zlob 4

显示全部楼层 · 发表于 2008-4-2 21:29:37

IK
I:\virus\样本区\zlob\ZLOB1.exe
I:\virus\样本区\zlob\ZLOB2.exe - Suspect code-parts found (Level: 25)
I:\virus\样本区\zlob\ZLOB3.exe
I:\virus\样本区\zlob\ZLOB4.exe

4 Files scanned
(0 Archives with 0 files)
0 Signatures found
1 Suspect code-part found
Used time: 0:02.547

显示全部楼层 · 发表于 2008-4-2 21:31:03

Starting the file scan:

Begin scan in 'E:\zlob.rar'
E:\zlob.rar
  [0] Archive type: RAR
  --> ZLOB4.exe
   [DETECTION] Contains detection pattern of the dropper DR/Zlob.Gen
  --> ZLOB1.exe
   [DETECTION] Contains detection pattern of the dropper DR/Zlob.Gen
   [WARNING] The file was ignored!o

显示全部楼层 · 发表于 2008-4-2 21:35:45

3806762 ZLOB2.exe 77.54 KB UNDER ANALYSIS
3806763 ZLOB3.exe 12.5 KB UNDER ANALYSIS

显示全部楼层 · 发表于 2008-4-2 21:42:08

金山 0

显示全部楼层 · 发表于 2008-4-2 21:45:38

rising20.38.21未杀！

显示全部楼层 · 发表于 2008-4-2 21:48:06

Begin scan in 'F:\Virus\zlob.rar'
F:\Virus\zlob.rar
  [0] Archive type: RAR
  --> ZLOB4.exe
   [DETECTION] Contains detection pattern of the dropper DR/Zlob.Gen
  --> ZLOB1.exe
   [DETECTION] Contains detection pattern of the dropper DR/Zlob.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-4-2 21:49:06

[Found downloader] <W32/Downldr2.BMKO (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\zlob.rar->ZLOB3.exe

---------------------------------------------------------------------
Scan ended: 2008-4-2, 21:49:04
Duration: 0:00:02

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-4-2 21:49:42

晕，NOD 2.7 一个都没检测

显示全部楼层 · 发表于 2008-4-2 21:49:54

ArcaVir miss.

[病毒样本] zlob 4

本帖子中包含更多资源

two

24/0