某毒网的病毒包，真毒~~

5551551

引用：

编辑  删除  奖励金币  引用  举报1楼 [求助]上联众就出现相同的顽固病毒 发表于 2008-04-06 07:44 刚装系统后,每次上联众都要出现下列带顽固病毒的网址,http://www.lidoofree.cn/free.asp?uid=1然后就死机,我装的最新诺顿杀毒软件,每次都升级,360安全卫士每天也升级,可这种病毒随时都进来,呼救解决方法,谢谢!

zwl2828

C:\Users\Wesley\Downloads\毒网放的病毒包\main[1].htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Agent.ZY

aerbeisi

[Found downloader]  <JS/Psyme.DP (exact, not disinfectable)> C:\test\毒网放的病毒包.rar->1[1].htm
[Found Trojan]  <JS/Xunlei.A (exact, not disinfectable)> C:\test\毒网放的病毒包.rar->6[1].htm
[Found exploit]  <HTML/IFrame (exact, not disinfectable)> C:\test\毒网放的病毒包.rar->kew75[1].htm

Ceker

  No

qianwenxiang

指向以下页面，haole555.cn域名失效，xinniankl.com访问超时。
http://www.haole555.cn/Ms06014.js
http://www.haole555.cn/Lz.htm
http://www.haole555.cn/StormII.htm
http://www.haole555.cn/Xunlei.htm
http://www.haole555.cn/pps.js
http://www.haole555.cn/newReal.htm
http://www.haole555.cn/Real.htm
http://u.cncz.us/d/ad.cab
http://www.haole555.cn/1.g if
http://www.haole555.cn/7.g if
http://www.haole555.cn/2.g if
http://www.haole555.cn/3.g if
http://www.haole555.cn/4.g if
http://www.haole555.cn/5.g if
http://www.haole555.cn/6.g if
http://exe.xinniankl.com/pps.exe
http://u3.cncz.us/d/614.exe
http://u.cncz.us/d/xl.exe

zzrs

这是什么？

lxdwwei

网马  加密了

aerbeisi

[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\xl.rar->xl.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\xl.rar->614.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\xl.rar->ad.cab->ad.exe->(UPack)

马力

驱逐舰不杀

woai_jolin

Scan Log
Version of virus signature database: 3005 (20080406)
Date: 2008/4/6  Time: 11:57:55
Scanned disks, folders and files: G:\v\xl.rar
G:\v\xl.rar &raquo; RAR &raquo; xl.exe - Win32/TrojanDownloader.Small.NZS trojan - was a part of the deleted object
G:\v\xl.rar &raquo; RAR &raquo; 614.exe - Win32/TrojanDownloader.Small.NZS trojan - was a part of the deleted object
G:\v\xl.rar &raquo; RAR &raquo; ad.cab &raquo; CAB &raquo; ad.exe - Win32/TrojanDownloader.Small.NZS trojan - was a part of the deleted object
Number of scanned objects: 5
Number of threats found: 3
Number of cleaned objects: 3
Time of completion: 11:57:55  Total scanning time: 0 sec (00:00:00)