这次应该是zlob了

显示全部楼层 · 发表于 2008-3-21 01:47:47

avicoupler.com/download.php?id=xxxx
xxxx随便打任何一个号码好像都行，不知道是否都是变种

明天easter day不必上课，真爽~

显示全部楼层 · 发表于 2008-3-21 01:51:04

http://bbs.kafan.cn/viewthread.php?tid=221269&extra=page%3D1
重复，不点install看不出动作

显示全部楼层 · 发表于 2008-3-21 01:51:23

C:\Documents and Settings\Don johnson\桌面\setup.zip » ZIP » setup.exe » NSIS » merm.dll - Win32/TrojanDownloader.Zlob.BSC trojan

[ 本帖最后由 EQ2 于 2008-3-21 02:00 编辑 ]

显示全部楼层 · 发表于 2008-3-21 01:55:44

原来版主发过
帮忙检查一下md5吧，重复的话麻烦锁了

显示全部楼层 · 发表于 2008-3-21 01:57:52

又整些NSIS。生成物给红伞杀了
Virus or unwanted program 'DR/Dldr.Zlob.ABMP.1 [DR/Dldr.Zlob.ABMP.1]'
detected in file 'C:\Documents and Settings\YCNET\Local Settings\Temp\zs3.exe.
Action performed: Delete file

显示全部楼层 · 发表于 2008-3-21 07:05:15

The file 'setup.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-3-21 07:42:08

Analysis ID: 4573512

File Name          Findings                      Detection                   Type       Extra
--------------------|------------------------------|----------------------------|------------|-----
setup.exe          |inconclusive                |                         |          |no

inconclusive [setup.exe]

Upon analysis the file submitted does not appear to contain one of the 200,000 known
threats in the AutoImmune database. The file may contain a new threat, or no code
capable of being infected. Your submission is being forwarded to an Avert Labs
Researcher for further analysis. You will be contacted by AVERT through e-mail with
the results of that analysis.

显示全部楼层 · 发表于 2008-3-21 11:20:51

微点发现有害行为

显示全部楼层 · 发表于 2008-3-21 11:41:26

Hello,

AMWERT.com_ - Trojan-PSW.Win32.OnLineGames.vrt,

log.exe_ - Trojan.Win32.Qhost.aje,

setup.exe_ - Trojan-Downloader.Win32.Zlob.jsc

New malicious software was found in these files. Detection will be
included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2008-3-21 12:02:41

Trojan.Downloader.Zlob.ABPV, MemScan:Trojan.Downloader.Zlob.ABQH

[病毒样本] 这次应该是zlob了

本帖子中包含更多资源

我今天也不用上学。。。。。

本帖子中包含更多资源