1

tonger2003

http://www.ccppp.org/

solcroft

http://xia.qisihuisheng.net/mm/014s.exe

Starting the file scan:

Begin scan in 'E:\014s.exe'
E:\014s.exe
      [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
      [INFO]      The file was deleted!

The file 'new.htm' has been determined to be 'MALWARE'. Our analysts discovered that the file contains malicious HTML script code. Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 Exia 于 2008-4-2 16:45 编辑 ]

啊弥陀佛

微点砍掉

无尽藏海

E:\VIRUS\014s.exe - Win32/TrojanDownloader.Agent.NWE 特洛伊木马

aerbeisi

[Found possible security risk]         <W32/Heuristic-114!Eldorado (damaged, not disinfectable)>        C:\test\014s.exe->(NSPack)->(PE_Patch)

virax

detected small.ssr

挪威的冬天

病毒        2008-04-02  17:59:45        病毒在文件D:\Desktop\014s.exe中        Win32.Troj.AiT.dg.2564        处理成功（操作：删除）

qigang

Log is generated by FreShow.
[wide]http://www.ccppp.org/
    [script]http://www.ccppp.org/JS/Js.js
    [script]http://www.ccppp.org/yhcc/count.js
        [script]http://www.ccppp.org/yhcc/"+url+"/count.asp?referer="+escape(document.referrer)+"&Width="+escape(screen.width)+"&Height="+escape(screen.height)+"
    [script]http://www.ccppp.org/Scripts/AC_RunActiveContent.js
    [frame]http://wb.shijiediyi.net/one/hao8.htm?024
        [frame]http://wb.shijiediyi.net/wm/new.htm
            [object]http://xia.qisihuisheng.net/mm/new.cab
            [script]http://web.shijiediyi.net/wm/014s.js
                [object]http://xia.qisihuisheng.net/mm/014s.exe
            [script]http://web.shijiediyi.net/wm/rll.js
                [object]http://xia.qisihuisheng.net/mm/rll.exe
            [frame]http://web.shijiediyi.net/wm/og.htm
                [object]http://xia.qisihuisheng.net/mm/ogame.exe
        [script]http://js.users.51.la/1724160.js

14206937

红伞狂叫