又来一只

显示全部楼层 · 发表于 2008-4-14 13:09:51

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\guyi-emply.rar'
E:\新建文件夹 (2)\guyi-emply.rar
  [0] Archive type: RAR
  --> guyi-emply.exe
   [DETECTION] Contains detection pattern of the dropper DR/Dldr.Small.ugy.1
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-4-14 13:13:08

2008-04-14 13:12:24 应用程序保护(运行应用程序) 操作:阻止
进程路径:C:\Documents and Settings\dell\桌面\guyi-emply.exe
文件路径:C:\Documents and Settings\dell\Local Settings\Temp\tool.exe

显示全部楼层 · 发表于 2008-4-14 13:15:56

E:\VIRUS\guyi-emply.rar > RAR > guyi-emply.exe > NSIS > tool.exe - Win32/TrojanDownloader.Small.IAW 特洛伊木马的变种

显示全部楼层 · 发表于 2008-4-14 13:19:32

D:\Downloads\guyi-emply.rar - Win32/TrojanDownloader.Small.IAW 木马的变种 - 已隔离 - 已删除

显示全部楼层 · 发表于 2008-4-14 13:19:48

费尔杀

显示全部楼层 · 发表于 2008-4-14 15:33:38

微点砍掉

显示全部楼层 · 发表于 2008-4-14 15:43:57

http://china.ic-soft.cn/0033.exe

[ 本帖最后由 91343 于 2008-4-14 15:54 编辑 ]

显示全部楼层 · 发表于 2008-4-14 15:45:49

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\0033.exe'
E:\新建文件夹 (2)\0033.exe
[DETECTION] Contains detection pattern of the dropper DR/Dldr.Small.ugy
[INFO] The file was deleted!

显示全部楼层 · 发表于 2008-4-14 15:53:17

卡巴已删除：木马程序 Trojan-Downloader.Win32.Small.ugy 文件: F:\Download\guyi-emply.rar/guyi-emply.exe//stream//data0001//PE_Patch.Upolyx//PE_Patch.UPX//UPX

[病毒样本] 又来一只

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源