ztool3~4

显示全部楼层 · 发表于 2008-7-2 19:57:00

我昏了...~

显示全部楼层 · 发表于 2008-7-2 19:59:44

duba 0

显示全部楼层 · 发表于 2008-7-2 20:04:36

已上报到卡巴

显示全部楼层 · 发表于 2008-7-2 20:09:11

z3

2008-7-2 JAY20:03:10 ztool3.exe Completed: Suspicious driver installation  C:\DOCUMENTS AND SETTINGS\OWNER\桌面\ZTOOL3.EXE
2008-7-2 JAY20:03:10 ztool3.exe  Process exit C:\Documents and Settings\Owner\桌面\ztool3.exe
2008-7-2 JAY20:03:10 ztool3.exe Detected: Suspicious driver installation  C:\DOCUMENTS AND SETTINGS\OWNER\桌面\ZTOOL3.EXE
2008-7-2 JAY20:02:56 ztool3.exe Detected: Suspicious driver installation  C:\DOCUMENTS AND SETTINGS\OWNER\桌面\ZTOOL3.EXE
2008-7-2 JAY20:02:56 ztool3.exe  Modification C:\WINDOWS\system32\drivers\Beep.SYS
2008-7-2 JAY20:02:56 ztool3.exe : KLSystemData/FD-C/ Create C:\WINDOWS\system32\drivers\Beep.sys
2008-7-2 JAY20:02:56 ztool3.exe : KLSystemData/KLSystemFiles/Drivers Create C:\WINDOWS\system32\drivers\Beep.sys
2008-7-2 JAY20:02:56 ztool3.exe : KLSystemData/FD-C/ Create C:\WINDOWS\system32\drivers\atmarpc.sys
2008-7-2 JAY20:02:56 ztool3.exe : KLSystemData/FD-C/ Create C:\WINDOWS\system32\drivers\asyncmac.sys
2008-7-2 JAY20:02:56 ztool3.exe : KLSystemData/FD-C/ Create C:\WINDOWS\system32\drivers\aec.sys
2008-7-2 JAY20:02:56 ztool3.exe  Process start C:\Documents and Settings\Owner\桌面\ztool3.exe
2008-7-2 JAY20:02:56 ztool3.exe  Placed in group Low Restricted
2008-7-2 JAY20:02:19 WinRAR.exe  Create C:\Documents and Settings\Owner\桌面\ztool3.exe

z4无行为

2008-7-2 JAY20:03:53 ztool4.exe  Process exit C:\Documents and Settings\Owner\桌面\ztool4.exe
2008-7-2 JAY20:03:52 ztool4.exe  Process start C:\Documents and Settings\Owner\桌面\ztool4.exe
2008-7-2 JAY20:03:52 ztool4.exe  Placed in group Low Restricted
2008-7-2 JAY20:02:19 WinRAR.exe  Create C:\Documents and Settings\Owner\桌面\ztool4.exe

显示全部楼层 · 发表于 2008-7-2 20:13:06

C:\Documents and Settings\kato9096\桌面\ztool\ztool3~4\ztool3.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\ztool\ztool3~4\ztool4.exe3
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-7-2 20:22:48

显示全部楼层 · 发表于 2008-7-2 23:42:44

RS20.51.22未杀！

显示全部楼层 · 发表于 2008-7-2 23:59:44

Hello. This file is already detected. Please update your bases.

Sincerely yours,
Andrey Bezborodov,
Virus Analyst.
_____________________
Kaspersky Lab Ltd
Moscow, Russia
Tel/Fax : +7 (095) 797-8700
E-mail : newvirus@kaspersky.com
Internet: http://www.kaspersky.com, http://www.viruslist.com

显示全部楼层 · 发表于 2008-7-3 00:01:33

OSS飘

[病毒样本] ztool3~4

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

2/0