ZLOB下载产物(14x)

promised

ZLOB大叔就喜欢下这种流氓

[ 本帖最后由 promised 于 2008-9-21 11:09 编辑 ]

hj5abc

还是报壳有前途啊.

10 of 14 .

Starting the file scan:

Begin scan in 'G:\vir'
G:\vir\0.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
G:\vir\1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
G:\vir\2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
G:\vir\4.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
G:\vir\7.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
G:\vir\MediaTubeCodec_ver1.376.0.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.Gen
      [NOTE]      The file was deleted!
G:\vir\MicroAV.cpl
      [DETECTION] Is the Trojan horse TR/FakeAV.BC.16
      [NOTE]      The file was deleted!
G:\vir\MicroAV.exe
      [DETECTION] Contains detection pattern of the Phish-File/Email PHISH/Fraud.SpywarePreventer.Y
      [NOTE]      The file was deleted!
G:\vir\users64.dat
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
G:\vir\YUR39.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年9月21日  11:18
Used time: 00:38 min

The scan has been done completely.

sltgr

2008/9/21 11:20:55        已被删除: Backdoor.Win32.Frauder.fb        C:\Users\sltgr\Downloads\vir.rar/vir\0.exe               
2008/9/21 11:20:56        已被删除: Backdoor.Win32.Frauder.fb        C:\Users\sltgr\Downloads\vir.rar/vir\1.exe               
2008/9/21 11:20:56        已被删除: Trojan.Win32.Agent.aeee        C:\Users\sltgr\Downloads\vir.rar/vir\13630.exe               
2008/9/21 11:20:56        已被删除: Backdoor.Win32.Frauder.fb        C:\Users\sltgr\Downloads\vir.rar/vir\2.exe               
2008/9/21 11:20:56        已被删除: Backdoor.Win32.Frauder.fb        C:\Users\sltgr\Downloads\vir.rar/vir\4.exe               
2008/9/21 11:20:56        已被删除: Backdoor.Win32.Frauder.fb        C:\Users\sltgr\Downloads\vir.rar/vir\7.exe               
2008/9/21 11:20:56        已被删除: Trojan-Downloader.Win32.Zlob.zjj        C:\Users\sltgr\Downloads\vir.rar/vir\MediaTubeCodec_ver1.376.0.exe               
2008/9/21 11:20:56        已被删除: not-a-virus:FraudTool.Win32.UltimateAntivirus.cp        C:\Users\sltgr\Downloads\vir.rar/vir\MicroAV.cpl               
2008/9/21 11:20:56        已被删除: not-a-virus:FraudTool.Win32.SpywarePreventer.y        C:\Users\sltgr\Downloads\vir.rar/vir\MicroAV.exe               
2008/9/21 11:20:56        已被删除: Backdoor.Win32.Frauder.fb        C:\Users\sltgr\Downloads\vir.rar/vir\YUR39.exe               
2008/9/21 11:20:56        已被删除: Trojan.Win32.BHO.gvo        C:\Users\sltgr\Downloads\vir.rar/vir\gjtbl.dll

醉一生爱妍

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Win32.DNSChanger.drb

MAC 地址：00:11:2F:5A:58:BC

用户来源：互联网

软件版本：20.62.52

woai_jolin

Scan Log
Version of virus signature database: 3458 (20080921)
Date: 2008-9-21  Time: 11:40:24
Scanned disks, folders and files: G:\v\vir.rar
G:\v\vir.rar » RAR » vir\MediaTubeCodec_ver1.376.0.exe - is OK
G:\v\vir.rar » RAR » vir\7.exe - Win32/TrojanDownloader.FakeAlert.JT trojan - was a part of the deleted object
G:\v\vir.rar » RAR » vir\0.exe - Win32/TrojanDownloader.FakeAlert.JT trojan - was a part of the deleted object
G:\v\vir.rar » RAR » vir\1.exe - Win32/TrojanDownloader.FakeAlert.JT trojan - was a part of the deleted object
G:\v\vir.rar » RAR » vir\2.exe - Win32/TrojanDownloader.FakeAlert.JT trojan - was a part of the deleted object
G:\v\vir.rar » RAR » vir\4.exe - Win32/TrojanDownloader.FakeAlert.JT trojan - was a part of the deleted object
G:\v\vir.rar » RAR » vir\MicroAV0.dat - is OK
G:\v\vir.rar » RAR » vir\MicroAV1.dat - is OK
G:\v\vir.rar » RAR » vir\MicroAV.cpl - Win32/Adware.Antivirus2008 application - was a part of the deleted object
G:\v\vir.rar » RAR » vir\MicroAV.exe - Win32/Adware.Antivirus2008 application - was a part of the deleted object
G:\v\vir.rar » RAR » vir\YUR39.exe - Win32/TrojanDownloader.FakeAlert.JT trojan - was a part of the deleted object
G:\v\vir.rar » RAR » vir\gjtbl.dll - is OK
G:\v\vir.rar » RAR » vir\users64.dat - a variant of Win32/AutoRun.ZS worm - was a part of the deleted object
G:\v\vir.rar » RAR » vir\13630.exe - is OK
Number of scanned objects: 14
Number of threats found: 9
Number of cleaned objects: 9
Time of completion: 11:40:27  Total scanning time: 3 sec (00:00:03)

change_018

drweb 8

欠妳緈諨

使用 G DATA AntiVirus 进行病毒病毒
版本 19.0.0.49 (22.08.2008)
病毒特征库日期 21.09.2008
开始时间: 21.09.2008 12:32
引擎: 引擎 A - BitDefender (AVA 19.467), 引擎 B - Avast! (AVB 19.34)
启发式: 开启
文件: 开启
系统区域: 关闭
RootKits 检测: 开启

检测选中目录和文件:
  M:\vir\

项目: 0.exe
        路径: M:\vir
        状态: 病毒,文件已删除
        病毒: Win32:Tipa [Cryp] (Engine B)
项目: 7.exe
        路径: M:\vir
        状态: 病毒,文件已删除
        病毒: Trojan.Downloader.Exchanger.Gen.2 (Engine A)
项目: 2.exe
        路径: M:\vir
        状态: 病毒,文件已删除
        病毒: Win32:Tipa [Cryp] (Engine B)
项目: 4.exe
        路径: M:\vir
        状态: 病毒,文件已删除
        病毒: Win32:Tipa [Cryp] (Engine B)
项目: MicroAV0.dat
        路径: M:\vir
        状态: 病毒,文件已删除
        病毒: Trojan.FakeAlert.ACZ (Engine A)
项目: 1.exe
        路径: M:\vir
        状态: 病毒,文件已删除
        病毒: Trojan.Peed.Gen (Engine A)
项目: MicroAV1.dat
        路径: M:\vir
        状态: 病毒,文件已删除
        病毒: Trojan.FakeAlert.ACZ (Engine A)
项目: MicroAV.cpl
        路径: M:\vir
        状态: 病毒,文件已删除
        病毒: Trojan.Fakeav.BC (Engine A)
项目: YUR39.exe
        路径: M:\vir
        状态: 病毒,文件已删除
        病毒: Win32:Tipa [Cryp] (Engine B)
项目: users64.dat
        路径: M:\vir
        状态: 病毒,文件已删除
        病毒: Win32:Trojan-gen {Other} (Engine B)
项目: 13630.exe
        路径: M:\vir
        状态: 病毒,文件已删除
        病毒: Win32:Gipor [Trj] (Engine B)

检测执行时间: 21.09.2008 12:32
    14 个文件被检查
    11 个感染文件被发现
    0 个可疑文件被发现

v_ww

ess3.0报9个

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.FakeAV.ba   
病毒： Trojan.Win32.DNSChanger.drb

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.62.62

allinwonderi

[发现可能安全风险：]        <W32/Heuristic-KPP!Eldorado (not disinfectable)>        C:\Download Files\vir.rar->vir\users64.dat
[发现安全风险： ]        <W32/Virtumonde.T.gen!Eldorado (not disinfectable, 普通)>        C:\Download Files\vir.rar->vir\13630.exe

---------------------------------------------------------------------
扫描已结束:        2008-9-21, 19:50:21
用时:        0:00:01

扫描结果:

已扫描的文件:                 6
已感染的对象:         2
已清除的对象:         0
已隔离的文件:         0
---------------------------------------------------------------------