ztool1 [md5:f90ad6]

显示全部楼层 · 发表于 2008-5-27 08:32:43

开始发一些thelatin，很久没跟踪了

File:	ztool1
Status:	INFECTED/MALWARE
MD5:	f90ad6e1b68db09e0fba1014e8723d69
Packers detected:	-

Scanner results
Scan taken on 27 May 2008 00:27:40 (GMT)
A-Squared	Found nothing
AntiVir	Found WORM/Zhelatin.Gen
ArcaVir	Found Heur.W32
Avast	Found nothing
AVG Antivirus	Found I-Worm/Nuwar.N
BitDefender	Found Trojan.Peed.JJF
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Packed.Win32.Tibs.is
Fortinet	Found nothing
Ikarus	Found Trojan.Peed.JJE
Kaspersky Anti-Virus	Found Packed.Win32.Tibs.is
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-27 08:45:28

Test\
  ztool1.rar
[0] Archive type: RAR
--> ztool1
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
   [NOTE]    The file was moved to '48aa5a14.qua'!

显示全部楼层 · 发表于 2008-5-27 20:32:58

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\ztool1.rar<RAR>:ztool1 <- Heur.W32 : No action

Scanned objects : 2

Infected objects : 1

显示全部楼层 · 发表于 2008-5-27 20:33:19

我都觉得难为情

显示全部楼层 · 发表于 2008-5-27 20:35:36

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Mail.Win32.Zhelatin.wy

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.46.12

显示全部楼层 · 发表于 2008-5-27 21:52:51

已删除：木马程序 Packed.Win32.Tibs.is 文件　: G:\Temp\ztool1.rar/ztool1

显示全部楼层 · 发表于 2008-5-27 21:54:45

红伞和AVG报两个，Outpost Security Suite Pro
不报

显示全部楼层 · 发表于 2008-5-27 22:08:23

McAfee miss

[病毒样本] ztool1 [md5:f90ad6]

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4

2/1

浏览过的版块