ztool

显示全部楼层 · 发表于 2008-7-2 19:51:46

....还有ztool2....

显示全部楼层 · 发表于 2008-7-2 19:54:23

2008-7-2 JAY19:50:18 ztool2.exe Modification HKEY_USERS\S-1-5-21-1292428093-706699826-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections/SavedLegacySettings 2008-7-2 JAY19:50:18 ztool2.exe : KLSystemData/FD-C/ Create C:\Documents and Settings\Owner\Local Settings\History\History.IE5\index.dat 2008-7-2 JAY19:50:18 ztool2.exe : KLSystemData/FD-C/ Create C:\Documents and Settings\Owner\Cookies\index.dat 2008-7-2 JAY19:50:18 ztool2.exe : KLSystemData/FD-C/ Create C:\Documents and Settings\Owner\Local Settings\Temporary Internet Files\Content.IE5\index.dat 2008-7-2 JAY19:50:17 ztool2.exe Process start C:\Documents and Settings\Owner\桌面\ztool2.exe 2008-7-2 JAY19:50:17 ztool2.exe Placed in group Low Restricted 2008-7-2 JAY19:50:14 WinRAR.exe Create C:\Documents and Settings\Owner\桌面\ztool2.exe

显示全部楼层 · 发表于 2008-7-2 19:57:19

db 0

显示全部楼层 · 发表于 2008-7-2 20:10:13

上报卡巴．

显示全部楼层 · 发表于 2008-7-2 20:12:26

[NOTE] The file was deleted!
C:\Documents and Settings\kato9096\桌面\ztool\ztool2\ztool2.exe3
[DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen

显示全部楼层 · 发表于 2008-7-2 20:24:02

显示全部楼层 · 发表于 2008-7-2 23:43:02

RS20.51.22未杀！

显示全部楼层 · 发表于 2008-7-3 00:00:33

Hello. This file is already detected. Please update your bases.

Sincerely yours,
Andrey Bezborodov,
Virus Analyst.
_____________________
Kaspersky Lab Ltd
Moscow, Russia
Tel/Fax : +7 (095) 797-8700
E-mail : newvirus@kaspersky.com
Internet: http://www.kaspersky.com, http://www.viruslist.com

[病毒样本] ztool

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

2/0