毒网一个

显示全部楼层 · 发表于 2007-10-20 17:46:37

瑞星2008报发现Trojan.DL.Script.JS.Agent.lop

显示全部楼层 · 发表于 2007-10-20 19:47:35

原帖由 mofunzone 于 2007-10-20 00:39 发表
启发式引擎还是不行。。
上报脚本去了
Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\xl.js'
C:\TDDOWNLOAD\
  xl.js
Begin scan in 'C:\TDDOWNLOAD\bf.htm'
C:\TDDOWNLOAD\
  bf.htm
   [DE ...

RX20.14.52一个未杀。

显示全部楼层 · 发表于 2007-10-20 22:02:27

小紅傘叫了.....叫了不下於五次...

显示全部楼层 · 发表于 2007-10-20 22:10:57

m同学发出的包nod都miss了

显示全部楼层 · 发表于 2007-10-21 06:15:17

SCS
检测到并禁止了针对您计算机的入侵企图“HTTP ANI File Anih Hdr Size BO”。
入侵者: 60.190.223.30(http(80))。
风险级别: 高。
协议: TCP。
攻击的 IP: localhost。
攻击的端口: 2318。

Description
This signature detects attempts to exploit a buffer overflow vulnerability affecting ANI (animated cursor files) handler on Microsoft Windows operating systems.

看来symantec的防火墙对漏洞和缓冲区保护是相当强劲的。

[ 本帖最后由 huaxiang954 于 2007-10-21 06:25 编辑 ]

显示全部楼层 · 发表于 2007-10-21 06:22:23

avast

21/10/2007 11:18:00 a.m. SYSTEM 1120 Sign of "CVE-2007-0038" has been found in "http://60.190.223.30/jj/ad.jpg" file.
21/10/2007 11:18:01 a.m. SYSTEM 1120 Sign of "CVE-2007-0038" has been found in "C:\Documents and Settings\Wayne\Application Data\Sandbox\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\0527C56N\ad[1].jpg" file.
21/10/2007 11:18:15 a.m. SYSTEM 1120 Sign of "CVE-2007-0038" has been found in "C:\Documents and Settings\Wayne\Application Data\Sandbox\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\0527C56N\ad[1].jpg" file.
21/10/2007 11:18:38 a.m. SYSTEM 1120 Sign of "CVE-2007-0038" has been found in "http://60.190.223.30/jj/ad.jpg" file.

显示全部楼层 · 发表于 2007-10-21 13:08:28

不错,麦咖啡也发现并清除...

[已鉴定] 毒网一个