我们公司的网站，也被挂马了

capsshift

其实，估计是机房中了毒。

Graybird

Starting the file scan:

Begin scan in 'E:\virus.rar'
E:\virus.rar
  [0] Archive type: RAR
  --> web[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Instancob.A
  --> web[2].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Instancob.A
  --> help[1].htm
      [DETECTION] Contains detection pattern of the exploits EXP/HTML.Ascii.B.7
  --> index[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
  --> Microsoft[1].ocx
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.AB.1
  --> po[1].htm
      [DETECTION] Contains detection pattern of the exploits EXP/RealPlay.H
      [WARNING]   The file was ignored!


End of the scan: 2007年12月15日  09:38
Used time: 00:12 min

The scan has been done completely.

      0 Scanning directories
      7 Files were scanned
      5 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

绅博周幸

Starting the file scan:

Begin scan in 'C:\Users\Xing\Desktop\Downloads\virus.rar'
C:\Users\Xing\Desktop\Downloads\virus.rar
  [0] Archive type: RAR
  --> web[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Instancob.A
  --> web[2].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Instancob.A
  --> help[1].htm
      [DETECTION] Contains detection pattern of the exploits EXP/HTML.Ascii.B.7
  --> index[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
  --> Microsoft[1].ocx
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.AB.1
  --> po[1].htm
      [DETECTION] Contains detection pattern of the exploits EXP/RealPlay.H
      [WARNING]   The file was ignored!

微点卫士

毒霸0个

seamonkey

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Jingtao        
病毒： Hack.Exploit.Script.JS.RealPlayer.b

lovewei

找出一个
http://2.Trojan8.com/mm/dd.exe

基哥

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\virus.rar
  [0] Archive type: RAR
  --> web[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Instancob.A
  --> web[2].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Instancob.A
  --> help[1].htm
      [DETECTION] Contains detection pattern of the exploits EXP/HTML.Ascii.B.7
  --> index[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
  --> Microsoft[1].ocx
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.AB.1
  --> po[1].htm
      [DETECTION] Contains detection pattern of the exploits EXP/RealPlay.H

基哥

原帖由 lovewei 于 2007-12-15 10:21 发表
找出一个
http://2.Trojan8.com/mm/dd.exe

无法连接

绅博周幸

原帖由 <i>lovewei</i> 于 2007-12-15 10:21 发表 <a href="http://bbs.kafan.cn/redirect.php?goto=findpost&pid=2277619&ptid=171337" target="_blank"><img src="http://bbs.kafan.cn/images/common/back.gif" border="0" onclick="zoom(this)" onload="attachimg(this, 'load')" alt="" /></a><br />
找出一个<br />
http://2.Trojan8.com/mm/dd.exe

<br />
Starting the file scan:

Begin scan in 'C:\Users\Xing\Desktop\Downloads\dd.exe'
C:\Users\Xing\Desktop\Downloads\dd.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [INFO]      The file was deleted!

xqiafl

样本被MCAFEE搞了!