BO（****）.exe-波波病毒 (第115次更新）

显示全部楼层 · 发表于 2009-4-7 21:38:36

本帖最后由 Sherry.ai 于 2010-4-1 20:43 编辑

偶然又碰到了

显示全部楼层 · 发表于 2009-4-7 21:39:52

When accessing data from the URL, "http://bbs.kafan.cn/attachment.php?aid=507022&k=f53e08d7ca1ca83624dfd0729d219c0d&t=1239111555"
a virus or unwanted program 'DR/Zlob.Gen' [dropper] was found.
Action taken: Blocked file

显示全部楼层 · 发表于 2009-4-7 21:43:45

to js

显示全部楼层 · 发表于 2009-4-7 21:44:48

D:\kafan\BOBO2X.rar/System.dll 已检测: Virus.Trojan.Win32.BHO.egw!IK

显示全部楼层 · 发表于 2009-4-7 21:47:17

to VB

显示全部楼层 · 发表于 2009-4-7 21:50:26

Starting the file scan:

Begin scan in 'D:\kafan\BOBO2X.rar'
D:\kafan\BOBO2X.rar
  [0] Archive type: RAR
--> BO3497.exe
   [DETECTION] Contains recognition pattern of the DR/Zlob.Gen dropper
--> BO4078.exe
   [DETECTION] Contains recognition pattern of the DR/Zlob.Gen dropper
[NOTE]    A backup was created as '4a1d5acd.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年4月7日  21:51
Used time: 00:00 Minute(s)

The scan has been done completely.

   0 Scanned directories
   3 Files were scanned
   2 Viruses and/or unwanted programs were found
   0 Files were classified as suspicious
   1 files were deleted
   0 Viruses and unwanted programs were repaired
   1 Files were moved to quarantine
   0 Files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2009-4-7 22:12:44

to McAfee

显示全部楼层 · 发表于 2009-4-7 22:16:23

显示全部楼层 · 发表于 2009-4-7 22:32:51

2009-04-07 22:32:39 创建文件    操作:阻止并结束进程
进程路径:E:\virus\BO3497.exe
文件路径:C:\WINDOWS\Temp\nsl3B.tmp
触发规则:应用程序规则->02-允许修改的程序->*.*->%windir%\*

2009-04-07 22:32:40 创建文件    操作:阻止并结束进程
进程路径:E:\virus\BO4078.exe
文件路径:C:\WINDOWS\Temp\nst3D.tmp
触发规则:应用程序规则->02-允许修改的程序->*.*->%windir%\*

2009-04-07 22:32:40 创建文件    操作:阻止并结束进程
进程路径:E:\virus\BO4078.exe
文件路径:C:\WINDOWS\Temp\nst3E.tmp
触发规则:应用程序规则->02-允许修改的程序->*.*->%windir%\*

显示全部楼层 · 发表于 2009-4-8 07:54:15

BitDefender 報
BO4078.exe Trojan.BHO.OFL
BO3497.exe Trojan.FakeAV.JL

[病毒样本] BO（****）.exe-波波病毒 (第115次更新）

本帖子中包含更多资源

评分

Norman Virus Control

本帖子中包含更多资源