ztool2 [md5:5d5dcfe]

显示全部楼层 · 发表于 2008-5-27 08:34:27

File:	ztool2
Status:	INFECTED/MALWARE
MD5:	5d5dcfebc6e76069dcda52b76eb5fb19
Packers detected:	-

Scanner results
Scan taken on 27 May 2008 00:32:49 (GMT)
A-Squared	Found nothing
AntiVir	Found TR/Crypt.XPACK.Gen
ArcaVir	Found Heur.W32
Avast	Found nothing
AVG Antivirus	Found Downloader.Tibs.9.N
BitDefender	Found Trojan.Peed.JJF
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Packed.Win32.Tibs.is
Fortinet	Found nothing
Ikarus	Found Trojan.Peed.JJE
Kaspersky Anti-Virus	Found Packed.Win32.Tibs.is
NOD32	Found nothing
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

显示全部楼层 · 发表于 2008-5-27 08:42:41

The requested URL could not be retrieved

While trying to retrieve the URL:

http://bbs.kafan.cn/attachment.php?aid=
271816&k=74806c45aed76c117351ef49abc8dc7
6&t=1211848941

The following error was encountered:

The requested object is INFECTED with the following viruses: Packed.Win32.Tibs.is

Please contact your service provider if you consider it incorrect.

显示全部楼层 · 发表于 2008-5-27 08:46:09

Test\
  ztool2.rar
[0] Archive type: RAR
--> ztool2
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [NOTE]    The file was moved to '48aa5a3c.qua'!

显示全部楼层 · 发表于 2008-5-27 20:31:31

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\ztool2.rar<RAR>:ztool2 <- Heur.W32 : No action

Scanned objects : 2

Infected objects : 1
终于启发了。

显示全部楼层 · 发表于 2008-5-27 20:31:55

MISS

显示全部楼层 · 发表于 2008-5-27 20:34:08

RS20.46.12未杀！

显示全部楼层 · 发表于 2008-5-27 21:53:40

已删除：木马程序 Packed.Win32.Tibs.is 文件　: G:\Temp\ztool2.rar/ztool2

显示全部楼层 · 发表于 2008-5-27 22:01:48

McAfee MISS

[病毒样本] ztool2 [md5:5d5dcfe]

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4

2/0