Zbotx3

显示全部楼层 · 发表于 2009-1-30 15:53:38

瑞星1个 Trojan.Clicker.Win32.Undef.gj

显示全部楼层 · 发表于 2009-1-30 17:29:42

Win32:Ups [Cryp]
Win32:Rootkit-gen [Rtk]

显示全部楼层 · 发表于 2009-1-30 18:06:31

The file 'ldr0.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Spy.ZBot.XG. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2009-1-30 18:07:43

这回咖啡一个都没报

显示全部楼层 · 发表于 2009-1-30 20:18:01

ldr.exe - Trojan-Spy.Win32.Zbot.lsg
ldr0.exe - Trojan-Spy.Win32.Zbot.lsf
svchost.exe - Trojan-Spy.Win32.Zbot.lsh

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2009-1-30 20:56:20

"C:\Users\ekincheng\Desktop\svchost.rar:\ldr.exe";"Trojan horse SHeur2.MGP";"Infected"
"C:\Users\ekincheng\Desktop\svchost.rar:\ldr0.exe";"Virus identified Win32/Cryptor";"Infected"

显示全部楼层 · 发表于 2009-1-30 21:03:17

Virus detected: Generic Malware On-demand antivirus scan 2009/1/30 9:01:31 PM Notified Path: F:\Administrator\Downloads\Compressed\svchost.rar[ldr.exe]
Virus detected: Generic Trojan On-demand antivirus scan 2009/1/30 9:01:31 PM Notified Path: F:\Administrator\Downloads\Compressed\svchost.rar[svchost.exe]

显示全部楼层 · 发表于 2009-1-30 23:25:30

http://bbs.kafan.cn/attachment.p ... 6e&t=1233329101 multiple threats deleted (after the next restart) - quarantined
http://bbs.kafan.cn/attachment.p ... 6e&t=1233329101 » RAR » svchost.exe is OK
http://bbs.kafan.cn/attachment.p ... 6e&t=1233329101 » RAR » ldr0.exe a variant of Win32/Kryptik.GA trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... 6e&t=1233329101 » RAR » ldr.exe a variant of Win32/Kryptik.FL trojan was a part of the deleted object

[病毒样本] Zbotx3