绅博看见的毒网.hxxp://taipei.law119.com.tw/

显示全部楼层 · 发表于 2007-7-8 23:28:39

hxxp://taipei.law119.com.tw/

显示全部楼层 · 发表于 2007-7-8 23:37:51

2007-7-8 23:33:43 IMON file http://www.ip369.net/hi/014.htm JS/TrojanDownloader.Psyme.NAE trojan
2007-7-8 23:33:56 IMON file http://18dmm.com/arp/2.jpg a variant of Win32/TrojanDownloader.Ani.Gen
2007-7-8 23:33:56 IMON file http://18dmm.com/arp/1.jpg a variant of Win32/TrojanDownloader.Ani.Gen trojan
2007-7-8 23:33:57 IMON file http://q.zpx520.com/w.js a variant of Win32/TrojanDownloader.Ani.Gen trojan

显示全部楼层 · 发表于 2007-7-8 23:47:36

好多啊慢慢来~

显示全部楼层 · 发表于 2007-7-8 23:47:57

==>iframe
hahado.w57.bizcn.com/hh/hhss.htm
[Unescape]
==>http://hahado.w57.bizcn.com/hh/down.exe (貌似空间不好下载不下来……)

==>iframe
http://gime123.w187.bizcn.com/tt/index.htm

==>iframe
http://gime123.w187.bizcn.com/tt/hhbb.htm

==>iframe
http://www.m85853.com.cn/index.htm

==>iframe
http://www.m85853.cn/muma/index.htm

==>iframe
http://www.n85853.cn/index.htm

==>iframe
http://www.m85853.cn/gogo/index.htm

==>iframe
http://www.idiw.cn

[ 本帖最后由 jimmyleo 于 2007-7-9 00:49 编辑 ]

显示全部楼层 · 发表于 2007-7-8 23:51:13

==>iframe
http://878772.cn/bumian24.htm

==>iframe
http://www.18dmm.com/dm/kehu0774.htm?001

==>iframe
http://xxtvb.cn/arp/httpweb.htm

==>script
http://xxtvb.cn/arp/www1.js
==>http://xxtvb.cn/arp/exec.htm
==>http://xxtvb.cn/arp/update.exe (这个销帐的……还升级)

==>iframe
http://ppp.caomapi.com/pi/9858.htm?115

==>script
http://s106.cnzz.com/stat.php?id=521324&web_id=521324

[ 本帖最后由 jimmyleo 于 2007-7-9 01:01 编辑 ]

显示全部楼层 · 发表于 2007-7-8 23:51:35

手都点酸了

显示全部楼层 · 发表于 2007-7-8 23:52:06

红伞一阵狂报

显示全部楼层 · 发表于 2007-7-8 23:52:12

瑞星病毒查杀结果报告
清除病毒种类列表：
病毒： Trojan.PSW.Win32.QQPass.qld
病毒： Trojan.PSW.Win32.QQPass.qis
病毒： Hack.SuspiciousAni
用户来源：互联网
软件版本：19.30.62

显示全部楼层 · 发表于 2007-7-8 23:54:26

index

==>ani
http://www.878772.cn/down.exe

==>iframe
http://ppp.caomapi.com/pi/786929.htm

==>iframe
http://boolom.com/6929.htm

==>iframe
http://878772.cn/bumian23.htm

==>iframe
http://555.555y.net/888.htm

==>iframe
http://www.hao123hao123.cn/qq/aaa.htm

==>iframe
45.htm
==>http://www.18dmm.com/arp/down.exe
==>iframe
70.htm
==>http://www.hao123hao123.cn/qq/70.exe
==>www.CuteQq.cn

==>iframe
http://www.debae.cn/

==>iframe
http://www.treq.cn/

==>iframe
http://555.555y.net/

==>iframe
http://q.zpx520.com/1.htm
==>http://q.dzy520.com/vip.exe

==>iframe
http://q.zpx520.com/vip.htm

==>iframe
http://www.aqshw.cn/

==>iframe
http://www.qq881.cn/

==>script
http://s118.cnzz.com/stat.php?id=483768&web_id=483768&show=pic

==>iframe
http://www.yuqianshu.com/bottom.htm

==>iframe
http://878772.cn/vip.htm
[asc]

<SCRIPT src="vip.js"></SCRIPT>
<BODY onload=shit();><BR><BR>

==>http://www.ip369.net/hi/vips.htm
[asc]

<script src="vip.exe"></script>

[ 本帖最后由 jimmyleo 于 2007-7-9 00:56 编辑 ]

显示全部楼层 · 发表于 2007-7-8 23:56:16

根据8楼的样本

deleted: Trojan program Trojan-Spy.Win32.Delf.vr File: C:\Documents and Settings\Deric Yeoh\×ÀÃæ\Ñ¸À×ÏÂÔØ.rar/x.exe//UPX
deleted: Trojan program Trojan-PSW.Win32.Delf.qc File: C:\Documents and Settings\Deric Yeoh\×ÀÃæ\Ñ¸À×ÏÂÔØ.rar/0.exe//UPX
deleted: malware Exploit.Win32.IMG-ANI.ac File: C:\Documents and Settings\Deric Yeoh\×ÀÃæ\Ñ¸À×ÏÂÔØ.rar/1.jpg
deleted: malware Exploit.Win32.IMG-ANI.ac File: C:\Documents and Settings\Deric Yeoh\×ÀÃæ\Ñ¸À×ÏÂÔØ.rar/2.jpg
deleted: malware Exploit.Win32.IMG-ANI.gen (modification) File: C:\Documents and Settings\Deric Yeoh\×ÀÃæ\Ñ¸À×ÏÂÔØ.rar/w.js

[病毒样本] 绅博看见的毒网.hxxp://taipei.law119.com.tw/

本帖子中包含更多资源