功夫IP被挂。。

lsyer

ht  tp://www.kongfuip.cn
还是计较丰富的
速度。。。

zzh161

hxxp://88.881215.com/88.htm
hxxp://88.881215.com/in.htm
       hxxp://niu.xinniankl.com/web/6619038.htm  --->老东西
hxxp://sf.070808.net/s.htm
       hxxp://pagead2.googlesynidication.com/feng.htm
              hxxp://pagead2.googlesynidication.com/wm/g15.htm --->hxxp://ccc.969222.com/bak.css
              hxxp://pagead2.googlesynidication.com/wm/dm.htm
                     hxxp://pagead2.googlesynidication.com/wm/11.js
                            hxxp://pagead2.googlesynidication.com/wm/g14.htm --->hxxp://ccc.969222.com/bak.css
                     hxxp://pagead2.googlesynidication.com/wm/re.htm  --->hxxp://ccc.969222.com/bak.css
                     hxxp://pagead2.googlesynidication.com/wm/storm.htm  --->hxxp://ccc.969222.com/bak.css
                     hxxp://pagead2.googlesynidication.com/wm/wo.htm  --->hxxp://ccc.969222.com/bak.css
                     hxxp://down.hao365.org/Baidu.cab
hxxp://ga.mm5208.com/g.htm
       hxxp://086196.service-google.cn/vip/Cn51903.htm --->老东西
hxxp://ww.uuzzvv.com/m.htm
       hxxp://ppp.buyaoni.com/ww/new301.htm?041  --->老东西
hxxp://a1.sbb22.com/a.htm
       hxxp://aaa.fenliu002.info/dgll2.htm?2
              hxxp://aaa.fenliu002.info/ceshi/real.htm  --->hxxp://xxx.wofala.info/ww/la.exe
              hxxp://aaa.fenliu002.info/ceshi/lz.htm
                     hxxp://aaa.fenliu002.info/ceshi/lz1.htm  --->hxxp://xxx.wofala.info/ww/la.exe
              hxxp://aaa.fenliu002.info/ceshi/614.htm  --->hxxp://xxx.wofala.info/ww/la.exe

[ 本帖最后由 zzh161 于 2008-2-19 16:43 编辑 ]

zwl2828

Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen

lsyer

。。。。。
88.htm先拿下来
免的过会没有了。。。
大家玩吧。。。

lsyer

原帖由 zzh161 于 2008-2-19 16:28 发表
http://88.881215.com/88.htm

恩
知道
但是一层一层找下去找到很多
到最后不会解了。。。。


[ 本帖最后由 lsyer 于 2008-2-19 16:31 编辑 ]

llgiggs

沒啥新意 都是熟臉兒

Graybird

Starting the file scan:

Begin scan in 'E:\Antivir\bak.css'
E:\Antivir\bak.css
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\Baidu.cab'
E:\Antivir\Baidu.cab
  [0] Archive type: CAB (Microsoft)
  --> baidu.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.8848
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\la.exe'
E:\Antivir\la.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!

tanlimo

太多了，而且差不多都是老东西，所以就随便抓了几个。

http://exe.xinniankl.com/014.exe
http://exe.xinniankl.com/bf.exe
http://exe.xinniankl.com/pps.exe
http://exe.xinniankl.com/lz.exe
http://ccc.969222.com/bak.css
http://www.ip580.com/down.exe
http://down.hao365.org/bak.css
http://down.hao365.org/Baidu.cab
http://xxx.wofala.info/ww/la.exe

[ 本帖最后由 tanlimo 于 2008-2-19 17:12 编辑 ]

Graybird

Starting the file scan:

Begin scan in 'E:\Antivir\123.rar'
E:\Antivir\123.rar
  [0] Archive type: RAR
  --> bak2.css
      [DETECTION] Is the Trojan horse TR/Drop.Agent.8848
    --> Baidu.cab
      [1] Archive type: CAB (Microsoft)
      --> baidu.exe
          [DETECTION] Is the Trojan horse TR/Drop.Agent.8848
  --> la.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 014.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
  --> bf.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
  --> pps.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
  --> lz.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
  --> bak.css
      [DETECTION] Is the Trojan horse TR/Drop.Agent.8848
  --> down.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.8848
      [INFO]      The file was deleted!

Joker

9
deleted: Trojan program Trojan-Downloader.Win32.Small.hsh        File: C:\Documents and Settings\Administrator\×ÀÃæ\123.rar/bak2.css//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-Downloader.Win32.Small.hsh        File: C:\Documents and Settings\Administrator\×ÀÃæ\123.rar/Baidu.cab/baidu.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-Downloader.Win32.Agent.jdm        File: C:\Documents and Settings\Administrator\×ÀÃæ\123.rar/la.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ode        File: C:\Documents and Settings\Administrator\×ÀÃæ\123.rar/014.exe//NSPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ode        File: C:\Documents and Settings\Administrator\×ÀÃæ\123.rar/bf.exe//NSPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ode        File: C:\Documents and Settings\Administrator\×ÀÃæ\123.rar/pps.exe//NSPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ode        File: C:\Documents and Settings\Administrator\×ÀÃæ\123.rar/lz.exe//NSPack
deleted: Trojan program Trojan-Downloader.Win32.Small.hsh        File: C:\Documents and Settings\Administrator\×ÀÃæ\123.rar/bak.css//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-Downloader.Win32.Small.hsh        File: C:\Documents and Settings\Administrator\×ÀÃæ\123.rar/down.exe//PE_Patch.UPX//UPX