ابشرواااااااااااا
هذه المرة بعد استخدام اخر اداتين من زيزوم كانت المفاجاءة فقد انتهى بحث اداة المكافي ولم يجد شيء وكان الفلاش فارغ من الملفين Autourun و ملف ال VBS اليكم الصور :
http://www.gulfup.com]
وحتى عندما فتحت الفلاش لم اجد الملفين VBS و Autourun اليكم الصورة :
....................... وهذا تقرير المكافي : ...............................
2/27/2008 6:29:42 PM Engine version =5200.2160
2/27/2008 6:29:42 PM AntiVirus DAT version =5195.0000
2/27/2008 6:29:42 PM Number of detection signatures in EXTRA.DAT =None
2/27/2008 6:29:42 PM Names of detection signatures in EXTRA.DAT =None
2/27/2008 6:29:36 PM Scan Started ARAB-94FD58E276\KTG On-Demand Scan
2/27/2008 6:30:41 PM Deleted KTG C:\DOCUMENTS AND SETTINGS\KTG\APPLICATION DATA\ZYZOOM_AUTORUN_VIRUSES_CLEANER\ZYZOOM_PROCESS.EXE PrcViewer(Potentially Unwanted Program)
2/27/2008 6:30:46 PM Deleted KTG c:\Documents and Settings\KTG\Application Data\Zyzoom_Autorun_Viruses_cleaner\zyzoom_PROCESS.exe PrcViewer(Potentially Unwanted Program)
2/27/2008 6:31:02 PM Not scanned (The file is encrypted) KTG c:\Documents and Settings\KTG\My Documents\avg-antiviruspro-iobit-90days.exe\FILES.DAT
2/27/2008 6:37:42 PM Deleted KTG C:\SYSTEM VOLUME INFORMATION\_RESTORE{2AC07E2E-B686-4A8A-941E-118F9DA0356E}\RP26\A0001528.EXE PrcViewer(Potentially Unwanted Program)
2/27/2008 6:38:04 PM Deleted (Clean failed) KTG c:\System Volume Information\_restore{2AC07E2E-B686-4A8A-941E-118F9DA0356E}\RP26\A0001528.exe\ZYZOOM_PROCESS.EXE PrcViewer(Potentially Unwanted Program)
2/27/2008 6:38:37 PM Deleted KTG C:\SYSTEM VOLUME INFORMATION\_RESTORE{2AC07E2E-B686-4A8A-941E-118F9DA0356E}\RP29\A0001821.EXE PrcViewer(Potentially Unwanted Program)
2/27/2008 6:38:37 PM Deleted KTG c:\System Volume Information\_restore{2AC07E2E-B686-4A8A-941E-118F9DA0356E}\RP29\A0001821.exe PrcViewer(Potentially Unwanted Program)
2/27/2008 6:53:57 PM Delete failed (Clean failed) KTG e:\autorun.inf\autorun.inf Generic!atr(Trojan)
2/27/2008 6:54:37 PM Deleted KTG E:\MS32DLL.DLL.VBS VBS/IE-Title(Virus)
2/27/2008 6:55:52 PM Delete failed (Clean failed) KTG e:\MS32DLL.dll.vbs\MS32DLL.dll.vbs VBS/IE-Title(Virus)
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Processes scanned : 30
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Processes detected : 0
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Processes cleaned : 0
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors scanned : 2
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors detected: 0
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors cleaned : 0
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Files scanned : 23432
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Files with detections: 5
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG File detections : 9
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Files cleaned : 0
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Files deleted : 3
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Files not scanned : 25
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary (Registry Scanning)
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Keys scanned : 59603
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Keys detected : 0
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Keys cleaned : 0
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Keys deleted : 0
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary ( Scanning)
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG s scanned : 53
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG s detected : 0
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG s cleaned : 0
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG s deleted : 0
2/27/2008 7:00:48 PM Scan Summary ARAB-94FD58E276\KTG Run time : 0:31:12
2/27/2008 7:00:48 PM Scan Complete ARAB-94FD58E276\KTG On-Demand Scan
2/27/2008 9:16:43 PM Engine version =5200.2160
2/27/2008 9:16:43 PM AntiVirus DAT version =5195.0000
2/27/2008 9:16:43 PM Number of detection signatures in EXTRA.DAT =None
2/27/2008 9:16:43 PM Names of detection signatures in EXTRA.DAT =None
2/27/2008 9:16:37 PM Scan Started ARAB-94FD58E276\KTG On-Demand Scan
2/27/2008 9:18:12 PM Not scanned (The file is encrypted) KTG c:\Documents and Settings\KTG\My Documents\avg-antiviruspro-iobit-90days.exe\FILES.DAT
2/27/2008 9:43:53 PM Delete failed (Clean failed) KTG e:\autorun.inf\autorun.inf Generic!atr(Trojan)
2/27/2008 9:43:57 PM Deleted KTG E:\MS32DLL.DLL.VBS VBS/IE-Title(Virus)
2/27/2008 9:45:03 PM Delete failed (Clean failed) KTG e:\MS32DLL.dll.vbs\MS32DLL.dll.vbs VBS/IE-Title(Virus)
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Processes scanned : 11
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Processes detected : 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Processes cleaned : 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors scanned : 2
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors detected: 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors cleaned : 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Files scanned : 20538
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Files with detections: 2
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG File detections : 3
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Files cleaned : 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Files deleted : 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Files not scanned : 19
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary (Registry Scanning)
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Keys scanned : 59035
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Keys detected : 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Keys cleaned : 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Keys deleted : 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary ( Scanning)
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG s scanned : 53
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG s detected : 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG s cleaned : 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG s deleted : 0
2/27/2008 9:50:37 PM Scan Summary ARAB-94FD58E276\KTG Run time : 0:34:00
2/27/2008 9:50:37 PM Scan Complete ARAB-94FD58E276\KTG On-Demand Scan
2/27/2008 11:00:18 PM Engine version =5200.2160
2/27/2008 11:00:18 PM AntiVirus DAT version =5195.0000
2/27/2008 11:00:18 PM Number of detection signatures in EXTRA.DAT =None
2/27/2008 11:00:18 PM Names of detection signatures in EXTRA.DAT =None
2/27/2008 11:00:12 PM Scan Started ARAB-94FD58E276\KTG On-Demand Scan
2/27/2008 11:03:16 PM Deleted KTG C:\DOCUMENTS AND SETTINGS\KTG\DESKTOP\ZYZOOM_HACKED_BY_GODZILLA_REMOVAL.EXE PrcViewer(Potentially Unwanted Program)
2/27/2008 11:04:14 PM Deleted (Clean failed) KTG c:\Documents and Settings\KTG\Desktop\Zyzoom_Hacked_by_Godzilla_Removal.exe\ZYZOOM_PROCESS.EXE PrcViewer(Potentially Unwanted Program)
2/27/2008 11:04:48 PM Not scanned (The file is encrypted) KTG c:\Documents and Settings\KTG\My Documents\avg-antiviruspro-iobit-90days.exe\FILES.DAT
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Processes scanned : 11
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Processes detected : 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Processes cleaned : 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors scanned : 1
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors detected: 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors cleaned : 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Files scanned : 2600
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Files with detections: 1
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG File detections : 2
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Files cleaned : 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Files deleted : 1
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Files not scanned : 9
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary (Registry Scanning)
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Keys scanned : 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Keys detected : 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Keys cleaned : 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Keys deleted : 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary ( Scanning)
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG s scanned : 53
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG s detected : 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG s cleaned : 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG s deleted : 0
2/27/2008 11:08:37 PM Scan Summary ARAB-94FD58E276\KTG Run time : 0:08:25
2/27/2008 11:08:37 PM Scan Terminated ARAB-94FD58E276\KTG On-Demand Scan
2/27/2008 11:26:22 PM Engine version =5200.2160
2/27/2008 11:26:22 PM AntiVirus DAT version =5195.0000
2/27/2008 11:26:22 PM Number of detection signatures in EXTRA.DAT =None
2/27/2008 11:26:22 PM Names of detection signatures in EXTRA.DAT =None
2/27/2008 11:26:16 PM Scan Started ARAB-94FD58E276\KTG On-Demand Scan
2/27/2008 11:27:10 PM Deleted KTG C:\DOCUMENTS AND SETTINGS\KTG\DESKTOP\ZYZOOM_HACKED_BY_GODZILLA_REMOVAL.EXE PrcViewer(Potentially Unwanted Program)
2/27/2008 11:27:25 PM Deleted (Clean failed) KTG c:\Documents and Settings\KTG\Desktop\Zyzoom_Hacked_by_Godzilla_Removal.exe\ZYZOOM_PROCESS.EXE PrcViewer(Potentially Unwanted Program)
2/27/2008 11:27:59 PM Not scanned (The file is encrypted) KTG c:\Documents and Settings\KTG\My Documents\avg-antiviruspro-iobit-90days.exe\FILES.DAT
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Processes scanned : 11
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Processes detected : 0
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Processes cleaned : 0
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors scanned : 2
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors detected: 0
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Boot sectors cleaned : 0
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Files scanned : 20560
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Files with detections: 1
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG File detections : 2
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Files cleaned : 0
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Files deleted : 1
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Files not scanned : 19
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary (Registry Scanning)
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Keys scanned : 59049
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Keys detected : 0
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Keys cleaned : 0
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Keys deleted : 0
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Scan Summary ( Scanning)
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG s scanned : 53
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG s detected : 0
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG s cleaned : 0
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG s deleted : 0
2/27/2008 11:55:30 PM Scan Summary ARAB-94FD58E276\KTG Run time : 0:29:14
2/27/2008 11:55:30 PM Scan Complete ARAB-94FD58E276\KTG On-Demand Scan
......................................................................................................
وبعدها لتاكد قمت ونزعت الفلاش واعدت التشغيل وادخلت الفلاش في الوضع العادي وكانت النتيجة :
لقد عاد الفيروس autorun و vbs مرة اخرى ... هههههههههههههههههههههههه
هاااااااااااااااااا هل من متحدى اخر ..... الباب مفتوح تفضلوا بالمشاركة يا اخواننا ....
