[病毒样本] 1

显示全部楼层 · 发表于 2008-5-6 10:47:27

上报卡巴

显示全部楼层 · 发表于 2008-5-6 11:04:38

========================================================
Norman Message [2008/05/06 11:03:26]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 169.254.130.35
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'W32/Smalltroj.EGOO'
Login information: User 'Administrator' on host '8E4D8EDEEA564F8'.
File infected: c:/docume~1/admini~1/桌面/新建文~1/1800~1.exe
Virus repaired:
Virus name: 'W32/Smalltroj.EGOO'

========================================================
Norman Message [2008/05/06 11:03:29]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 169.254.130.35
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'W32/Smalltroj.EGOO'
Login information: User 'Administrator' on host '8E4D8EDEEA564F8'.
File infected: c:/docume~1/admini~1/桌面/新建文~1/1800~1.exe
Virus repaired:
Virus name: 'W32/Smalltroj.EGOO'

========================================================
Norman Message [2008/05/06 11:03:37]
--------------------------------------------------------
Application: Norman Utilities
Node address: 169.254.130.35
--------------------------------------------------------

Internal message: NPMC_SYSTEM Norman Utilities started.

显示全部楼层 · 发表于 2008-5-6 11:32:16

微点砍掉

显示全部楼层 · 发表于 2008-5-6 11:36:33

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\1800.zip'
C:\Documents and Settings\morgan\My Documents\
  1800.zip
[0] Archive type: ZIP
--> 1800.exe2
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-5-6 12:35:46

信息 2008-05-06  12:35:37 您此次查毒隔离了1个文件
信息 2008-05-06  12:35:37 您此次查毒共查出1个病毒以及危险代码
信息 2008-05-06  12:35:37 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件3个
信息 2008-05-06  12:35:37 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-05-06  12:35:37 D:\Desktop\1800.zip\1800.exe2 Win32.Troj.Small.339968 隔离成功

显示全部楼层 · 发表于 2008-5-6 12:41:46

C:\Documents and Settings\Administrator\桌面\1800.zip>>1800.exe2 Heuri.Possible/Packed 启发式扫描还未处理

显示全部楼层 · 发表于 2008-5-6 12:58:23

D:\firefox download\1800.zip » ZIP » 1800.exe2 - Win32/Small.NBT trojan - was a part of the deleted object

显示全部楼层 · 发表于 2008-5-6 12:59:55

蜘蛛
[扫描路径] E:\VIRUS\1800.zip
>>E:\VIRUS\1800.zip\1800.exe2 已被病毒感染： DDoS.Bonke
E:\VIRUS\1800.zip - 发现压缩文件中有被感染的对象

显示全部楼层 · 发表于 2008-5-6 19:34:35

[:26:]

显示全部楼层 · 发表于 2008-5-6 20:21:06

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Undef.gar

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.43.12

[病毒样本] 1

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

2/1