zbot

显示全部楼层 · 发表于 2008-8-27 20:27:08

D:\download\lll.zip>>lll.exe TrojanSpy.Zbot.eit.qpgj 木马还未处理

显示全部楼层 · 发表于 2008-8-27 21:59:51

to lab

显示全部楼层 · 发表于 2008-8-27 22:41:50

Scan Log
Version of virus signature database: 3392 (20080827)
Date: 2008-8-27 Time: 22:42:12
Scanned disks, folders and files: G:\v\lll.zip
G:\v\lll.zip » ZIP » lll.exe - a variant of Win32/Spy.Agent.PZ trojan - was a part of the deleted object
Number of scanned objects: 1
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 22:42:15 Total scanning time: 3 sec (00:00:03)

显示全部楼层 · 发表于 2008-8-28 10:22:21

NIS2008，继续飘

显示全部楼层 · 发表于 2008-8-28 13:00:03

程序:
C:\USERS\IBM\DESKTOP\LLL.EXE
木马程序生成以下文件:
1) C:\SANDBOX\IBM\DEFAULTBOX\DRIVE\C\WINDOWS\SYSTEM32\OEMBIOS.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-8-28 13:21:04

AVG

Trojan horse PSW.Generic6.ZCZ

[病毒样本] zbot

ArcaVir2008, F-Prot 4.4.4,NVC 5.99

浏览过的版块