zlob

显示全部楼层 · 发表于 2008-7-30 00:02:12

衍生物

已上报到卡巴

显示全部楼层 · 发表于 2008-7-30 00:09:11

Begin scan in 'C:\Users\TOSHIBA\Downloads\sp-rc'
C:\Users\TOSHIBA\Downloads\sp-rc\codec.exe3
[DETECTION] Contains recognition pattern of the ADSPY/Virtumonde.AA9 adware or spyware
[NOTE]    A backup was created as '48f340f5.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年7月30日  00:08
Used time: 00:03 Minute(s)

The scan has been done completely.

   1 Scanning directories
   3 Files were scanned
   1 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   0 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-7-30 02:13:33

已删除：木马程序 Trojan-Downloader.Win32.Zlob.tft 文件　: G:\Temp\Virus\sp-rc.zip/sp-rc.exe//PE_Patch.UPX//UPX//D:/vps/doxepin/Setup_ver1.1394.0.exe

显示全部楼层 · 发表于 2008-7-30 08:47:55

Scan Log
Version of virus signature database: 3308 (20080729)
Date: 2008-7-30 Time: 8:47:36
Scanned disks, folders and files: G:\v\sp-rc.zip
G:\v\sp-rc.zip » ZIP » sp-rc.exe » AUTOIT » script.au3 - is OK
G:\v\sp-rc.zip » ZIP » sp-rc.exe » AUTOIT » D:/vps/doxepin/Setup_ver1.1394.0.exe - Win32/TrojanDownloader.Zlob.CEY trojan - was a part of the deleted object
G:\v\sp-rc.zip » ZIP » sp-rc.exe » AUTOIT » D:/vps/doxepin/sp.exe - is OK
G:\v\sp-rc.zip » ZIP » sp-rc.exe » AUTOIT » sp-vc.au3.tbl - is OK
Number of scanned objects: 4
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 8:47:37 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2008-8-1 16:44:33

等等我來打包~

显示全部楼层 · 发表于 2008-8-1 16:47:49

小伞。。。抓了。。。。

[病毒样本] zlob

入库

回复 10楼 kato9096 的帖子