zbot大集合

显示全部楼层 · 发表于 2008-9-10 20:13:56

ESET报毒
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > 1BuLAl9N.part > ZIP > ticket_983992.exe - Win32/AutoRun.VX 蠕虫
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > 2AjTtzVm.part > ZIP > 98676512.exe - Win32/PSW.Agent.NIN 特洛伊木马
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > 3GzVRYzu.part > ZIP > 98676512.exe - Win32/PSW.Agent.NIN 特洛伊木马
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > 8uCsci8t.part > ZIP > Fees_2008-2009.doc_____________________________.exe - Win32/AutoRun.XG 蠕虫
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > 9+c9a6M0.part > ZIP > Fees_2008-2009.doc_____________________________.exe - Win32/AutoRun.XG 蠕虫
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > BvvbqADa.part > ZIP > IDCARD.exe - Win32/Spy.Agent.PZ 特洛伊木马的变种
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > cWkjumP4.part > ZIP > contract_2.exe - Win32/AutoRun.WK 蠕虫
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > d+N49UdN.part > ZIP > Ticket_N141-SK.exe - Win32/TrojanDownloader.Agent.OCY 特洛伊木马
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > gFCIYG_6.part > ZIP > Fees_2008-2009.doc.exe - Win32/AutoRun.XW 蠕虫
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > HbYi4hHJ.part > ZIP > Fees_2008-2009.doc.exe - Win32/AutoRun.XY 蠕虫
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > OA98Dd9l.part > ZIP > Fees-2008_2009.doc.exe - Win32/AutoRun.YB 蠕虫
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > q6I5rJR6.part > ZIP > Fees_2008-2009.doc.exe - Win32/AutoRun.YQ 蠕虫
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > QVJMsL3M.part > ZIP > In776162.exe - Win32/Spy.Agent.PZ 特洛伊木马
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > Rl7yKx93.part > ZIP > Invoice_20080801.exe - Win32/Spy.Agent.PZ 特洛伊木马的变种
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > U12tccSW.part > ZIP > 98676512.exe - Win32/PSW.Agent.NIN 特洛伊木马
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > wnNhaFZz.part > ZIP > e-Ticket_29.doc.exe - Win32/AutoRun.YK 蠕虫
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > yNU6P0Px.part > ZIP > eTicket_N832.doc.exe - Win32/AutoRun.WK 蠕虫
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > ZqF6VDY7.part > ZIP > MB_8712.exe - Win32/Spy.Agent.PZ 特洛伊木马的变种
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > _FEKEmr3.part > ZIP > BANK_DETAILS.exe - Win32/Spy.Agent.NIY 特洛伊木马
C:\Documents and Settings\123\桌面\Desktop..zip > ZIP > _sGtgVHK.part > ZIP > contract_2.doc.exe - Win32/Injector.CP 特洛伊木马的变种

显示全部楼层 · 发表于 2008-9-10 21:19:42

病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\_FEKEmr3.part\BANK_DETAILS.exe Win32.TrojDownloader.FraudLoadT.ab.110596 清除成功
病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\ZqF6VDY7.part\MB_8712.exe Win32.Troj.Zbot.263680 清除成功
病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\yNU6P0Px.part\eTicket_N832.doc.exe Win32.TrojDownloader.FraudLoadT.ab.110596 清除成功
病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\U12tccSW.part\98676512.exe Win32.TrojDownloader.FraudLoadT.ab.110596 清除成功
病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\Rl7yKx93.part\Invoice_20080801.exe Win32.Troj.Zbot.55296 清除成功
病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\QVJMsL3M.part\In776162.exe Win32.TrojDownloader.FraudLoadT.ab.110596 清除成功
病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\q6I5rJR6.part\Fees_2008-2009.doc.exe Worm.AutoRun.32768 清除成功
病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\HbYi4hHJ.part\Fees_2008-2009.doc.exe Worm.AutoRun.32768 清除成功
病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\gFCIYG_6.part\Fees_2008-2009.doc.exe Worm.AutoRun.32768 清除成功
病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\BvvbqADa.part\IDCARD.exe Win32.Troj.Zbot.62464 清除成功
病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\3GzVRYzu.part\98676512.exe Win32.TrojDownloader.FraudLoadT.ab.110596 清除成功
病毒 2008-09-10  21:19:24 C:\Documents and Settings\Administrator\桌面\Desktop.zip\2AjTtzVm.part\98676512.exe Win32.TrojDownloader.FraudLoadT.ab.110596 清除成功

显示全部楼层 · 发表于 2008-9-11 07:19:24

不知费尔算不算主流？

显示全部楼层 · 发表于 2008-9-11 08:17:01

NIS2009 全查到
Scan Stats:
  Scan Time: 3 seconds
  Scan Options:
  Scan Targets: C:\Documents and Settings\fa\桌面\Desktop.zip
  Counts:
Total items scanned: 41
- Files & Directories: 41
- Registry Entries: 0
- Processes & Start-up Items: 0
- Network & Browser Items: 0
- Other: 0
- Trusted Files: 0
- Skipped Files: 0

Total security risks detected: 20
Total items resolved: 20
Total items that require attention: 0

显示全部楼层 · 发表于 2008-9-11 12:00:26

晕用opera刚刚点击下载咖啡就抱了！怎么现在的咖啡这么牛！

[病毒样本] zbot大集合

12

回复 1楼 EQ2 的帖子