红伞报EXP/RealPlay.Z和HTML/ADODB.Exploit.Gen

冷冷

IK
I:\virus\virus1.rar:\xx.exe - Suspect code-parts found (Level: 85)
I:\virus\virus1.rar

        2 Files scanned
          (1 Archiv with 1 file)
        0 Signatures found
        1 Suspect code-part found
        Used time: 0:00.032

下载者
126:htp://baidu1633.com/admin/xx.exe  能下载
126:htp://61.191.55.216/admin2/0.exe
126:htp://61.191.55.216/admin2/1.exe  能下载
126:htp://61.191.55.216/admin2/2.exe
126:htp://61.191.55.216/admin2/3.exe
126:htp://61.191.55.216/admin2/4.exe
126:htp://61.191.55.216/admin2/5.exe
126:htp://61.191.55.216/admin2/6.exe
126:htp://61.191.55.216/admin2/7.exe
126:htp://61.191.55.216/admin2/8.exe
126:htp://61.191.55.216/admin2/9.exe
126:htp://61.191.55.216/admin2/91.exe
126:htp://61.191.55.216/admin2/92.exe
126:htp://61.191.55.216/admin2/93.exe
126:htp://61.191.55.216/admin2/94.exe
126:htp://61.191.55.216/admin2/95.exe

[ 本帖最后由 冷_冷 于 2008-2-11 00:50 编辑 ]

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus1.rar'
C:\Documents and Settings\Administrator\桌面\virus1.rar
  [0] Archive type: RAR
  --> xx.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.qpe.1
      [INFO]      The file was deleted!

Graybird

Starting the file scan:

Begin scan in 'E:\virus\1.exe'
E:\virus\1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.ink
      [INFO]      The file was deleted!

hj5abc

监控竟然没报 扫描报了.


Sign of "Win32:Delf-HSQ [Trj]" has been found in "F:\1.exe\[Upack]\[Embedded#L01]\[UPX]" file.

btming

卡巴报了  什么病毒来的

2008-2-13 20:24:18 恶意的 HTTP 对象 <http://baidu1633.com/002.htm>: 已检测到危险软件 'Exploit.JS.RealPlr.af'。