一包JS

显示全部楼层 · 发表于 2007-7-10 08:49:41

晕死
那毒网都指向那个文件

显示全部楼层 · 发表于 2007-7-10 08:50:19

Starting the file scan:

Begin scan in 'F:\病毒样本\b.rar'
F:\病毒样本\b.rar
  [0] Archive type: RAR
  --> muma.js
   [DETECTION] Contains suspicious code HEUR/Exploit.HTML
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-10 08:53:55

已删除: 木马程序 Trojan-Downloader.JS.Agent.id 文件: C:\Documents and Settings\b\桌面\b.rar/b.js
已删除: 木马程序 Trojan-Downloader.JS.Agent.id 文件: C:\Documents and Settings\b\桌面\b.rar/muma1.js

显示全部楼层 · 发表于 2007-7-10 08:54:21

已检测到: 木马程序 Trojan-Downloader.JS.Agent.id URL: http://bbs.kafan.cn/attachment.php?aid=99016//b.js
已检测到: 木马程序 Trojan-Downloader.JS.Agent.id URL: http://bbs.kafan.cn/attachment.php?aid=99016//muma1.js

显示全部楼层 · 发表于 2007-7-10 08:56:45

费尔 all pass

显示全部楼层 · 发表于 2007-7-10 09:00:55

原帖由 坐在墙头 于 2007-7-10 08:56 发表
费尔 all pass

不是有动态防御(HIPS)吗???

显示全部楼层 · 发表于 2007-7-10 09:08:07

我的是扫描，我是实机，可没兴趣去试验

显示全部楼层 · 发表于 2007-7-10 09:10:03

原帖由 promised 于 2007-7-10 08:49 发表
晕死
那毒网都指向那个文件

http://hi.baidu.com/virus1p1/blog/item/9bee4ad74ff8c5dfa044dfd1.html

就是那个文件

显示全部楼层 · 发表于 2007-7-10 09:16:09

Scan performed at: 2007-7-10 9:15:47
Scanning Log
NOD32 version 2388 (20070710) NT
Command line: C:\Documents and Settings\EQ2\桌面\b.rar
Operating memory - is OK

Date: 10.7.2007 Time: 09:15:52
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\b.rar
C:\Documents and Settings\EQ2\桌面\b.rar ?RAR ?b.js - JS/TrojanDownloader.Agent.ID trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\b.rar ?RAR ?muma1.js - JS/TrojanDownloader.Agent.ID trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\b.rar ?RAR ?xunlei.js - JS/TrojanDownloader.Agent.ID trojan - was a part of the deleted object
Number of scanned files: 5
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 09:15:53 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-7-10 09:25:10

kv2007一个都没扫到。

[病毒样本] 一包JS

本帖子中包含更多资源

回复 #6 tracydk 的帖子