zlob 4

显示全部楼层 · 发表于 2008-4-2 21:55:35

扫描目标: C:\Documents and Settings\桌面\zlob.rar
计数:
扫描的项目总数: 6
- 文件和目录: 6
- 注册表项: 0
- 进程和启动项: 0
- 网络和浏览器项目: 0
- 其他: 0

检测到的安全风险总数: 1
已解决的项目总数: 0
需要注意的项目总数: 1

已解决的风险:

未解决的风险:
Trojan.Zlob
病毒 ID: 4254
类型: 已压缩
风险: 高 (高隐蔽性，高清除可能，高性能，高隐私)
类别: 病毒
状态: 删除失败
-----------
1 文件
[zlob3.exe] 位于[c:\documents and settings\桌面\zlob.rar] - 已感染

显示全部楼层 · 发表于 2008-4-2 22:01:35

这一个真的很难判断
tf允许了两次
第三次隔离

显示全部楼层 · 发表于 2008-4-2 22:02:35

tf+lns

显示全部楼层 · 发表于 2008-4-2 22:11:21

C:\Documents and Settings\Don johnson\桌面\zlob.rar » RAR » ZLOB4.exe » NSIS » bdtb.dll - Win32/TrojanDownloader.Zlob.BSW trojan
C:\Documents and Settings\Don johnson\桌面\zlob.rar » RAR » ZLOB1.exe » NSIS » bdtb.dll - Win32/TrojanDownloader.Zlob.BSW trojan
C:\Documents and Settings\Don johnson\桌面\zlob.rar » RAR » ZLOB3.exe - Win32/TrojanDownloader.Zlob.BSV trojan

显示全部楼层 · 发表于 2008-4-2 22:16:51

它好像是一个防护程序
但自启动好像是加入计划任务
没用hips观察

显示全部楼层 · 发表于 2008-4-2 22:22:57

TO KL

显示全部楼层 · 发表于 2008-4-2 22:32:54

The file 'ZLOB2.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Zlob.JA. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'ZLOB3.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Zlob.JC. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-4-3 00:57:12

费尔什么都米发现

显示全部楼层 · 发表于 2008-4-3 07:27:19

费尔
2008-4-3 7:23:04,TrojanDownloader.Zlob.BSV.haws,木马,Administrator,C:\Documents and Settings\Administrator\桌面\zlob.rar>>ZLOB3.exe,Manual scan
2008-4-3 7:23:04,Heuri.Possible/Packed,启发式扫描,Administrator,C:\Documents and Settings\Administrator\桌面\zlob.rar>>ZLOB2.exe,Manual scan
2008-4-3 7:23:04,TrojanDownloader.Zlob.BSW.iuih.arc,木马,Administrator,C:\Documents and Settings\Administrator\桌面\zlob.rar>>ZLOB4.exe,Manual scan

显示全部楼层 · 发表于 2008-4-3 15:14:20

诺顿杀2个

[病毒样本] zlob 4

本帖子中包含更多资源