大家来看看这个毒网的是什么名堂

显示全部楼层 · 发表于 2007-6-30 03:00:18

http://www.i0735.com/2005/5-30/12395250806.htm不知道什么毒,个人估计是广告.

显示全部楼层 · 发表于 2007-6-30 04:52:12

开着avast!进去没反应。

显示全部楼层 · 发表于 2007-6-30 07:40:50

htp://1.zzcoke.com/z/myself.exe
htp://1.zzcoke.com/setup.exe

显示全部楼层 · 发表于 2007-6-30 07:45:01

Scan performed at: 2007-6-30 7:44:45
Scanning Log
NOD32 version 2364 (20070629) NT
Command line: C:\Documents and Settings\EQ2\桌面\setup.exe C:\Documents and Settings\EQ2\桌面\myself.exe
Operating memory - is OK

Date: 30.6.2007 Time: 07:44:49
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\setup.exe; C:\Documents and Settings\EQ2\桌面\myself.exe
C:\Documents and Settings\EQ2\桌面\setup.exe - Win32/Adware.BHO.AJ application - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\myself.exe - probably a variant of Win32/Spy.Delf.NEN trojan
Number of scanned files: 2
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 07:44:50 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-6-30 07:47:11

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\myself.exe'
C:\TDDOWNLOAD\
  myself.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\setup.exe'
C:\TDDOWNLOAD\
  setup.exe
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BHO.AJ.2.B
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-30 08:28:53

http://hi.baidu.com/virus1p1/blo ... 769610c9fc7a5b.html

显示全部楼层 · 发表于 2007-6-30 08:33:18

deleted: adware not-a-virus:AdWare.Win32.BHO.aj File: E:\ÏÂÔØ»ùµØ\setup.exe//ASPack

Hello,

myself.exek - Trojan-Spy.Win32.Agent.pn

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: myself.zip

[ 本帖最后由 wangjay1980 于 2007-6-30 10:20 编辑 ]

显示全部楼层 · 发表于 2007-6-30 14:15:32

麻烦贴个样本上来测一下

显示全部楼层 · 发表于 2007-6-30 14:20:01

费尔+OP进去无反应。

显示全部楼层 · 发表于 2007-6-30 14:40:00

费尔报
病毒(HTML.Object.Exploit): C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0T034N0J\hhhhhh[1].htm