大面积挂马网站

显示全部楼层 · 发表于 2008-4-3 17:59:20

http://1.hao929.cn/2/100.htm

中毒后会下载这个表但不知道这是毒还是用什么加密的东西请高人解释下dow2.boyxx.us／xxx.txt

[ 本帖最后由 2879185 于 2008-4-3 18:29 编辑 ]

显示全部楼层 · 发表于 2008-4-3 18:01:56

http://a.hao929.cn/2/2.exe
http://vvv.123sky.biz/107/107.exe

显示全部楼层 · 发表于 2008-4-3 18:05:24

显示全部楼层 · 发表于 2008-4-3 18:05:49

Starting the file scan:

Begin scan in 'E:\2.exe'
E:\2.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.flg
   [INFO]    The file was deleted!
Begin scan in 'E:\107.exe'
E:\107.exe
   [DETECTION] Contains detection pattern of the Windows virus W32/Autorun.BK
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-4-3 18:08:09

。。。。。。。也不少

显示全部楼层 · 发表于 2008-4-3 18:09:42

不是

不过运行后下载很多毒
不晓得是否你说的那个

[ 本帖最后由冷冷于 2008-4-3 18:13 编辑 ]

显示全部楼层 · 发表于 2008-4-3 18:13:34

能否成功入侵电脑关键就靠这两个东西。

显示全部楼层 · 发表于 2008-4-3 18:24:05

IE7如果不加载控件，什么事都没发生。

显示全部楼层 · 发表于 2008-4-3 18:24:50

运行107后马就放进来了

20+
去掉跟以前重复的
剩下21[:26:]

显示全部楼层 · 发表于 2008-4-3 18:26:39

Begin scan in 'C:\Documents and Settings\haha\桌面\virus.rar'
C:\Documents and Settings\haha\桌面\virus.rar
  [0] Archive type: RAR
  --> 25a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.xjn.2
  --> 26a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 27a[1].exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 28a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.yip.3
  --> 29a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.dft
  --> 30a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 3a[1].exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 5a[1].exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 8a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 11a[1].exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.12495
  --> 13a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 15a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 16a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.QQpass.bmw
  --> 17a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.624
  --> 18a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 19a[1].exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 20a[1].exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 21a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> 23a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.yrq
  --> 24a[1].exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uff.3
   [INFO]    A backup was created as '4866b16e.qua'  ( QUARANTINE )

End of the scan: 2008年4月3日  18:27
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   23 Files were scanned
   20 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

[已鉴定] 大面积挂马网站

回复 3楼 tanlimo 的帖子