setup.exe

显示全部楼层 · 发表于 2008-5-29 07:32:35

质量明显下降，可是是卡巴还未入库的一个，就发出来吧
http://www.virustotal.com/analisis/30c85e98398f771e840a472d72f55ec2

显示全部楼层 · 发表于 2008-5-29 07:49:07

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\setup.zip'
C:\Documents and Settings\Administrator\桌面\setup.zip
  [0] Archive type: ZIP
  --> setup.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zlob.icp
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-5-29 07:53:57

金山毒霸 0

显示全部楼层 · 发表于 2008-5-29 08:39:29

猜一个。。。
下载物为zfe0.exe

显示全部楼层 · 发表于 2008-5-29 12:09:08

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.5.29.0	2008.05.28	-
AntiVir	7.8.0.19	2008.05.28	TR/Dldr.Zlob.icp
Authentium	5.1.0.4	2008.05.28	W32/Agent.AX.gen!Eldorado
Avast	4.8.1195.0	2008.05.29	Win32:Zlob-CBY
AVG	7.5.0.516	2008.05.28	-
BitDefender	7.2	2008.05.29	Trojan.Zlob.CKZ
CAT-QuickHeal	9.50	2008.05.28	-
ClamAV	0.92.1	2008.05.28	Trojan.Zlob-4299
DrWeb	4.44.0.09170	2008.05.28	-
eSafe	7.0.15.0	2008.05.28	-
eTrust-Vet	31.4.5831	2008.05.28	-
Ewido	4.0	2008.05.28	-
F-Prot	4.4.4.56	2008.05.28	W32/Zlob.S.gen!Eldorado
F-Secure	6.70.13260.0	2008.05.29	-
Fortinet	3.14.0.0	2008.05.29	W32/Zlob.NKU!tr.dldr
GData	2.0.7306.1023	2008.05.29	Win32:Zlob-CBY
Ikarus	T3.1.1.26.0	2008.05.29	-
Kaspersky	7.0.0.125	2008.05.29	-
McAfee	5305	2008.05.28	-
Microsoft	1.3520	2008.05.29	TrojanDownloader:Win32/Zlob.IB
NOD32v2	3142	2008.05.28	-
Norman	5.80.02	2008.05.28	-
Panda	9.0.0.4	2008.05.28	-
Prevx1	V2	2008.05.29	-
Rising	20.46.22.00	2008.05.28	-
Sophos	4.29.0	2008.05.29	-
Sunbelt	3.0.1123.1	2008.05.17	-
Symantec	10	2008.05.29	Trojan.Zlob
TheHacker	6.2.92.322	2008.05.28	-
VBA32	3.12.6.6	2008.05.28	suspected of Downloader.Zlob.3
VirusBuster	4.3.26:9	2008.05.28	-
Webwasher-Gateway	6.6.2	2008.05.28	Trojan.Dldr.Zlob.icp

onecare好像最近蛮勤快的嘛

显示全部楼层 · 发表于 2008-5-29 13:46:45

MISS

显示全部楼层 · 发表于 2008-5-29 13:48:12

[Found security risk] <W32/Zlob.S.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\setup.zip->setup.exe

---------------------------------------------------------------------
Scan ended: 2008-5-29, 13:46:24
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-29 20:28:38

McAfee MISS

显示全部楼层 · 发表于 2008-5-29 20:29:27

RS20.46.32未杀！

显示全部楼层 · 发表于 2008-5-29 20:32:31

多引擎中铁壳既然报了就飘过了

[病毒样本] setup.exe

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4

2/0