在中毒电脑上提取的internat病毒

显示全部楼层 · 发表于 2007-3-9 12:41:16

原帖由 没注册 于 2007-3-9 10:07 发表
MYGOD
this is the Rav get all path administrators
.....................卡巴我恨你...............

哈哈~这句话真逗!!

显示全部楼层 · 发表于 2007-3-9 12:43:07

Time Module Object Name Threat Action User Information
2007-3-9 12:42:45 AMON file C:\Documents and Settings\EQ2\桌面\internat\internat.exe Win32/Delf.NCE worm quarantined - deleted - error while cleaning - operation unavailable for this type of object Event occurred on a newly created file. The file was moved to quarantine. You may close this window.
2007-3-9 12:42:45 AMON file C:\Documents and Settings\EQ2\桌面\internat\inetinf.exe Win32/Delf.AWY trojan quarantined - deleted - error while cleaning - operation unavailable for this type of object Event occurred on a new file created by the application: D:\Program Files\WinRAR\WinRAR.exe. The file was moved to quarantine. You may close this window.

显示全部楼层 · 发表于 2007-3-9 13:03:47

Starting the file scan:

Begin scan in 'D:\internat.rar'
D:\internat.rar
  [0] Archive type: RAR
  --> internat\inetinf.exe
   [DETECTION] Is the Trojan horse TR/Delf.AQ.1.B
  --> internat\internat.exe
   [DETECTION] Contains signature of the worm WORM/Delf.BG.3
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-3-9 17:19:02

E:\SETUP.EXE I:\TEST\070309\12\INTERNAT\INTERNAT.EXE
D:\SETUP.EXE I:\TEST\070309\12\INTERNAT\INTERNAT.EXE
C:\SETUP.EXE I:\TEST\070309\12\INTERNAT\INTERNAT.EXE

显示全部楼层 · 发表于 2007-3-10 01:36:36

kv杀了

显示全部楼层 · 发表于 2007-3-10 10:41:48

卡8报,,有密码的压缩包

显示全部楼层 · 发表于 2007-3-10 10:45:19

原帖由 jimmyleo 于 2007-3-9 12:24 发表
还有LZ 这是你分析的？。。

http://www.cisrt.net/bbs/viewthr ... &extra=page%3D1

哈哈，版权意识啊

显示全部楼层 · 发表于 2007-3-13 16:11:48

解压出来直接让诺顿给干了
我的AVG还没发挥呢

[病毒样本] 在中毒电脑上提取的internat病毒

nod32杀

另外一个微点报未知木马

本帖子中包含更多资源

浏览过的版块