硅谷动力被挂的马，好几个！

显示全部楼层 · 发表于 2007-10-13 21:45:26

网站 http://games.enet.com.cn/zhuanti/galgame/

检测到：木马程序 Trojan-Downloader.JS.Psyme.pv URL: http://218.75.91.248/ww/nick.js
检测到：木马程序 Trojan-Downloader.VBS.Psyme.jg URL: http://218.75.91.248/ww/ww4.htm
检测到：木马程序 Trojan-Downloader.VBS.Agent.ex URL: http://218.75.91.248/ww/ww6.htm
检测到：木马程序 Trojan-Downloader.JS.Agent.wr URL: http://218.75.91.248/ww/webxl.js
检测到：木马程序 Trojan-Downloader.VBS.Psyme.jh URL: http://218.75.91.248/ww/614.js

显示全部楼层 · 发表于 2007-10-13 21:49:57

RX未报！

显示全部楼层 · 发表于 2007-10-13 21:50:03

这样的网不值得去。

显示全部楼层 · 发表于 2007-10-13 21:57:43

detected: Trojan program Trojan-Downloader.JS.Psyme.pv URL: http://bbs.kafan.cn/attachment.php?aid=139272//nick.js
detected: Trojan program Trojan-Downloader.VBS.Psyme.jg URL: http://bbs.kafan.cn/attachment.php?aid=139272//ww4.htm
detected: Trojan program Trojan-Downloader.VBS.Agent.ex URL: http://bbs.kafan.cn/attachment.php?aid=139272//ww6.htm
detected: Trojan program Trojan-Downloader.JS.Agent.wr URL: http://bbs.kafan.cn/attachment.php?aid=139272//webxl.js
detected: Trojan program Trojan-Downloader.VBS.Psyme.jh URL: http://bbs.kafan.cn/attachment.php?aid=139272//614.js

显示全部楼层 · 发表于 2007-10-13 22:01:25

江民独杀1只

显示全部楼层 · 发表于 2007-10-13 22:06:12

卡巴已杀掉!

显示全部楼层 · 发表于 2007-10-13 22:06:16

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\virus.rar
  [0] Archive type: RAR
  --> nick.js
   [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Psyme.NS
  --> ww4.htm
   [DETECTION] Contains detection pattern of the VBS script virus VBS/Dldr.ADODB.A
  --> ww6.htm
   [DETECTION] Contains detection pattern of the VBS script virus VBS/Dldr.Psyme.HJ
  --> 614.js
   [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Psyme.NQ
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-13 22:21:35

KIS7.0
检测到：木马程序 Trojan-Downloader.JS.Psyme.pv URL: http://218.75.91.248/ww/nick.js

显示全部楼层 · 发表于 2007-10-13 22:29:45

McAfee has automatically blocked and removed a
potentially harmful script.

About this Script
Detected: Exploit-MS06-014 (Virus)

A script is a small program that automates certain
tasks on your computer. Potentially unwanted
scripts can damage valuable files, disrupt
performance, and make unauthorized registry
changes on your computer.

显示全部楼层 · 发表于 2007-10-13 23:11:25

看来还是红伞报的多一些，一共9个。
index.htm
forum-94-1.htm
xs.htm
new09.htm
nick.js
ww6.htm
ww4.htm
614.js
bb.js
楼主，在脚本的拦截上，小红伞真的要强很多哦。

[已鉴定] 硅谷动力被挂的马，好几个！