zbot

The EQs

昨天发现的

Kitman

The file 'lll.exe' has been determined to be 'UNDER ANALYSIS'.

The file 'lll.exe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Spy.ZBot.WC.The term "TR/" denotes a trojan horse that is able to spy out data, toviolate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 Kitman 于 2008-8-27 14:18 编辑 ]

曲中求

这次不想阻止它先，看了一下，动作好多，派代表上来了。。。

hzyw

小红伞miss   上报

Kitman

The file 'lll.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Spy.ZBot.WC. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

IllusionWing

这改了?

正在比较文件 EmgLog.log 和 EMGLOG2.LOG
***** EmgLog.log
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    Shell = Explorer.exe
    Userinit = C:\WINDOWS\system32\userinit.exe,
    UIHost = logonui.exe
***** EMGLOG2.LOG
[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
    Shell = x
    Userinit = C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\oembios.exe,
    UIHost = logonui.exe
*****

ldy144028

卡巴   2008-8-27 14:48:28        Web 流量        被检测到: Trojan-Spy.Win32.Zbot.eit        Maxthon Browser                http://bbs.kafan.cn/attachment.p ... =1219820087/lll.exe

hotgose

趋势miss

卡巴 8.0.0.454
无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
345103&k=0e85c09e07466836b59e66dd58dded2
3&t=1219825504

发生下列错误：

请求的对象被感染，发现下列病毒 Trojan-Spy.Win32.Zbot.eit


如有疑问，请联系您的技术支持
创建日期：
Wed Aug 27 16:25:17 2008
Kaspersky Lab

BING126

McAfee  miss