恨得

hf11

是一个病毒包。。。不是很狠的，放心！

醉一生爱妍

江民报JS

29159011

卡巴12个

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\我很毒，太毒了！(密碼：kafan)'
C:\Documents and Settings\Administrator\My Documents\我很毒，太毒了！(密碼：kafan)\
  SkypeClient.exe
    [0] Archive type: Runtime Packed
    --> Object
  test[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Shellcode.Gen
      [INFO]      The file was deleted!
  会议文献著录举例.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [INFO]      The file was deleted!
  学位论文举例.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [INFO]      The file was deleted!
  标准文献著录举例.htm
  详细记录.htm
C:\Documents and Settings\Administrator\My Documents\我很毒，太毒了！(密碼：kafan)\1\
  Addall.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [INFO]      The file was deleted!
  AddUrl.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [INFO]      The file was deleted!
  g14[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/ADODB.Exploit.Gen
      [INFO]      The file was deleted!
  PnpWmkDrv.sys
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.GZ
      [INFO]      The file was deleted!
  RegisterCQ.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The fund was classified as suspicious.
      [INFO]      The file was moved to '47e0e7b0.qua'!
  test[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Shellcode.Gen
      [INFO]      The file was deleted!
  whole_counter[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [INFO]      The file was deleted!
  xz[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [INFO]      The file was deleted!
  会议文献著录举例.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [INFO]      The file was deleted!
  学位论文举例.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [INFO]      The file was deleted!
  标准文献著录举例.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [INFO]      The file was deleted!
  详细记录.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年12月31日  23:10
Used time: 00:04 min

The scan has been done completely.

      2 Scanning directories
     18 Files were scanned
     14 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
     14 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

无尽藏海

Begin scan in 'D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)'
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\会议文献著录举例.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\学位论文举例.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\SkypeClient.exe
      [WARNING]   The file could not be opened!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\1\PnpWmkDrv.sys
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.GZ
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\1\xz[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\1\RegisterCQ.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\1\whole_counter[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\1\Addall.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\1\AddUrl.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\1\标准文献著录举例.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\1\会议文献著录举例.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\1\详细记录.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\1\学位论文举例.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\我很毒，太毒了！(密碼：kafan)\1\g14[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/ADODB.Exploit.Gen
      [WARNING]   The file was ignored!


End of the scan: 2008年1月1日  15:08
Used time: 00:07 min

The scan has been done completely.

      2 Scanning directories
     18 Files were scanned
      1 viruses and/or unwanted programs were found
     12 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      1 Files cannot be scanned
     17 Files not concerned
      0 Archives were scanned
     14 Warnings
      0 Notes

[ 本帖最后由 无尽藏海 于 2008-1-1 15:11 编辑 ]

zwl2828

1个

C:\Users\Wesley\Downloads\我很毒，太毒了！(密碼：kafan)\test[1].htm        JS/Exploit.BO.NAE trojan

啊弥陀佛

随便拿个网页看下

微点砍掉

kkgh

AVG Anti-Spyware - 扫描报告
---------------------------------------------------------

+ 创建时间:        15:29:17 2008-1-1

+ 扫描结果:       



C:\Documents and Settings\zh\桌面\1.rar/g14[1].htm -> Downloader.Agent.aep : 未进行操作.
C:\Documents and Settings\zh\桌面\1.rar/test[1].htm -> Not-A-Virus.Exploit.HTML.IframeBof : 未进行操作.
C:\Documents and Settings\zh\桌面\test[1].htm -> Not-A-Virus.Exploit.HTML.IframeBof : 未进行操作.
瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Script.VBS.Agent.xip
病毒： Hack.Exploit.Script.JS.Bugexp.a
病毒： Trojan.DL.IeFrame.bm     

用户来源：互联网

软件版本：20.25.10

::报告结束

scottxzt

C:\Documents and Settings\dell\桌面\新建文件夹\test[1].htm
JS.Decoder.k
HTML.SecretOut.b
HTML.SecretOut.b

qigang

1.rar压缩包


瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.IeFrame.bm     
病毒： Hack.Exploit.Script.JS.Bugexp.a
病毒： Hack.Exploit.Script.JS.WebThunder.c
病毒： Trojan.DL.Script.VBS.Agent.xip

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.25.11