一个病毒木马网站www.china-meet.cn

zfs_007

大家可以试试。
我前面用过KAV 7.0,卡巴能发现并杀毒，但是电脑能卡死，很郁闷。
换成小红伞，也是能发现，deny access一样的电脑卡死
但是好在结束浏览器任务后问题解决了。

冷冷

应该是这些

1. http://js.users.51.la/1776286.js
   
2. http://js.users.51.la/1660620.js
   
3. http://wf.uuzzvv.com/m.htm
   
4. http://ca.winvv.com/ie.htm
   
5. http://js.users.51.la/1724160.js
   
6. http://js.users.51.la/1153797.js
   
7. http://w.gan360.com/web/014.js
   
8. http://ca.winvv.com/cn.htm
   
9. http://cc.haowangma.com/one/huai5.htm
   
10. http://b.s102-cnzz.com/0014.exe
    
11. http://w.cao360.com/w6.htm
    
12. http://js.tongji.yahoo.com.cn/i.gif
    
13. http://w.cao360.com/b0.htm
    
14. http://www.firefox-ads.cn/ad/14.htm
    
15. http://w.cao360.com/b2.htm
    
16. http://cc.haowangma.com/wmwm/a014.htm
    
17. http://cc.haowangma.com/wmwm/alz.htm
    
18. http://www.serversina.cn/qq.htm
    
19. http://www.serversina.cn/wm/Real.gif
    
20. http://www.serversina.cn/wm/Lz.htm
    
21. http://www.serversina.cn/wm/XunLei.htm
    
22. http://cc.haowangma.com/wmwm/new.htm
    
23. http://www.playunit.net/down.exe
    
24. http://www.serversina.cn/wm/Ajax.htm
    
25. http://www.serversina.cn/wm/Ms06014.htm
    
26. http://www.serversina.cn/main.htm
    
27. http://dd.tianxiayouzei.com/mmuu/a014.exe
    
28. http://www.sdfsd32323.com/web/htm.html
    
29. http://w.cao360.com/b1.htm
    
30. http://www.firefox-ads.cn/ad/vip.htm
    
31. http://b.s102-cnzz.com/0rl.exe
    
32. http://www.serversina.cn/wm/mm.exe
    
33. http://www.serversina.cn/b.gif
    
34. http://www.sdfsd32323.com/web/rl.htm
    
35. http://www.sdfsd32323.com/web/1.js
    
36. http://exe.wokaixin.com/014.exe
    

复制代码

sbbdms

mm.exe再次现身..

原帖由 冷冷 于 2008-5-4 17:14 发表
应该是这些
http://js.users.51.la/1776286.js
http://js.users.51.la/1660620.js
http://wf.uuzzvv.com/m.htm
http://ca.winvv.com/ie.htm
http://js.users.51.la/1724160.js
http://js.users.51.la/1153797. ...

Starting the file scan:
Begin scan in 'E:\AV\014.exe'
E:\AV\014.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\0014.exe'
E:\AV\0014.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\down.exe'
E:\AV\down.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\0rl.exe'
E:\AV\0rl.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\mm.exe'
E:\AV\mm.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
      [NOTE]      The file was deleted!

End of the scan: 2008年5月4日  17:35
Used time: 00:09 min
The scan has been done completely.
      0 Scanning directories
      5 Files were scanned
      5 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      5 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      5 Notes

残缺的唯美

D:\Documents and Settings\EKINCHENG\桌面\AV.rar » RAR » 0014.exe - probably a variant of Win32/TrojanDownloader.Small.OBJ trojan
D:\Documents and Settings\EKINCHENG\桌面\AV.rar » RAR » down.exe - probably a variant of Win32/Jalous worm
D:\Documents and Settings\EKINCHENG\桌面\AV.rar » RAR » 0rl.exe - probably a variant of Win32/TrojanDownloader.Small.OBJ trojan
D:\Documents and Settings\EKINCHENG\桌面\AV.rar » RAR » mm.exe - a variant of Win32/AutoRun.HZ worm
D:\Documents and Settings\EKINCHENG\桌面\AV.rar » RAR » 014.exe - Win32/TrojanDownloader.Delf.OBY trojan

啊弥陀佛

木马名称:Trojan-Downloader.Win32.Agent.rbz
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\AV\0014.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-Downloader.Win32.Agent.rbz
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\AV\0RL.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-Downloader.Win32.Delf.jca
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\AV\014.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\AV\DOWN.EXE
是否删除木马程序及其衍生物?

无尽藏海

Begin scan in 'E:\VIRUS\AV.rar'
E:\VIRUS\AV.rar
  [0] Archive type: RAR
    --> 0014.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> down.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> 0rl.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> mm.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
    --> 014.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1

zfs_007

高手就是多。
我倒是上了几次，但是都有KAV 或者 小红伞保价
没有必要全盘扫描了吧
应该认为没有感染病毒吧

qigang

原帖由 Exia 于 2008-5-4 17:34 发表


Starting the file scan:
Begin scan in 'E:\AV\014.exe'
E:\AV\014.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
...

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Undef.ia
病毒： Trojan.DL.Win32.Direct.me

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.42.62

wangjay1980

K