铸学网被插入恶意代码

显示全部楼层 · 发表于 2008-4-24 14:15:25

消息转自：知道安全
地址：hxxp://www.51zhuxue.com

Log is generated by FreShow.
[wide]http://www.51zhuxue.com/
[frame]http://www.666550.net/1.htm?10
      [frame]http://www.666550.net/news.html
         [frame]http://66.66666123.net/Ajax.htm
            [object]http://www.ckabc.net/0.exe
         [frame]http://66.66666123.net/Ms06014.htm
            [object]http://www.ckabc.net/0.exe
         [script]http://66.66666123.net/Real.gif
            [object]http://www.ckabc.net/0.exe
         [frame]http://66.66666123.net/Bfyy.htm
            [object]http://www.ckabc.net/0.exe
         [frame]http://66.66666123.net/Lz.htm
            [object]http://www.ckabc.net/0.exe
         [frame]http://66.66666123.net/XunLei.htm
            [object]http://www.ckabc.net/0.exe

Starting the file scan:
Begin scan in 'C:\Documents and Settings\Administrator\桌面\0.rar'
C:\Documents and Settings\Administrator\桌面\0.rar
[WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-4-24 14:20:34

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\0.exe'
E:\新建文件夹 (2)\0.exe
[DETECTION] Is the Trojan horse TR/Spy.Gen
[NOTE] The file was deleted!

显示全部楼层 · 发表于 2008-4-24 14:21:03

信息 2008-04-24  14:20:56 您此次查毒隔离了1个文件
信息 2008-04-24  14:20:56 您此次查毒共查出1个病毒以及危险代码
信息 2008-04-24  14:20:56 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件3个
信息 2008-04-24  14:20:56 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-04-24  14:20:56 D:\Desktop\0.rar\0.exe Win32.Troj.KillAvT.ef.69632 隔离成功

显示全部楼层 · 发表于 2008-4-24 14:41:13

E:\病毒\0.rar > RAR > 0.exe - 可能是 Win32/TrojanDownloader.Agent.NXA 特洛伊木马的变种

显示全部楼层 · 发表于 2008-4-24 14:47:46

[Found security risk] <W32/OnlineGames.H.gen!Eldorado (not disinfectable, generic)> C:\test\0.rar->0.exe

显示全部楼层 · 发表于 2008-4-24 14:49:03

怎么还没有换新的

显示全部楼层 · 发表于 2008-4-24 15:13:51

木马名称:Trojan.Win32.KillAV.ko

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-4-24 15:15:54

又是这个[object]http://www.ckabc.net/0.exe,寿命真长

显示全部楼层 · 发表于 2008-4-24 18:16:44

显示全部楼层 · 发表于 2008-4-24 18:20:10

24:04:2008 18:17:32 SEARCHTASK "USER_DEFINED" started...
scan item: E:\VIRUS\0.rar
File scanned: E:\VIRUS\0.rar - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob"
24:04:2008 18:17:32 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 0
Files scanned: 1
Virus found: 1
----------------------------------------------------

[已鉴定] 铸学网被插入恶意代码

IK