抛个毒网tv.mymtv335.cn

ask5

Log is generated by FreShow.
[wide]http://tv.mymtv335.cn/index.htm
        [frame]http://tv.mymtv335.cn/ChinasB.htm
            [frame]http://tv.mymtv335.cn/ZVipb.htm
                [frame]http://tv.mymtv335.cn/reader.htm
                [frame]http://tv.mymtv335.cn/QvodPlay.htm
                [frame]http://tv.mymtv335.cn/xp07004.htm
                    [object]http://tv.mymtv335.cn/svcoss.exe

其他的不会了


[ 本帖最后由 ask5 于 2008-2-9 16:45 编辑 ]

Graybird

Starting the file scan:

Begin scan in 'E:\virus\svcoss.exe'
E:\virus\svcoss.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ayb
      [INFO]      The file was deleted!

tanlimo

QvodPlay.htm和xp07004.htm都是svcoss.exe

reader.htm实在看不懂。

jimmyleo

reader 第一层为jsencode
FreShow暂时不行 Malzilla可以
http://tv.mymtv335.cn/svcoss.exe

woai_jolin

=============================================================================
Dr.Web(R) Scanner for Windows v4.44.2 (4.44.2.11261)
(c) 1992-2007 Igor Daniloff. All rights reserved.
Log generated on: 2008-02-09, 17:29:34 [Administrator]
Command-line: "E:\DrWeb\DrWeb32W.Exe" /ARN /HA /OK /UPN /TM- /AL /SS- /SD /SHELL /TB-
Operating system:Windows XP Professional x86 (Build 2600), Service Pack 2
=============================================================================
DwShield started
Engine version: 4.44 (4.44.0.09170)
Engine API version: 2.02
[Virus database] E:\DrWeb\drwtoday.vdb - 789 virus records
[Virus database] E:\DrWeb\drw44425.vdb - 3609 virus records
[Virus database] E:\DrWeb\drw44424.vdb - 7770 virus records
[Virus database] E:\DrWeb\drw44423.vdb - 4210 virus records
[Virus database] E:\DrWeb\drw44422.vdb - 1010 virus records
[Virus database] E:\DrWeb\drw44421.vdb - 421 virus records
[Virus database] E:\DrWeb\drw44420.vdb - 1306 virus records
[Virus database] E:\DrWeb\drw44419.vdb - 1234 virus records
[Virus database] E:\DrWeb\drw44418.vdb - 1238 virus records
[Virus database] E:\DrWeb\drw44417.vdb - 4406 virus records
[Virus database] E:\DrWeb\drw44416.vdb - 7847 virus records
[Virus database] E:\DrWeb\drw44415.vdb - 6014 virus records
[Virus database] E:\DrWeb\drw44414.vdb - 804 virus records
[Virus database] E:\DrWeb\drw44413.vdb - 5020 virus records
[Virus database] E:\DrWeb\drw44412.vdb - 1565 virus records
[Virus database] E:\DrWeb\drw44411.vdb - 1582 virus records
[Virus database] E:\DrWeb\drw44410.vdb - 1131 virus records
[Virus database] E:\DrWeb\drw44409.vdb - 2303 virus records
[Virus database] E:\DrWeb\drw44408.vdb - 3904 virus records
[Virus database] E:\DrWeb\drw44407.vdb - 2456 virus records
[Virus database] E:\DrWeb\drw44406.vdb - 4411 virus records
[Virus database] E:\DrWeb\drw44405.vdb - 1311 virus records
[Virus database] E:\DrWeb\drw44404.vdb - 2486 virus records
[Virus database] E:\DrWeb\drw44403.vdb - 4462 virus records
[Virus database] E:\DrWeb\drw44402.vdb - 94 virus records
[Virus database] E:\DrWeb\drw44401.vdb - 557 virus records
[Virus database] E:\DrWeb\drw44400.vdb - 945 virus records
[Virus database] E:\DrWeb\drwebase.vdb - 209466 virus records
[Virus database] E:\DrWeb\dwrtoday.vdb - 296 virus records
[Virus database] E:\DrWeb\dwntoday.vdb - 161 virus records
[Virus database] E:\DrWeb\dwn44402.vdb - 814 virus records
[Virus database] E:\DrWeb\dwn44401.vdb - 698 virus records
[Virus database] E:\DrWeb\drwrisky.vdb - 2747 virus records
[Virus database] E:\DrWeb\drwnasty.vdb - 13534 virus records
Total virus records: 300601
Key file: E:\DrWeb\drwdemo.key
License key number: 0010092936
Registered to: Dr.Web CureIt Project
License key activates on: 2007-02-05
License key expires on: 2010-02-11
Master Boot Record HDD1 - Ok
Active OS/2 or WinNT Boot Sector HDD1 - Ok

[Scan path] G:\v\svcoss.exe
>>G:\v\svcoss.exe infected with Trojan.PWS.Gamania.origin
G:\v\svcoss.exe:Zone.Identifier - Ok

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 4
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Cured: 0
Deleted: 0
Renamed: 0
Moved: 0
Ignored: 0
Scan speed: 24 Kb/s
Scan time: 00:00:00
-----------------------------------------------------------------------------

G:\v\svcoss.exe - deleted

=============================================================================
Total session statistics
=============================================================================
Objects scanned: 4
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Cured: 0
Deleted: 1
Renamed: 0
Moved: 0
Ignored: 0
Scan speed: 24 Kb/s
Scan time: 00:00:00
=============================================================================

tsiliang

这种网址也太明显了

tracydk

无尽藏海

F:\virus\svcoss.exe - probably a variant of Win32/Genetik trojan

冷冷

IK
I:\virus\svcoss.exe - Signature 'Trojan-Spy.Win32.Delf.PG' found

        1 File scanned
          (0 Archives with 0 files)
        1 Signature found
        0 Suspect code-parts found
        Used time: 0:00.188

dikex

还有个vip.js呢

Log is generated by FreShow.
    [script]http://tv.mymtv335.cn/vip.js
        [frame]http://tv.mymtv335.cn/real.gif
            [object]http://tv.mymtv335.cn/svcoss.exe
        [frame]http://tv.mymtv335.cn/xpkk.gif
            [object]http://tv.mymtv335.cn/svcoss.exe
        [frame]http://tv.mymtv335.cn/baidu.gif
            [object]http://tv.mymtv335.cn/svcoss.cab
        [frame]http://tv.mymtv335.cn/tok.gif
            [object]http://tv.mymtv335.cn/svcoss.exe
        [frame]http://tv.mymtv335.cn/xplz.gif
            [object]http://tv.mymtv335.cn/svcoss.exe
        [frame]http://tv.mymtv335.cn/xpbf.gif
            [object]http://tv.mymtv335.cn/svcoss.exe