Exploit.CVE-2012-1856.Gen
     
182.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX8.xml=>(dummy)
     
183.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
184.                 Status: Virus detected
     
185.                 Virus: Exploit.CVE-2012-1856.Gen
     
186.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(8iczka20Qo5VfLgX)=>(Package)=>word/activeX/activeX9.xml=>(dummy)
     
187.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
188.                 Status: Virus detected
     
189.                 Virus: Exploit.CVE-2012-1856.Gen
     
190.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)
     
191.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
192.                 Status: Virus detected
     
193.                 Virus: Trojan.GenericKD.5226166
     
194.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX1.bin
     
195.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
196.                 Status: Virus detected
     
197.                 Virus: Trojan.GenericKD.5153825
     
198.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX1.xml=>(dummy)
     
199.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
200.                 Status: Virus detected
     
201.                 Virus: Exploit.CVE-2012-1856.Gen
     
202.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX10.xml=>(dummy)
     
203.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
204.                 Status: Virus detected
     
205.                 Virus: Exploit.CVE-2012-1856.Gen
     
206.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX11.xml=>(dummy)
     
207.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
208.                 Status: Virus detected
     
209.                 Virus: Exploit.CVE-2012-1856.Gen
     
210.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX12.xml=>(dummy)
     
211.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
212.                 Status: Virus detected
     
213.                 Virus: Exploit.CVE-2012-1856.Gen
     
214.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX13.xml=>(dummy)
     
215.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
216.                 Status: Virus detected
     
217.                 Virus: Exploit.CVE-2012-1856.Gen
     
218.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX14.xml=>(dummy)
     
219.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
220.                 Status: Virus detected
     
221.                 Virus: Exploit.CVE-2012-1856.Gen
     
222.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX15.xml=>(dummy)
     
223.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
224.                 Status: Virus detected
     
225.                 Virus: Exploit.CVE-2012-1856.Gen
     
226.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX16.xml=>(dummy)
     
227.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
228.                 Status: Virus detected
     
229.                 Virus: Exploit.CVE-2012-1856.Gen
     
230.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX17.xml=>(dummy)
     
231.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
232.                 Status: Virus detected
     
233.                 Virus: Exploit.CVE-2012-1856.Gen
     
234.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX18.xml=>(dummy)
     
235.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
236.                 Status: Virus detected
     
237.                 Virus: Exploit.CVE-2012-1856.Gen
     
238.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX19.xml=>(dummy)
     
239.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
240.                 Status: Virus detected
     
241.                 Virus: Exploit.CVE-2012-1856.Gen
     
242.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX2.xml=>(dummy)
     
243.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
244.                 Status: Virus detected
     
245.                 Virus: Exploit.CVE-2012-1856.Gen
     
246.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX20.xml=>(dummy)
     
247.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
248.                 Status: Virus detected
     
249.                 Virus: Exploit.CVE-2012-1856.Gen
     
250.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX21.xml=>(dummy)
     
251.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
252.                 Status: Virus detected
     
253.                 Virus: Exploit.CVE-2012-1856.Gen
     
254.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX22.xml=>(dummy)
     
255.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
256.                 Status: Virus detected
     
257.                 Virus: Exploit.CVE-2012-1856.Gen
     
258.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX23.xml=>(dummy)
     
259.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
260.                 Status: Virus detected
     
261.                 Virus: Exploit.CVE-2012-1856.Gen
     
262.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX24.xml=>(dummy)
     
263.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
264.                 Status: Virus detected
     
265.                 Virus: Exploit.CVE-2012-1856.Gen
     
266.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX25.xml=>(dummy)
     
267.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
268.                 Status: Virus detected
     
269.                 Virus: Exploit.CVE-2012-1856.Gen
     
270.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX26.xml=>(dummy)
     
271.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
272.                 Status: Virus detected
     
273.                 Virus: Exploit.CVE-2012-1856.Gen
     
274.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX27.xml=>(dummy)
     
275.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
276.                 Status: Virus detected
     
277.                 Virus: Exploit.CVE-2012-1856.Gen
     
278.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX28.xml=>(dummy)
     
279.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
280.                 Status: Virus detected
     
281.                 Virus: Exploit.CVE-2012-1856.Gen
     
282.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX29.xml=>(dummy)
     
283.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
284.                 Status: Virus detected
     
285.                 Virus: Exploit.CVE-2012-1856.Gen
     
286.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX3.xml=>(dummy)
     
287.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
288.                 Status: Virus detected
     
289.                 Virus: Exploit.CVE-2012-1856.Gen
     
290.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX30.xml=>(dummy)
     
291.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
292.                 Status: Virus detected
     
293.                 Virus: Exploit.CVE-2012-1856.Gen
     
294.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX31.xml=>(dummy)
     
295.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
296.                 Status: Virus detected
     
297.                 Virus: Exploit.CVE-2012-1856.Gen
     
298.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX32.xml=>(dummy)
     
299.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
300.                 Status: Virus detected
     
301.                 Virus: Exploit.CVE-2012-1856.Gen
     
302.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX33.xml=>(dummy)
     
303.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
304.                 Status: Virus detected
     
305.                 Virus: Exploit.CVE-2012-1856.Gen
     
306.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX34.xml=>(dummy)
     
307.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
308.                 Status: Virus detected
     
309.                 Virus: Exploit.CVE-2012-1856.Gen
     
310.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX35.xml=>(dummy)
     
311.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
312.                 Status: Virus detected
     
313.                 Virus: Exploit.CVE-2012-1856.Gen
     
314.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX36.xml=>(dummy)
     
315.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
316.                 Status: Virus detected
     
317.                 Virus: Exploit.CVE-2012-1856.Gen
     
318.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX37.xml=>(dummy)
     
319.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
320.                 Status: Virus detected
     
321.                 Virus: Exploit.CVE-2012-1856.Gen
     
322.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX38.xml=>(dummy)
     
323.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
324.                 Status: Virus detected
     
325.                 Virus: Exploit.CVE-2012-1856.Gen
     
326.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX39.xml=>(dummy)
     
327.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
328.                 Status: Virus detected
     
329.                 Virus: Exploit.CVE-2012-1856.Gen
     
330.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX4.xml=>(dummy)
     
331.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
332.                 Status: Virus detected
     
333.                 Virus: Exploit.CVE-2012-1856.Gen
     
334.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX40.xml=>(dummy)
     
335.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
336.                 Status: Virus detected
     
337.                 Virus: Exploit.CVE-2012-1856.Gen
     
338.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX5.xml=>(dummy)
     
339.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
340.                 Status: Virus detected
     
341.                 Virus: Exploit.CVE-2012-1856.Gen
     
342.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX6.xml=>(dummy)
     
343.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
344.                 Status: Virus detected
     
345.                 Virus: Exploit.CVE-2012-1856.Gen
     
346.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX7.xml=>(dummy)
     
347.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
348.                 Status: Virus detected
     
349.                 Virus: Exploit.CVE-2012-1856.Gen
     
350.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX8.xml=>(dummy)
     
351.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
352.                 Status: Virus detected
     
353.                 Virus: Exploit.CVE-2012-1856.Gen
     
354.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(Embedded DocFile g)=>(Package)=>word/activeX/activeX9.xml=>(dummy)
     
355.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
356.                 Status: Virus detected
     
357.                 Virus: Exploit.CVE-2012-1856.Gen
     
358.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(oTKloaDr.wRAssEMBly.1)
     
359.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
360.                 Status: Virus detected
     
361.                 Virus: Trojan.RTF-COM-Dropper.Gen
     
362.         Object: [Subject: Attached Purchase order][Date: 14 Oct 2019 07:52:23 -0700]=>Purchase Order 74802 Port Jo'burg - Copy.doc=>(objdata)=>(PfB5fL)=>(Package)
     
363.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\940dd34e399d97247494b83ea41ad140b8bb1d8008db4097703c865e2bef8a22.exe
     
364.                 Status: Virus detected
     
365.                 Virus: Trojan.GenericKD.5226166
     
366.         ----------------------------------------------------------------
     
367. 
     
368. Archive: 36dadfcae878c299ea1b563eac0240a7b352a0ff24c599225b42b503ea2f63a9.dll
     
369.         Path: C:\Users\Jkc\Desktop\virus\归档 (2)
     
370.         Status: Virus detected
     
371.         Virus: Trojan.Generic.5848174, Trojan.Ransom.Petya.C, Trojan.Ransom.WannaCryptor.A (Engine A), Win32.Trojan-Ransom.WannaCry.A, Win32.Trojan.Agent.IT92BA (Engine B)
     
372.         ----------------------------------------------------------------
     
373.         Object: (RAR Sfx o)=>1.exe
     
374.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\36dadfcae878c299ea1b563eac0240a7b352a0ff24c599225b42b503ea2f63a9.dll
     
375.                 Status: Virus detected
     
376.                 Virus: Trojan.Generic.5848174
     
377.         Object: (RAR Sfx o)=>3.EXE
     
378.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\36dadfcae878c299ea1b563eac0240a7b352a0ff24c599225b42b503ea2f63a9.dll
     
379.                 Status: Virus detected
     
380.                 Virus: Trojan.Ransom.WannaCryptor.A
     
381.         Object: (RAR Sfx o)=>9.exe
     
382.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\36dadfcae878c299ea1b563eac0240a7b352a0ff24c599225b42b503ea2f63a9.dll
     
383.                 Status: Virus detected
     
384.                 Virus: Trojan.Ransom.Petya.C
     
385.         Object: 3.EXE
     
386.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\36dadfcae878c299ea1b563eac0240a7b352a0ff24c599225b42b503ea2f63a9.dll
     
387.                 Status: Virus detected
     
388.                 Virus: Win32.Trojan-Ransom.WannaCry.A
     
389.         Object: 9.exe
     
390.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\36dadfcae878c299ea1b563eac0240a7b352a0ff24c599225b42b503ea2f63a9.dll
     
391.                 Status: Virus detected
     
392.                 Virus: Win32.Trojan.Agent.IT92BA
     
393.         ----------------------------------------------------------------
     
394. 
     
395. Archive: e23cdad77fa6de90822e92ae19f17abc833bb38685b415f5813d280fa1a6a590.docx
     
396.         Path: C:\Users\Jkc\Desktop\virus\归档 (2)
     
397.         Status: Virus detected
     
398.         Virus: Trojan.Script.1026663 (Engine A)
     
399.         ----------------------------------------------------------------
     
400.         Object: word/_rels/webSettings.xml.rels
     
401.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\e23cdad77fa6de90822e92ae19f17abc833bb38685b415f5813d280fa1a6a590.docx
     
402.                 Status: Virus detected
     
403.                 Virus: Trojan.Script.1026663
     
404.         ----------------------------------------------------------------
     
405. 
     
406. Archive: f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
407.         Path: C:\Users\Jkc\Desktop\virus\归档 (2)
     
408.         Status: Virus detected
     
409.         Virus: Backdoor.Generic.929786, Gen:HackTool.WinCred.2 (3x), Gen:Trojan.Ipatre.1, Gen:Variant.Cabby.3 (6x), Gen:Variant.Cabby.4, Gen:Variant.Graftor.144274 (2x), Gen:Variant.Graftor.148873, Gen:Variant.Kazy.400775, Gen:Variant.Ser.Johnnie.3796, Gen:Variant.Ser.Zusy.3303, Gen:Variant.Symmi.51484, Trojan.Agent.BEUB, Trojan.Foreign.Gen.2 (3x), Trojan.Generic.11675213, Trojan.GenericKD.31673419 (Engine A), Win32.Trojan-Downloader.Cabby.C (2x), Win32.Trojan-Ransom.Cryptolocker.F@susp (3x) (Engine B)
     
410.         ----------------------------------------------------------------
     
411.         Object: 322d2273733ae21329d9adb26ff7c9b08eccd89fc0a0d706a541be86942e05bb
     
412.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
413.                 Status: Virus detected
     
414.                 Virus: Trojan.Generic.11675213
     
415.         Object: 427bc071b21f6e715e1a0181275bf5cc6897aceb5942fcdcf05bed661a61b2e2
     
416.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
417.                 Status: Virus detected
     
418.                 Virus: Gen:Variant.Cabby.3
     
419.         Object: 4c740b7f0bdc728daf9fca05241e85d921a54a6e17ae47ed1577a2b30792cf5c
     
420.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
421.                 Status: Virus detected
     
422.                 Virus: Win32.Trojan-Ransom.Cryptolocker.F@susp
     
423.         Object: 4c740b7f0bdc728daf9fca05241e85d921a54a6e17ae47ed1577a2b30792cf5c
     
424.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
425.                 Status: Virus detected
     
426.                 Virus: Gen:Variant.Cabby.4
     
427.         Object: 4cb2d08cfc3ea3549f3caa147ef899f808ccedd131c7a58ed281ef52de12f7a2
     
428.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
429.                 Status: Virus detected
     
430.                 Virus: Trojan.Foreign.Gen.2
     
431.         Object: 4cc61f47b9aaddc03fa981bf580b4c54df2686484c27a96b3aff3b7871e0fc2a
     
432.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
433.                 Status: Virus detected
     
434.                 Virus: Trojan.Foreign.Gen.2
     
435.         Object: 4cf536f330b711ec46b1893d977bfa92c5036c103f57d2b0ea161d1d04af37cd
     
436.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
437.                 Status: Virus detected
     
438.                 Virus: Win32.Trojan-Downloader.Cabby.C
     
439.         Object: 4cf536f330b711ec46b1893d977bfa92c5036c103f57d2b0ea161d1d04af37cd
     
440.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
441.                 Status: Virus detected
     
442.                 Virus: Gen:Variant.Cabby.3
     
443.         Object: 4ebab908cc77dc9daf85909e737f7885bb0ca2568c35bae4a762e26de6d9032e
     
444.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
445.                 Status: Virus detected
     
446.                 Virus: Gen:HackTool.WinCred.2
     
447.         Object: 51a9a45446bf656a681d41971d6f4b008a0bb21a298efe9a8feed8d22057462b
     
448.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
449.                 Status: Virus detected
     
450.                 Virus: Win32.Trojan-Ransom.Cryptolocker.F@susp
     
451.         Object: 51a9a45446bf656a681d41971d6f4b008a0bb21a298efe9a8feed8d22057462b
     
452.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
453.                 Status: Virus detected
     
454.                 Virus: Gen:Variant.Ser.Johnnie.3796
     
455.         Object: 56733093b97481ba54d82ce372335876602e679e57492559e984839c76bbfe60
     
456.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
457.                 Status: Virus detected
     
458.                 Virus: Gen:Variant.Graftor.148873
     
459.         Object: 66220c002f66085d9f873e796ad51925ad9a71addf1c4ff3fdd3101904ed60c3
     
460.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
461.                 Status: Virus detected
     
462.                 Virus: Gen:Variant.Symmi.51484
     
463.         Object: 664d484960d70f0dabeddeb9ac4dfb8ed2e990ad0e044eb90db19f9828ac4711
     
464.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
465.                 Status: Virus detected
     
466.                 Virus: Backdoor.Generic.929786
     
467.         Object: 6923940b1bec588095ea8327f30804b82e5bbb316d3466971f14ea7ba1b93f83
     
468.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
469.                 Status: Virus detected
     
470.                 Virus: Gen:Variant.Cabby.3
     
471.         Object: 79658e005c464bab422f87a1b5c562f2fcc87d984677e82e8b0bee63c2f92e91
     
472.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
473.                 Status: Virus detected
     
474.                 Virus: Gen:HackTool.WinCred.2
     
475.         Object: 8425e21ff8e67b7a234b1f93a869809d03cdd325835fbaf9c61749d6e1810341
     
476.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
477.                 Status: Virus detected
     
478.                 Virus: Gen:Variant.Cabby.3
     
479.         Object: 90e935f3e5917842f0cc4560633e35c749a916f024c009c2bd3f9ec54930f72f
     
480.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
481.                 Status: Virus detected
     
482.                 Virus: Trojan.Foreign.Gen.2
     
483.         Object: 92d0e67507f277389a27a6534200698b24aaaf48c2e2983b1e828040cb876284
     
484.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
485.                 Status: Virus detected
     
486.                 Virus: Gen:HackTool.WinCred.2
     
487.         Object: 9a51f6861c6c5dde68c3ef153e53cfbbf9ea965307291b86b493bd916cc03f04
     
488.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
489.                 Status: Virus detected
     
490.                 Virus: Gen:Variant.Graftor.144274
     
491.         Object: b02dc0fcb42c444d2fadab7814afb7148a1a81b576a4d6c1220d5d11a279de64
     
492.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
493.                 Status: Virus detected
     
494.                 Virus: Gen:Variant.Cabby.3
     
495.         Object: b85c712180519f819c0ce7bfb0b178fe05385caa6426ba5b32c1551788165f39
     
496.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
497.                 Status: Virus detected
     
498.                 Virus: Gen:Variant.Ser.Zusy.3303
     
499.         Object: bbb5ae14de09bf560a206ced8769d24c35af27232dc01c3f59a5f4762398d711
     
500.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
501.                 Status: Virus detected
     
502.                 Virus: Gen:Variant.Graftor.144274
     
503.         Object: bea5b1e72c25d978222b27766acd89cc83ff715ef6699589d0422a31393698f0
     
504.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
505.                 Status: Virus detected
     
506.                 Virus: Gen:Variant.Kazy.400775
     
507.         Object: ea5981c8268d3b73f82865935234bb28f1172ff34e61b45439753c9c6b4991ad
     
508.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
509.                 Status: Virus detected
     
510.                 Virus: Trojan.Agent.BEUB
     
511.         Object: ec17168e49cd12795819e1ca4cddce608f14a894a54b3a4384ee390cad8d6580
     
512.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
513.                 Status: Virus detected
     
514.                 Virus: Trojan.GenericKD.31673419
     
515.         Object: f916002bf7277149eae7b725d92e3f55b758d79938a1c576295c3087722e8087
     
516.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
517.                 Status: Virus detected
     
518.                 Virus: Win32.Trojan-Ransom.Cryptolocker.F@susp
     
519.         Object: f916002bf7277149eae7b725d92e3f55b758d79938a1c576295c3087722e8087
     
520.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
521.                 Status: Virus detected
     
522.                 Virus: Gen:Trojan.Ipatre.1
     
523.         Object: ff9c36dab952808c638183e8363d1c364b77dfe1df269125b82e5037c73d17bb
     
524.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
525.                 Status: Virus detected
     
526.                 Virus: Win32.Trojan-Downloader.Cabby.C
     
527.         Object: ff9c36dab952808c638183e8363d1c364b77dfe1df269125b82e5037c73d17bb
     
528.                 In archive: C:\Users\Jkc\Desktop\virus\归档 (2)\f34afe43df50f08c7d62250d4348b3c902858eb5555338c97de5375bf867bac4.exe
     
529.                 Status: Virus detected
     
530.                 Virus: Gen:Variant.Cabby.3

复制代码

wwwab

aboringman 发表于 2021-7-20 11:00
Norton：All（剩两个空壳）

压缩包里的一堆图片是？？？？？？这些不检测。

私人文件，不小心一起压进去了

链接已更换

蓝雨风暴

EMSI，kill 2x