发完睡觉

显示全部楼层 · 发表于 2007-5-3 03:07:58

Scan performed at: 2007-5-3 3:08:14
Scanning Log
NOD32 version 2234 (20070502) NT
Command line: C:\Documents and Settings\EQ2\桌面\setup.rar
Operating memory - is OK

Date: 3.5.2007 Time: 03:08:19
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\setup.rar
C:\Documents and Settings\EQ2\桌面\setup.rar ?RAR ?setup.exe ?NSIS ?xxl.dll - Win32/TrojanDownloader.Zlob.AVQ trojan - was a part of the deleted object
Number of scanned files: 8
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 03:08:19 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-5-3 03:39:03

没有联网，SSM没有动作，而且感觉像是正常的文件一样

显示全部楼层 · 发表于 2007-5-3 06:24:58

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-25
Start time: 2007-5-3 6:24
Engine(s): KAV engine (AVK 17.4126), BD-Engine (BD 17.3645)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: setup.exe
Path: C:\Documents and Settings\Administrator\桌面\setup
Status: Move file into quarantine
Virus: Trojan-Downloader.Win32.Zlob.bqo (KAV engine), Trojan.FCZlob.Gen (BD-Engine)
Analysis complete: 2007-5-3 6:24
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-5-3 06:31:30

老了点，antivir添加这个gen是在06年7月

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\setup.rar'
C:\Documents and Settings\morgan\My Documents\
  setup.rar
[0] Archive type: RAR
--> setup.exe
      [DETECTION] Contains signature of the dropper DR/Zlob.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-3 09:00:39

驱逐舰不杀

显示全部楼层 · 发表于 2007-5-3 09:03:19

Trojan.Zlob.KH

Trojan.VB.Agent.E

显示全部楼层 · 发表于 2007-5-3 09:26:25

Result: 1 malware found
Trojan-Downloader.Win32.Zlob.bqo (virus)

* C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\setup.rar\setup.exe

显示全部楼层 · 发表于 2007-5-3 13:42:24

已检测到: 木马程序 Trojan-Downloader.Win32.Zlob.bqo URL: http://bbs.kafan.cn/attachment.php?aid=63041/setup.exe

卡巴6.0.307版本报

显示全部楼层 · 发表于 2007-5-3 13:53:27

怎么是安装程序？安装后ESS报

[病毒样本] 发完睡觉

本帖子中包含更多资源