ITECN.net被挂马，大家小心

qigang

原帖由 曲中求 于 2008-3-31 18:23 发表
E:\病毒\la.rar>>la.exe        Trojan.Cap822819.oync        木马        还未处理

Log is generated by FreShow.
[wide]http://blogs.itecn.net/blogs/default.aspx
    [script]http://blogs.itecn.net/Utility/global.js?Version=2.1.61120.2
    [script]http://blogs.itecn.net/Utility/telligent_web_ui/1_0_3/Telligent_Modal.js
    [script]http://blogs.itecn.net/utility/ratingcontrol.js



没有了吧。这么老的帖子还顶？

[ 本帖最后由 qigang 于 2008-3-31 20:49 编辑 ]

leonfg

原帖由 tanlimo 于 2008-3-1 12:35 发表
http://xxx.huilaiba.info/ww/la.exe

ESS扫描日志
病毒库版本: 2913 (20080301)
日期: 2008-3-1  时间: 12:40:49
已扫描的磁盘、文件夹和文件: D:\Documents and Settings\xxxxxxxx\桌面\la.exe
已扫描的对象 ...

??
更新啦？
C:\Documents and Settings\GUNDAM\桌面\la.rar » RAR » la.exe - Win32/TrojanDownloader.Agent.NWD trojan

Starting the file scan:

Begin scan in 'D:\la.rar'
D:\la.rar
  [0] Archive type: RAR
  --> la.exe
      [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
      [INFO]      The file was deleted!
Begin scan in 'D:\Data01.rar'
D:\Data01.rar
  [0] Archive type: RAR
  --> 1128.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 1129.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 1130.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.17014
  --> 1131.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 1132.exe
      [DETECTION] Is the Trojan horse TR/BHO.aya.1
  --> 1133.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 1134.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLin.8918.A
  --> 1111.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.djg.2
  --> 1112.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.qnq.1
  --> 1113.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.393
  --> 1114.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
  --> 1115.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLin.8918.A
  --> 1116.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rti.7
  --> 1117.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.6
  --> 1118.exe
      [DETECTION] Is the Trojan horse TR/Onlinegames.rxt
  --> 1119.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.11
  --> 1120.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.15
  --> 1121.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.13
  --> 1122.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh
  --> 1123.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 1124.exe
      [DETECTION] Is the Trojan horse TR/BHO.aya.1
  --> 1125.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.seu.6
  --> 1126.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.seu.4
  --> 1127.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!


End of the scan: 2008年3月31日  22:19
Used time: 00:52 min

The scan has been done completely.

      0 Scanning directories
     27 Files were scanned
     25 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      2 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes