837edb

显示全部楼层 · 发表于 2007-6-30 17:45:46

卡巴 pass 上报ing

显示全部楼层 · 发表于 2007-6-30 17:46:24

显示全部楼层 · 发表于 2007-6-30 17:53:18

微点:发现网络蠕虫

显示全部楼层 · 发表于 2007-6-30 17:58:58

启发有问题费尔。

显示全部楼层 · 发表于 2007-6-30 18:02:20

detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\~tmp.rar/~tmp.exe

显示全部楼层 · 发表于 2007-6-30 18:08:12

hoho，又见启发。。

[Scan path] C:\Documents and Settings\Administrator\桌面\~tmp.rar
>>>C:\Documents and Settings\Administrator\桌面\~tmp.rar\~tmp.exe probably infected with DLOADER.Trojan
C:\Documents and Settings\Administrator\桌面\~tmp.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 0
Objects with modifications found: 0
Suspicious objects found: 1
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 12 Kb/s
Scan time: 00:00:01

显示全部楼层 · 发表于 2007-6-30 18:55:23

显示全部楼层 · 发表于 2007-6-30 19:02:43

扫描开始时间: 2007-6-30 19:04:06
扫描日志
NOD32 版本 2365 (20070630) NT
命令行: F:\virus\tmp.rar

日期: 2007年6月30日时间: 19:04:08
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\tmp.rar
F:\virus\tmp.rar ?RAR ?~tmp.exe<病毒 - Win32/Butileg 蠕虫变种>
已扫描文件数量: 1
已发现病毒数量: 1
完成时间: 19:04:08 总共扫描时间: 0 秒 (00:00:00)

显示全部楼层 · 发表于 2007-6-30 20:20:32

Start of the scan: 2007年6月30日  20:20

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\~tmp.rar'
C:\Documents and Settings\Administrator\桌面\~tmp.rar
  [0] Archive type: RAR
  --> ~tmp.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    A backup was created as '46f34b11.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

[病毒样本] 837edb

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源