TOM体育被挂马

Redevil

http://sports.tom.com/2007-09-02/03P5/62456647.html

挂：http://www.686ip.cn/sl/2.htm

下载地址：http://www.686ip.cn/shen/ma.exe

微点卫士

附件
微点：
木马名称:Trojan-Downloader.Win32.Delf.hdg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MA.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

网页打开是一片空白诶

坐在墙头

金山：        病毒:Packes.MaskPE.a

红心王子

aziok

Begin scan in  \桌面\ma.rar
  [0] Archive type: RAR
  --> ma.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!

mofunzone

网页和木马一起XX

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\ma.rar'
C:\Documents and Settings\Administrator\My Documents\
  ma.rar
    [0] Archive type: RAR
    --> ma.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\2.htm'
C:\Documents and Settings\Administrator\My Documents\
  2.htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [WARNING]   The file was ignored!

dikex

附送ma.exe上面的几个病毒链接



http://www.686ip.cn/shen/1.exe
http://www.686ip.cn/shen/2.exe
http://www.686ip.cn/shen/3.exe
http://www.686ip.cn/shen/4.exe
http://www.686ip.cn/shen/5.exe
http://www.686ip.cn/shen/6.exe
http://www.686ip.cn/shen/7.exe
http://www.686ip.cn/shen/8.exe
http://www.686ip.cn/shen/9.exe
http://www.686ip.cn/shen/10.exe

[ 本帖最后由 dikex 于 2007-9-14 14:13 编辑 ]

xxl

大蜘蛛报两个
C:\Documents and Settings\Admin\Local Settings\Temporary Internet Files\Content.IE5\89MNCP2F\ma[1].exe - probably infected with DLOADER.Trojan

C:\Documents and Settings\Admin\Local Settings\Temp\commomds.exe - probably infected with DLOADER.Trojan

绅博周幸

原帖由 <i>dikex</i> 于 2007-9-14 14:12 发表 <a href="http://bbs.kafan.cn/redirect.php?goto=findpost&pid=1715809&ptid=130460" target="_blank"><img src="http://bbs.kafan.cn/images/common/back.gif" border="0"   alt="" /></a><br />
附送ma.exe上面的几个病毒链接<br />
<br />
<br />
<br />
http://www.686ip.cn/shen/1.exe<;br />
http://www.686ip.cn/shen/2.exe<;br />
http://www.686ip.cn/shen/3.exe<;br />
http://www.686ip.cn/shen/4.exe<;br />
http://www.686ip.cn/shen/5.exe<;br />
http ...

<br />




９个，１０不能下载

[ 本帖最后由 绅博周幸 于 2007-9-14 14:19 编辑 ]

绅博周幸

Starting the file scan:

Begin scan in 'D:\2.rar'
D:\2.rar
  [0] Archive type: RAR
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.9463.B
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cpy
  --> 4.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/Agent.12716.1
  --> 6.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/Agent.12229
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.25921
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cqb
      [WARNING]   The file was ignored!


End of the scan: 2007年9月13日  23:02
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      7 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes