来2只马

小飞侠.net

来2只马

C:\Documents and Settings\小飞侠.net\桌面\410\004.rar>>004\news1[1].htm        JS.Decoder.af        病毒        还未处理
C:\Documents and Settings\小飞侠.net\桌面\410\005.rar>>005\news1[1].htm        JS.Decoder.af        病毒        还未处理
C:\Documents and Settings\小飞侠.net\桌面\410\006.rar>>006\news1[1].htm        JS.Decoder.af        病毒        还未处理
C:\Documents and Settings\小飞侠.net\桌面\410\001.rar>>001\14[1].htm        Script.HttpDownloader.i        病毒        还未处理
C:\Documents and Settings\小飞侠.net\桌面\410\002.rar>>002\14[1].htm        Script.HttpDownloader.i        病毒        还未处理
C:\Documents and Settings\小飞侠.net\桌面\410\003.rar>>003\14[1].htm        Script.HttpDownloader.i        病毒        还未处理

mofunzone

只有3个

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\410.rar'
C:\Documents and Settings\Administrator\My Documents\
  410.rar
    [0] Archive type: RAR
      --> 001.rar
        [1] Archive type: RAR
        --> 001\14[1].htm
            [DETECTION] Contains detection pattern of the HTML script virus HTML/Rce.Gen
            [WARNING]   Infected files in archives cannot be repaired!
      --> 002.rar
        [1] Archive type: RAR
        --> 002\14[1].htm
            [DETECTION] Contains detection pattern of the HTML script virus HTML/Rce.Gen
            [WARNING]   Infected files in archives cannot be repaired!
      --> 003.rar
        [1] Archive type: RAR
        --> 003\14[1].htm
            [DETECTION] Contains detection pattern of the HTML script virus HTML/Rce.Gen
            [WARNING]   Infected files in archives cannot be repaired!
      --> 004.rar
        [1] Archive type: RAR
        --> 004\news1[1].htm
      --> 005.rar
        [1] Archive type: RAR
        --> 005\news1[1].htm
      --> 006.rar
        [1] Archive type: RAR
        --> 006\news1[1].htm
      [WARNING]   The file was ignored!
  410.rar:Zone.Identifier


End of the scan: 2008年3月20日  15:08
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
     14 Files were scanned
      3 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     11 Files not concerned
      7 Archives were scanned
      4 Warnings
      0 Notes

傻猪猪米走鸡

D:\firefox download\410.rar » RAR » 001.rar » RAR » 001\14[1].htm - is OK
D:\firefox download\410.rar » RAR » 002.rar » RAR » 002\14[1].htm - is OK
D:\firefox download\410.rar » RAR » 003.rar » RAR » 003\14[1].htm - is OK
D:\firefox download\410.rar » RAR » 004.rar » RAR » 004\news1[1].htm - is OK
D:\firefox download\410.rar » RAR » 005.rar » RAR » 005\news1[1].htm - is OK
D:\firefox download\410.rar » RAR » 006.rar » RAR » 006\news1[1].htm - is OK
D:\firefox download\410.rar:Zone.Identifier - is OK

啊弥陀佛

http://1.9797aiai.com/mm/mm.exe

微点砍掉

Starting the file scan:

Begin scan in 'D:\mm.exe'
D:\mm.exe
      [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
      [INFO]      The file was deleted!

gaojun7206

啊啊，LZ用的费尔吧

小飞侠.net

Hello,

14[1].htm, 14[1].htm, 14[1].htm - Trojan-Downloader.VBS.Agent.ky,
news1[1].htm, news1[1].htm, news1[1].htm - Trojan-Clicker.HTML.IFrame.le

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.

leonfg

2008-03-21 12:24:18        HTTP filter        file        http://1.9797aiai.com/mm/mm.exe        Win32/TrojanDownloader.Agent.NWE trojan        connection terminated - quarantined        CHINESE-GUNDAM\GUNDAM        Threat was detected upon access to web by the application: C:\Program Files\Mozilla Firefox\firefox.exe.

冷冷

有重复
只有两个
14[1].htm
htp://1.9797aiai.com/mm/mm.exe

==========
IK
I:\virus\virus.rar:\mm.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
I:\virus\virus.rar:\ntuser.com - Signature 'Trojan-Downloader.Win32.Zlob' found
I:\virus\virus.rar
3 Files scanned
   (1 Archiv with 2 files)
2 Signatures found
0 Suspect code-parts found
Used time: 0:00.032

[ 本帖最后由 冷冷 于 2008-3-21 12:33 编辑 ]

长空之鹰

SEP无声息的飘