我现在发现我真的是太容易识别download..

lx1234

norman还剩3个
Norman Message [2008/06/01 22:00:28]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y16.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y16.exe

========================================================
Norman Message [2008/06/01 22:00:28]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y21.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y21.exe

========================================================
Norman Message [2008/06/01 22:00:28]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y26.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y26.exe

========================================================
Norman Message [2008/06/01 22:00:28]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'W32/Suspicious_U.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y7.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y7.exe

========================================================
Norman Message [2008/06/01 22:00:28]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y12.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y12.exe

========================================================
Norman Message [2008/06/01 22:00:28]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y2.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y2.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'
Login information: User 'LX' on host 'PS-D387DAC1A933'.
File infected: c:/docume~1/lx/桌面/downlo~1/y5.exe
Virus repaired:
Virus name: 'Suspicious_F.gen'

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y17.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y17.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y22.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y22.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'W32/Suspicious_U.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y27.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y27.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y3.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y3.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'W32/Rootkit.IRI'

File infected: c:/docume~1/lx/桌面/downlo~1/y8.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y8.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y13.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y13.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y18.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y18.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y23.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y23.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y28.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y28.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y4.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y4.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y9.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y9.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y14.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y14.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y19.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y19.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y24.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y24.exe

========================================================
Norman Message [2008/06/01 22:00:30]
--------------------------------------------------------
Application: NVC On-access Scanner
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'

File infected: c:/docume~1/lx/桌面/downlo~1/y29.exe
File quarantined: c:/docume~1/lx/桌面/downlo~1/y29.exe

========================================================
Norman Message [2008/06/01 22:00:32]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'
Login information: User 'LX' on host 'PS-D387DAC1A933'.
File infected: c:/docume~1/lx/桌面/downlo~1/y10.exe
Virus repaired:
Virus name: 'Suspicious_F.gen'

========================================================
Norman Message [2008/06/01 22:00:35]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'
Login information: User 'LX' on host 'PS-D387DAC1A933'.
File infected: c:/docume~1/lx/桌面/downlo~1/y15.exe
Virus repaired:
Virus name: 'Suspicious_F.gen'

========================================================
Norman Message [2008/06/01 22:00:36]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'
Login information: User 'LX' on host 'PS-D387DAC1A933'.
File infected: c:/docume~1/lx/桌面/downlo~1/y20.exe
Virus repaired:
Virus name: 'Suspicious_F.gen'

========================================================
Norman Message [2008/06/01 22:00:38]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'
Login information: User 'LX' on host 'PS-D387DAC1A933'.
File infected: c:/docume~1/lx/桌面/downlo~1/y25.exe
Virus repaired:
Virus name: 'Suspicious_F.gen'

========================================================
Norman Message [2008/06/01 22:00:40]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'
Login information: User 'LX' on host 'PS-D387DAC1A933'.
File infected: c:/docume~1/lx/桌面/downlo~1/y30.exe
Virus repaired:
Virus name: 'Suspicious_F.gen'

========================================================
Norman Message [2008/06/01 22:00:41]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'
Login information: User 'LX' on host 'PS-D387DAC1A933'.
File infected: c:/docume~1/lx/桌面/downlo~1/y1.exe
Virus repaired:
Virus name: 'Suspicious_F.gen'

========================================================
Norman Message [2008/06/01 22:00:43]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'
Login information: User 'LX' on host 'PS-D387DAC1A933'.
File infected: c:/docume~1/lx/桌面/downlo~1/y6.exe
Virus repaired:
Virus name: 'Suspicious_F.gen'

========================================================
Norman Message [2008/06/01 22:00:45]
--------------------------------------------------------
Application: NVC Cats Claw
Node address: 192.168.1.13
--------------------------------------------------------

ALARM:
Virus infected:
Virus name: 'Suspicious_F.gen'
Login information: User 'LX' on host 'PS-D387DAC1A933'.
File infected: c:/docume~1/lx/桌面/downlo~1/y11.exe
Virus repaired:
Virus name: 'Suspicious_F.gen'


顺便问一下，该怎样上报，好像只上报给沙盘分析。。。。。。

[ 本帖最后由 lx1234 于 2008-6-1 22:13 编辑 ]

Palkia

C:\Documents and Settings\Administrator\桌面\Downloads\y0.exe        W32.Small.NDW.akkb        病毒        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y5.exe        Trojan.Cap852920.akxl        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y10.exe        TrojanPSW.GameOL.nsq.jfzj        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y15.exe        Trojan.Cap8610.qnxj        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y20.exe        Trojan.Cap85274.vrua        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y25.exe        TrojanDropper.Gen.qqqy        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y30.exe        Trojan.Cap85303.uxmj        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y1.exe        Trojan.Cap8610.sodq        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y6.exe        TrojanDropper.Gen.yvya        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y11.exe        Trojan.Cap852819.dzzu        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y16.exe        Trojan.Cap85274.waqq        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y21.exe        Trojan.Cap85274.eejx        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y26.exe        Trojan.Cap85274.pczc        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y31.exe        Trojan.Cap8616.vgjk        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y2.exe        Trojan.Cap85311.unly        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y7.exe        Heuri.Suspicious.ERNM        启发式扫描        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y12.exe        Trojan.Cap85274.uvtc        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y17.exe        PWSteal.Onlinegames.dr.kboy        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y22.exe        Trojan.Cap85274.ikft        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y27.exe        Heuri.Suspicious.ERNM        启发式扫描        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\yd.exe        Trojan.Cap852416.almc        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y3.exe        Trojan.Cap85303.jwgd        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y8.exe        Trojan.Cap852322.vthf        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y13.exe        Trojan.Cap852817.zdsl        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y18.exe        Trojan.Cap8610.okqo        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y23.exe        Trojan.Cap853019.ucgf        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y28.exe        Trojan.Cap85303.bows        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y4.exe        Trojan.Cap85274.nlhv        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y9.exe        Trojan.Cap85274.vdkt        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y14.exe        Trojan.Cap85274.uhrs        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y19.exe        TrojanDropper.Gen.loee        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y24.exe        Trojan.Cap85274.keym        木马        已删除/隔离
C:\Documents and Settings\Administrator\桌面\Downloads\y29.exe        TrojanDropper.Gen.ovgg        木马        已删除/隔离