恶意站点

显示全部楼层 · 发表于 2008-4-27 17:57:18

http://diary.gxcnc.net

显示全部楼层 · 发表于 2008-4-27 18:06:06

显示全部楼层 · 发表于 2008-4-27 18:06:14

Log is generated by FreShow.
[wide]http://diary.gxcnc.net/
[frame]http://cc.buhaoyishi.com/one/hao2.htm?668
      [frame]http://cc.buhaoyishi.com/wmwm/new.htm
         [object]http://dd.buhaoyishi.com/mmuu/abd.cab
         [script]http://cc.buhaoyishi.com/wmwm/a014.js
            [object]http://dd.buhaoyishi.com/mmuu/a014.exe
         [script]http://cc.buhaoyishi.com/wmwm/arl.js
            [object]http://dd.buhaoyishi.com/mmuu/arl.exe
         [script]http://cc.buhaoyishi.com/wmwm/abf.js
            [object]http://dd.buhaoyishi.com/mmuu/abf.exe
         [frame]http://cc.buhaoyishi.com/wmwm/alz.htm
            [object]http://dd.buhaoyishi.com/mmuu/alz.exe

78130ddb1efc86b332c1028681398cf9 a014.exe
78130ddb1efc86b332c1028681398cf9 abf.exe
78130ddb1efc86b332c1028681398cf9 arl.exe
78130ddb1efc86b332c1028681398cf9 alz.exe
78130ddb1efc86b332c1028681398cf9 abd.exe

[ 本帖最后由 tanlimo 于 2008-4-27 18:12 编辑 ]

显示全部楼层 · 发表于 2008-4-27 18:10:39

Starting the file scan:

Begin scan in 'E:\AV\abd.cab'
E:\AV\abd.cab
  [0] Archive type: CAB (Microsoft)
--> abd.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\a014.exe'
E:\AV\a014.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\arl.exe'
E:\AV\arl.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\abf.exe'
E:\AV\abf.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\alz.exe'
E:\AV\alz.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-4-27 19:37:02

显示全部楼层 · 发表于 2008-4-27 21:40:48

老毒物，不更新！

http://dd.buhaoyishi.com/mmuu/abd.cab

http://dd.buhaoyishi.com/mmuu/a014.exe

[病毒样本] 恶意站点

本帖子中包含更多资源

本帖子中包含更多资源