ztool2 [md5:faca3c5]

显示全部楼层 · 发表于 2008-5-28 16:27:37

Hi

thank you for your email. The file that you sent to us for analysis is a Trojan, Troj/Tibs-UJ, further details of which can be found on our web site at

http://www.sophos.com/security/a ... are/trojtibsuj.html

and an IDE file that will allow Sophos to detect this is now available on the Databank.

Regards,

Martin Elliott
Sophos Technical Support

显示全部楼层 · 发表于 2008-5-28 17:08:38

微点砍掉

显示全部楼层 · 发表于 2008-5-28 19:07:41

exe产物两个

显示全部楼层 · 发表于 2008-5-28 19:09:14

Starting the file scan:

Begin scan in 'E:\AV\found.exe.exe'
E:\AV\found.exe.exe
   [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.yw
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\herjek.exe'
E:\AV\herjek.exe
   [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.yw
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-5-28 19:10:42

红伞全灭

显示全部楼层 · 发表于 2008-5-28 19:34:49

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\ztool2.rar<RAR>:ztool2 <- Heur.W32 : No action

Scanned objects : 2

Infected objects : 1

显示全部楼层 · 发表于 2008-5-28 19:36:34

McAfee MISS

显示全部楼层 · 发表于 2008-5-28 21:21:03

RS20.46.22未杀！

[病毒样本] ztool2 [md5:faca3c5]

本帖子中包含更多资源

本帖子中包含更多资源

回复 13楼 Joker 的帖子

回复 13楼 Joker 的帖子

ArcaVir2008

2/0

浏览过的版块