挂马

显示全部楼层 · 发表于 2008-2-22 18:00:10

显示全部楼层 · 发表于 2008-2-22 18:09:17

http://iii.chsip.net/down.exe

显示全部楼层 · 发表于 2008-2-22 18:31:00

[wide]http://www.ilovetoptown.com/
[frame]http://www.t-tou.cn/klyb.html
      [frame]http://xxx.hao1680.com/tong.htm?001
         [script]http://xxx.llsj123.com/wm/rl.js
            [object] http://iii.chsip.net/cat.exe
         [frame]http://xxx.llsj123.com/wm/jh.htm
            [script]http://ppp.chsip.net/wm/11.js
                  [object] http://iii.chsip.net/down.exe
            [script]http://ppp.chsip.net/wm/bb.js
                  [object] http://iii.chsip.net/down.exe
            [script]http://ppp.chsip.net/wm/ppp.js
                  [object] http://iii.chsip.net/down.exe
            [script]http://ppp.chsip.net/wm/lz.js
                  [object] http://qqq.521town.com/down.exe

显示全部楼层 · 发表于 2008-2-22 18:33:17

都是一样的

显示全部楼层 · 发表于 2008-2-22 18:43:26

BD飘

显示全部楼层 · 发表于 2008-2-22 18:45:24

ZAAV Trojan-Downloader.Win32.Delf.epw

显示全部楼层 · 发表于 2008-2-22 18:45:26

的确给挂马了

费尔报了

显示全部楼层 · 发表于 2008-2-22 19:02:04

Begin scan in 'C:\Documents and Settings\haha\桌面\cat.rar'
C:\Documents and Settings\haha\桌面\cat.rar
  [0] Archive type: RAR
  --> cat.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
   [INFO]    A backup was created as '4832ac14.qua'  ( QUARANTINE )

显示全部楼层 · 发表于 2008-2-22 19:03:36

来晚了

木马名称:Trojan-Downloader.Win32.Delf.iyd

程序:
D:\DOCUMENTS AND SETTINGS\xxxxxxxx\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\GHEFKLMN\DOWN[1].EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-2-22 19:33:30

k

老点

[病毒样本] 挂马

本帖子中包含更多资源

回复 4楼 rappar 的帖子

本帖子中包含更多资源