kv2008报

kp2006

快杀

4个js

[ 本帖最后由 kp2006 于 2007-10-14 12:47 编辑 ]

harrystopet

瑞星08
C:\Documents and Settings\wujiawei\桌面\桌面.rar>>haha[1].js

Trojan.DL.Script.JS.Agent.lnz

jimmyleo

[exe]http://xxx.cslr1.com/ysyupdate.exe

jimmyleo

除了haha 都没问题
上面是haha提取的

promised

http://zzz.cslr1.com/ysy(*).exe
1-20

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\桌面.rar'
C:\Users\morgan\Documents\
  桌面.rar
  桌面.rar:Zone.Identifier
    [0] Archive type: RAR
    --> lib[1].js
    --> flashget[2].js
    --> haha[1].js
        [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Psyme.NS
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

mofunzone

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\ysyupdate.exe'
C:\TDDOWNLOAD\
  ysyupdate.exe
      [DETECTION] Contains detection pattern of the worm WORM/Downloader.B.2
      [INFO]      The file was deleted!

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 533
Paranoia Database - 10451
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\lib[1].js - OK
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\flashget[2].js - OK
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\flashget[1].js - OK
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\haha[1].js - Infected Trojan-Downloader.js.psyme.1

4 Files scanned
1 Infected files found
0 Suspected files found
0 Files cured
1 Files deleted

BING126

NOD32 MISS

IllusionWing

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.3.2
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\flashget[1].js 检测到 Script.JSPack
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\flashget[2].js 检测到 Script.JSPack
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\lib[1].js 检测到 Script.JSPack
任务 扫描 完成。共耗费的时间：0-00-00 00:00:00:0060，共扫描的文件数量：4，共扫描到的威胁数量：3，威胁率：75%，扫描速率： 66.67 文件/秒，扫描速度： 1322.22 千字节/秒，共扫描了 79.33 千字节。