spam捡来的zbot

显示全部楼层 · 发表于 2008-8-30 00:25:05

基本都能杀

显示全部楼层 · 发表于 2008-8-30 00:47:49

Requested URL: http://bbs.kafan.cn/attachment.p ... 7c&t=1220028455
Information: Is the TR/Spy.ZBot.ejx Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.23, VDF 7.0.6.92

显示全部楼层 · 发表于 2008-8-30 01:17:54

....红伞干掉

显示全部楼层 · 发表于 2008-8-30 01:51:47

2008/8/30 1:51:21 已清除木马程序 Trojan-Spy.Win32.Zbot.ejx G:\Temp\In776162.zip/In776162/In776162/In776162.exe

显示全部楼层 · 发表于 2008-8-30 07:58:44

C:\Documents and Settings\Administrator\桌面\In776162.zip>>In776162\In776162\In776162.exe TrojanSpy.Zbot.ejx.svmk 木马还未处理

显示全部楼层 · 发表于 2008-8-30 08:19:34

<W32/Downldr2.DIJG (确切, not disinfectable)> C:\Download Files\In776162.zip->In776162/In776162/In776162.exe

显示全部楼层 · 发表于 2008-8-30 08:19:50

C:\Download Files\In776162.zip<ZIP>:In776162.exe <- Variant:Worm.Vb.hh : No action

显示全部楼层 · 发表于 2008-8-30 09:07:48

Scan Log
Version of virus signature database: 3401 (20080829)
Date: 2008-8-30 Time: 9:08:38
Scanned disks, folders and files: G:\v\In776162.zip
G:\v\In776162.zip » ZIP » In776162/In776162/In776162.exe - Win32/Spy.Agent.PZ trojan - was a part of the deleted object
Number of scanned objects: 1
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 9:08:38 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2008-8-30 10:07:31

SEP

显示全部楼层 · 发表于 2008-8-30 11:35:17

High security alert!!!
You are not permitted to download the file "In776162.zip" because it is infected with the virus "W32/ZBot.SL!tr.spy".

URL = http://bbs.kafan.cn/attachment.p ... c7&t=1220067287

File quarantined as: .

http://www.fortinet.com/ve?vid=547536

[病毒样本] spam捡来的zbot

F-Prot 4.4.4

ArcaVir2008