过江民

显示全部楼层 · 发表于 2007-10-21 01:07:20

8A315B60C586E81E435C98E657AE9A9C

显示全部楼层 · 发表于 2007-10-21 01:11:55

Scan Log
Version of virus signature database: 2604 (20071019)
Date: 21.10.2007 Time: 01:11:40
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\counter21[1].zip
C:\Documents and Settings\Don johnson\桌面\counter21[1].zip » ZIP » counter21[1].htm - VBS/TrojanDownloader.Psyme.Gen trojan
Number of scanned objects: 1
Number of threats found: 1
Time of completion: 01:11:41 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-10-21 01:41:57

难得nod杀个网页
Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\counter21[1].zip'
C:\Users\morgan\Documents\
  counter21[1].zip
[0] Archive type: ZIP
--> counter21[1].htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-21 02:34:44

卡巴斯基互联网安全套装 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=141765 is infected with Trojan-Downloader.VBS.Agent.p virus

显示全部楼层 · 发表于 2007-10-21 15:17:49

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 654
Paranoia Database - 48034
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\counter21[1].htm

C:\Documents and Settings\uhthn\Desktop\counter21[1].htm - Suspected Trojan-Downloader.VBS.Agent.2

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-10-21 15:22:30

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.3.2
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [EmuHTML] 在 C:\Documents and Settings\Administrator\桌面\样本\counter21[1].zip>>counter21[1].htm 检测到 Counter
任务扫描完成。共耗费的时间：0-00-00 00:00:00:0170，共扫描的文件数量：2，共扫描到的威胁数量：1，威胁率：50%，扫描速率： 11.76 文件/秒，扫描速度： 40.17 千字节/秒，共扫描了 6.83 千字节。

显示全部楼层 · 发表于 2007-10-21 16:57:33

红伞报，还真行，我真的很佩服小红伞

显示全部楼层 · 发表于 2007-10-21 17:03:19

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.JS.Agent.lhj

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.14.62

显示全部楼层 · 发表于 2007-10-21 17:29:49

counter21[1].htm
   [DETECTION] Contains suspicious code HEUR/Exploit.HTML
   [INFO]    A backup was created as '47901c71.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!
过江民很正常，小红伞是过不了的啦

显示全部楼层 · 发表于 2007-10-21 17:36:53

C:\counter21[1].zip\counter21[1].htm - infected with Trojan.DownLoader.30251

Archive contains an infected item

DRWEB 也报告了这个网页。下载者？

[病毒样本] 过江民

本帖子中包含更多资源