网马

1993yixin

上毒网抓的

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Mnless.xr
病毒： Trojan.DL.Script.VBS.Agent.xod
病毒： Trojan.DL.Win32.Mnless.rq

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.31.30

1.rar » RAR » Content.IE5\UE18RTR4\014[1].exe - Win32/TrojanDownloader.Agent.INE trojan - was a part of the deleted object
Content.IE5.rar » RAR » Content.IE5\83WRS7GV\bak[1].css - Win32/TrojanDownloader.Small.NZT trojan - was a part of the deleted object

hshhua01

Begin scan in 'D:\Movie\1.rar'
D:\Movie\1.rar
  [0] Archive type: RAR
  --> Content.IE5\6V9TP2CB\new301[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/IFrame.FA.1
  --> Content.IE5\UE18RTR4\014[1].exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
Begin scan in 'D:\Movie\Content.IE5.rar'
D:\Movie\Content.IE5.rar
  [0] Archive type: RAR
  --> Content.IE5\UE18RTR4\g15[1].htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Psyme.XB
  --> Content.IE5\UE18RTR4\g14[1].htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Psyme.XB
  --> Content.IE5\K9CFUX2R\dm[1].htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Agent.bdh
  --> Content.IE5\83WRS7GV\bak[1].css
      [DETECTION] Is the Trojan horse TR/Drop.Agent.8848
      [WARNING]   The file was ignored!

wangjay1980

detected: malware Exploit.JS.RealPlr.cp        URL: http://bbs.kafan.cn/attachment.p ... ent.IE5/UE18RTR4/rl[1].htm
detected: Trojan program Trojan-Downloader.Win32.Agent.ine        URL: http://bbs.kafan.cn/attachment.p ... nt.IE5/UE18RTR4/014[1].exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.JS.Agent.bhq        URL: http://bbs.kafan.cn/attachment.p ... ent.IE5/83WRS7GV/11[1].js
detected: Trojan program Trojan-Downloader.JS.Psyme.ym        URL: http://bbs.kafan.cn/attachment.p ... nt.IE5/UE18RTR4/g15[1].htm
detected: Trojan program Trojan-Downloader.JS.Psyme.ym        URL: http://bbs.kafan.cn/attachment.p ... nt.IE5/UE18RTR4/g14[1].htm
detected: Trojan program Trojan-Downloader.JS.ActiveX.s        URL: http://bbs.kafan.cn/attachment.p ... ent.IE5/K9CFUX2R/dm[1].htm
detected: Trojan program Trojan-Downloader.Win32.Small.hsh        URL: http://bbs.kafan.cn/attachment.p ... nt.IE5/83WRS7GV/bak[1].css//PE_Patch.UPX//UPX

zzh161

http://dd.749571.com/bb/newrl.exe
http://ccc.969222.com/bak.css
http://dd.749571.com/bb/014.exe
随便看了几个

woai_jolin

Scan Log
Version of virus signature database: 2878 (20080215)
Date: 2008/2/15  Time: 22:32:47
Scanned disks, folders and files: G:\v\1.rar;G:\v\Content.IE5.rar
G:\v\1.rar » RAR » Content.IE5\index.dat - is OK
G:\v\1.rar » RAR » Content.IE5\6V9TP2CB\wpad[2].htm - is OK
G:\v\1.rar » RAR » Content.IE5\6V9TP2CB\wpad[1].htm - is OK
G:\v\1.rar » RAR » Content.IE5\6V9TP2CB\btchina[1].htm - is OK
G:\v\1.rar » RAR » Content.IE5\6V9TP2CB\homebg_01[1].jpg - is OK
G:\v\1.rar » RAR » Content.IE5\6V9TP2CB\new301[1].htm - is OK
G:\v\1.rar » RAR » Content.IE5\6V9TP2CB\go[1].htm - is OK
G:\v\1.rar » RAR » Content.IE5\6V9TP2CB\sa[1].htm - is OK
G:\v\1.rar » RAR » Content.IE5\UE18RTR4\style[2].css - is OK
G:\v\1.rar » RAR » Content.IE5\UE18RTR4\click[2].htm - is OK
G:\v\1.rar » RAR » Content.IE5\UE18RTR4\rl[1].htm - is OK
G:\v\1.rar » RAR » Content.IE5\UE18RTR4\diao[1].htm - is OK
G:\v\1.rar » RAR » Content.IE5\UE18RTR4\014[1].exe - Win32/TrojanDownloader.Agent.INE trojan - was a part of the deleted object
G:\v\1.rar » RAR » Content.IE5\K9CFUX2R\flash[1].js - is OK
G:\v\1.rar » RAR » Content.IE5\K9CFUX2R\1299644[1].js - is OK
G:\v\1.rar » RAR » Content.IE5\K9CFUX2R\rr[1].htm - is OK
G:\v\1.rar » RAR » Content.IE5\K9CFUX2R\count5[1].gif - is OK
G:\v\1.rar » RAR » Content.IE5\83WRS7GV\homebg_04[1].jpg - is OK
G:\v\1.rar » RAR » Content.IE5\83WRS7GV\homebg_08[1].jpg - is OK
G:\v\1.rar » RAR » Content.IE5\83WRS7GV\sa[1].aspx - is OK
G:\v\1.rar » RAR » Content.IE5\83WRS7GV\11[1].js - is OK
G:\v\1.rar » RAR » Content.IE5\83WRS7GV\CA3GE2IO.HTM - is OK
G:\v\Content.IE5.rar » RAR » Content.IE5\index.dat - is OK
G:\v\Content.IE5.rar » RAR » Content.IE5\6V9TP2CB\wpad[2].htm - is OK
G:\v\Content.IE5.rar » RAR » Content.IE5\6V9TP2CB\wpad[1].htm - is OK
G:\v\Content.IE5.rar » RAR » Content.IE5\6V9TP2CB\error[1].htm - is OK
G:\v\Content.IE5.rar » RAR » Content.IE5\6V9TP2CB\11[1].js - is OK
G:\v\Content.IE5.rar » RAR » Content.IE5\UE18RTR4\g15[1].htm - is OK
G:\v\Content.IE5.rar » RAR » Content.IE5\UE18RTR4\g14[1].htm - is OK
G:\v\Content.IE5.rar » RAR » Content.IE5\K9CFUX2R\dm[1].htm - is OK
G:\v\Content.IE5.rar » RAR » Content.IE5\83WRS7GV\bak[1].css - Win32/TrojanDownloader.Small.NZT trojan - was a part of the deleted object
Number of scanned objects: 33
Number of threats found: 2
Time of completion: 22:32:47  Total scanning time: 0 sec (00:00:00)

woai_jolin

Threat detected !   

Threat details:

   Web page:
   http://ccc.969222.com/bak.css

   Threat:
   Win32/TrojanDownloader.Small.NZT trojan

   Comment:
   Access to the web page was blocked by ESET Smart Security.

woai_jolin

Threat details:

   Web page:
   http://dd.749571.com/bb/newrl.exe

   Threat:
   Win32/TrojanDownloader.Agent.INE trojan

   Comment:
   Access to the web page was blocked by ESET Smart Security.

woai_jolin

Threat details:

   Web page:
   http://dd.749571.com/bb/014.exe

   Threat:
   Win32/TrojanDownloader.Agent.INE trojan

   Comment:
   Access to the web page was blocked by ESET Smart Security.