被挂得很华丽的网站

显示全部楼层 · 发表于 2008-2-3 23:50:55

，总之很暴力很华丽就是了。毒网大杂烩

上了一下那网站，2G内存瞬间就被消灭了

[frame]http://www.zjsme.com/home/aboutus/contactus.htm 无发现

[frame]http://acc.jqxx.org/live/index.htm  无法连接

[frame]http://boc.sbb22.com/home/index.htm
  [frame]http://boc.sbb22.com/sb.htm
         [frame]http://yun.yun878.com/web/6619038.htm
               [frame]htm.html -> http://yun.yun878.com/ad.cab
                     [frame]http://yun.yun878.com/web/0.htm -> http://yun.yun878.com/me.exe
                     [js]http://yun.yun878.com/web/1.js -> http://yun.yun878.com/14.exe
                     [js]http://yun.yun878.com/web/bf.js -> http://yun.yun878.com/bf.exe
                     [js]http://yun.yun878.com/web/pps.js -> http://yun.yun878.com/pps.exe
                     [frame]http://yun.yun878.com/web/3.htm -> http://yun.yun878.com/g.exe

  [frame]http://a1.sbb22.com/a.htm
      [frame]http://xxx.jsppp.us/dgll1.htm?id=tt
         [frame]ceshi/real.htm -> http://xxx.jsppp.us/ww/dod.exe
         [frame]ceshi/lz.htm -> http://xxx.jsppp.us/ww/dod.exe
         [frame]ceshi/614.htm -> http://xxx.jsppp.us/ww/dod.exe

  [frame]http://dv.55189.net/
      [frame]http://ppp.buyaoni.com/ww/new82.htm
            [frame]http://ppp.buyaoni.com/dm/diao.htm -> http://dd.749571.com/bb/bd.cab
               [js]http://ppp.buyaoni.com/dm/11.js -> http://dd.749571.com/bb/014.exe
               [js]http://ppp.buyaoni.com/dm/bb.js -> http://dd.749571.com/bb/bb.exe
               [js]http://ppp.buyaoni.com/dm/pp.js -> http://dd.749571.com/bb/pp.exe
            [frame]http://ppp.buyaoni.com/dm/rl.htm -> http://dd.749571.com/bb/newrl.exe
            [frame]http://ppp.buyaoni.com/dm/rr.htm -> http://is.749571.com/bb/a.exe -> ->  <script>location.href="http://202.104.57.161"; </script>
                                                   -> http://dd.749571.com/bb/newgl.exe

  [frame]http://sf.070808.net/sf.htm
   [frame]http://xxx.sbwip.cn/index336511.htm?gr?2
         [js]http://xxx.sbwip.cn/Ajax.gif -> http://xxx.sbwip.cn/xxx.exe
         [frame]http://xxx.sbwip.cn/Ms06014.htm -> http://xxx.sbwip.cn/xxx.exe
         [js]http://xxx.sbwip.cn/Real.js -> http://xxx.sbwip.cn/xxx.exe
         [js]http://xxx.sbwip.cn/Bfyy.gif -> http://xxx.sbwip.cn/xxx.exe
         [js]http://xxx.sbwip.cn/Pps.gif -> http://xxx.sbwip.cn/xxx.exe
         [js]http://xxx.sbwip.cn/XunLei.gif -> http://xxx.sbwip.cn/xxx.exe
         [js]http://xxx.sbwip.cn/Lz.gif -> http://xxx.sbwip.cn/xxx.exe
         [frame]http://xxx.sbwip.cn/QVod.html -> http://xxx.sbwip.cn/xxx.exe

  [frame]http://ga.mm5208.com/w.htm
   [frame]http://37586.com/uuu/web.htm
         [frame]r.htm
            -> http://37586.com/uuu/r.htm  -> http://web.47255.com/uuu/uuu.exe
            -> http://37586.com/r.htm -> http://37586.com/real.exe
         [frame]index.htm
            [frame]06014.html -> http://37586.com/uuu/uuu.exe
            [js]bf.gif -> http://37586.com/uuu/uuu.exe
            [js]pps.gif -> http://37586.com/uuu/uuu.exe
            [js]lz.gif -> http://37586.com/uuu/uuu.exe

[frame]http://sp.070808.net/23.htm
  [frame]http://sp.070808.net/8.htm
   [frame]http://yun.yun878.com/web/6619038.htm 同上

  [frame]http://a1.sbb22.com/a.htm
   [frame]http://xxx.jsppp.us/dgll1.htm?id=tt 同上

  [frame]http://dv.55189.net/          同上
  [frame]http://sf.070808.net/sf.htm    同上
  [frame]http://ga.mm5208.com/w.htm    同上

[frame]http://w.aeaer.com/ae.htm
[frame]http://37586.com/uuu/web.htm 同上
[frame]http://w.aeaer.com/i.htm
   [frame]http://yun.yun878.com/web/6619038.htm 同上
[frame]http://a1.sbb22.com/a.htm
   [frame]http://xxx.jsppp.us/dgll1.htm?id=tt 同上
[frame]http://dv.55189.net/    同上
[frame]http://sf.070808.net/sf.htm 同上
[frame]http://ga.mm5208.com/w.htm 同上

[frame]http://www.999da.cn/hhh.htm
[frame]http://08647.service-google.cn/vip/Cn1707.htm
   [frame]wm2/index.html
      [frame]3.gif -> http://down.malasc.cn/qvod.exe
      [frame]2.gif -> http://down.malasc.cn/614.exe
      [frame]1.gif -> http://down.malasc.cn/bf.exe
      [frame]5.gif -> http://down.malasc.cn/pps.exe
      [frame]11.gif -> http://down.malasc.cn/lz3.exe
      [frame]4.gif -> http://down.malasc.cn/baidu.cab
      [frame]8.gif -> http://down.malasc.cn/real2.exe

[frame]http://qi.ccbtv.net/btv.htm
[frame]http://qi.ccbtv.net/h.htm
   [frame]http://yun.yun878.com/web/6619038.htm  同上
[frame]http://a1.sbb22.com/a.htm
   [frame]http://xxx.jsppp.us/dgll1.htm?id=tt  同上
[frame]http://dv.55189.net/       同上
[frame]http://sf.070808.net/sf.htm 同上
[frame]http://ga.mm5208.com/w.htm 同上

[frame]http://xxx.9yimeiyuan.com/xx.htm?id=017 无法找到该页
[frame]http://xxx.hao1680.com/xx.htm?id=017
[js]http://xxx.hao1680.com/wm/rl.js -> http://qqq.521town.com/down.exe
[frame]http://xxx.hao1680.com/wm/jh.htm
   [js]http://ppp.chsip.net/wm/11.js -> http://qqq.aishengho.com/down.exe
   [js]http://ppp.chsip.net/wm/bb.js  无法找到该页
   [js]http://ppp.chsip.net/wm/ppp.js -> http://qqq.hao1658.com/down.exe
   [js]http://ppp.chsip.net/wm/lz.js -> http://qqq.521town.com/down.exe

[frame]http://www.99391.net/s6.html
[frame]news.html -> http://user1.3332210.net/Baidu.cab
   [js]http://user1.3332210.net/ms06014.js -> http://user1.3332210.net/bak.css
   [frame]http://user1.3332210.net/GLWORLD.html -> http://user1.3332210.net/bak.css
   [frame]http://user1.3332210.net/StormII.html -> http://user1.3332210.net/bak.css
   [js]http://user1.3332210.net/real.js -> http://user1.3332210.net/bak.css

[frame]http://www.123dongfang.cn/gg.htm
[frame]http://user.6liang8.cn/vip/Zn3703.htm
   [frame]wm2/index.html
      [frame]3.gif -> http://20080203.service-google.cn/qvod.exe
      [frame]2.gif -> http://20080203.service-google.cn/614.exe
      [frame]1.gif -> http://20080203.service-google.cn/bf.exe
      [frame]5.gif -> http://20080203.service-google.cn/pps.exe
      [frame]11.gif -> http://20080203.service-google.cn/lz3.exe
      [frame]4.gif -> http://20080203.service-google.cn/baidu.cab
      [frame]8.gif -> http://20080203.service-google.cn/real2.exe
[frame]http://yun.yun878.com/web/6681666.htm
   [frame]htm.html 同上

[js]http://vccd.cn
[frame]http://xxx.hao1680.com/xx.htm?id=017 同上

[js]http://%76%63%63%64%2E%63%6E -> http://vccd.cn 同上

[frame]http://88.881215.com/88.htm
[frame]http://88.881215.com/in.htm
   [frame]http://yun.yun878.com/web/6619038.htm 同上
[frame]http://ga.mm5208.com/w.htm
   [frame]http://37586.com/uuu/web.htm 同上
[frame]http://dv.55189.net/    同上
[frame]http://a1.sbb22.com/a.htm 同上
[frame]http://sf.070808.net/sf.htm  同上

显示全部楼层 · 发表于 2008-2-3 23:54:34

呕吐中

显示全部楼层 · 发表于 2008-2-3 23:56:22

rapper整理这个报告废了不少时间吧
推销下自己的1.50

会有惊喜的..

显示全部楼层 · 发表于 2008-2-3 23:58:07

的确费时间

1.5刚看到

显示全部楼层 · 发表于 2008-2-4 00:06:00

Scan Log
Version of virus signature database: 2845 (20080202)
Date: 2008-02-04 Time: 0:02:06
Scanned disks, folders and files: C:\Documents and Settings\GUNDAM\桌面\1
C:\Documents and Settings\GUNDAM\桌面\1\14.exe - Win32/TrojanDownloader.Small.NZL trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\614(1).exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\614.exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\ad.cab » CAB » bd.exe - Win32/TrojanDownloader.Small.NZL trojan - was a part of the deleted object
C:\Documents and Settings\GUNDAM\桌面\1\baidu(1).cab » CAB » baidu.exe - Win32/TrojanDownloader.Small.NZS trojan - was a part of the deleted object
C:\Documents and Settings\GUNDAM\桌面\1\Baidu(2).cab » CAB » Baidu.exe - Win32/TrojanDownloader.Agent.IBH trojan - was a part of the deleted object
C:\Documents and Settings\GUNDAM\桌面\1\baidu.cab » CAB » baidu.exe - Win32/TrojanDownloader.Small.NZS trojan - was a part of the deleted object
C:\Documents and Settings\GUNDAM\桌面\1\bf(1).exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\bf(2).exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\bf.exe - Win32/TrojanDownloader.Small.NZL trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\g.exe - Win32/TrojanDownloader.Small.NZL trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\lz3(1).exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\lz3.exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\me.exe - Win32/TrojanDownloader.Small.NZL trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\pps(1).exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\pps(2).exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\pps.exe - Win32/TrojanDownloader.Small.NZL trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\qvod(1).exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\qvod.exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\real.exe - a variant of Win32/Anilogo worm - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\real2(1).exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\real2.exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\uuu(1).exe - a variant of Win32/Anilogo worm - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\uuu.exe - a variant of Win32/Anilogo worm - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\1\xxx.exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined [1]
Number of scanned objects: 39
Number of threats found: 25
Time of completion: 0:03:18 Total scanning time: 72 sec (00:01:12)

Notes:
[1] Object has been deleted as it only contained the virus body.

显示全部楼层 · 发表于 2008-2-4 00:06:21

打个包，重复的删了

显示全部楼层 · 发表于 2008-2-4 00:07:09

比我快啊

显示全部楼层 · 发表于 2008-2-4 00:07:32

真的很强大

显示全部楼层 · 发表于 2008-2-4 00:08:10

45
detected: Trojan program Trojan-Downloader.Win32.Agent.ine File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\014.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ode File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\14.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\614(1).exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\614.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ode File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\ad.cab/bd.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\baidu(1).cab/baidu.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.ibl File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\Baidu(2).cab/Baidu.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\baidu.cab
detected: Trojan program Trojan-Downloader.Win32.Agent.ine File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\bb.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.ine File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\bd.cab/bd.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\bf(1).exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\bf(2).exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ode File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\bf.exe//NSPack
detected: Trojan program Trojan-Downloader.Win32.Agent.iga File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\dod.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.ikh File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\down(1).exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.ikh File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\down(2).exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.ikh File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\down.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ode File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\g.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\lz3(1).exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\lz3.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ode File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\me.exe//NSPack
detected: Trojan program Trojan-Downloader.Win32.Agent.ine File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\newgl.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.ine File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\newrl.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.ine File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\pp.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\pps(1).exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\pps(2).exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ode File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\pps.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\qvod(1).exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\qvod.exe//PE_Patch//UPack
detected: virus Worm.Win32.AutoRun.bkt File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\real.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\real2(1).exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\real2.exe//PE_Patch//UPack
detected: virus Worm.Win32.AutoRun.bkt File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\uuu(1).exe//UPack
detected: virus Worm.Win32.AutoRun.bkt File: C:\Documents and Settings\Owner\×ÀÃæ\35.rar/1\uuu.exe//UPack
detected: virus Worm.Win32.AutoRun.bkt File: C:\Documents and Settings\Owner\×ÀÃæ\10.rar/uuu.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\10.rar/baidu(1).cab/baidu.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.ibl File: C:\Documents and Settings\Owner\×ÀÃæ\10.rar/Baidu.cab/Baidu.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\10.rar/614.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.iga File: C:\Documents and Settings\Owner\×ÀÃæ\10.rar/dod.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.ikh File: C:\Documents and Settings\Owner\×ÀÃæ\10.rar/down.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ode File: C:\Documents and Settings\Owner\×ÀÃæ\10.rar/g.exe//NSPack
detected: Trojan program Trojan-Downloader.Win32.Agent.ine File: C:\Documents and Settings\Owner\×ÀÃæ\10.rar/newgl.exe//PE_Patch//UPack
detected: virus Worm.Win32.AutoRun.bkt File: C:\Documents and Settings\Owner\×ÀÃæ\10.rar/real.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ppu File: C:\Documents and Settings\Owner\×ÀÃæ\10.rar/baidu(1).cab
detected: Trojan program Trojan-Downloader.Win32.Agent.ibl File: C:\Documents and Settings\Owner\×ÀÃæ\10.rar/Baidu.cab

显示全部楼层 · 发表于 2008-2-4 00:09:05

原帖由 wangjay1980 于 2008-2-4 00:07 发表
比我快啊

比我的质量好呵呵

C:\Documents and Settings\GUNDAM\桌面\10.rar » RAR » uuu.exe - a variant of Win32/Anilogo worm
C:\Documents and Settings\GUNDAM\桌面\10.rar » RAR » xxx.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\GUNDAM\桌面\10.rar » RAR » baidu(1).cab » CAB » baidu.exe - Win32/TrojanDownloader.Small.NZS trojan
C:\Documents and Settings\GUNDAM\桌面\10.rar » RAR » Baidu.cab » CAB » Baidu.exe - Win32/TrojanDownloader.Agent.IBH trojan
C:\Documents and Settings\GUNDAM\桌面\10.rar » RAR » 614.exe - Win32/TrojanDownloader.Small.NZS trojan
C:\Documents and Settings\GUNDAM\桌面\10.rar » RAR » g.exe - Win32/TrojanDownloader.Small.NZL trojan
C:\Documents and Settings\GUNDAM\桌面\10.rar » RAR » real.exe - a variant of Win32/Anilogo worm

[已鉴定] 被挂得很华丽的网站

回复 3楼 jimmyleo 的帖子

回复 5楼 leonfg 的帖子