挂马网站，很多木马！·

显示全部楼层 · 发表于 2008-5-5 15:03:18

http://www.haozhi123.com/soft/sort02/down-18.html

显示全部楼层 · 发表于 2008-5-5 15:49:44

不行了,太多了,受不了,先解几个出来
http://b.s102-cnzz.com/0014.exe
http://b.s102-cnzz.com/0bf.exe
http://b.s102-cnzz.com/0pps.exe
http://b.s102-cnzz.com/0lz.exe

显示全部楼层 · 发表于 2008-5-5 16:09:42

Log is generated by FreShow.
[wide]http://ca.winvv.com/cn.htm

[frame]http://w.cao360.com/w6.htm

[frame]http://w.cao360.com/c0.htm

[script]http://w.gan360.com/web/014.js

[object]http://b.s102-cnzz.com/0014.exe

[script]http://w.gan360.com/web/bf.jss

[object]http://b.s102-cnzz.com/0bf.exe

[script]http://w.gan360.com/web/pps.js

[object]http://b.s102-cnzz.com/0pps.exe

[script]http://w.gan360.com/web/web1.htm

[object]http://b.s102-cnzz.com/0lz.exe

[frame]http://w.cao360.com/c1.htm

[frame]http://w.cao360.com/c2.htm

[object]http://b.s102-cnzz.com/0rl.exe

[frame]http://www.firefox-ads.cn/shan.htm

[frame]http://www.firefox-ads.cn/ad/vip.htm

[frame]http://ca.winvv.com/ie.htm

[frame]http://www.sdfsd32323.com/web/6619038.htm

[frame]http://www.sdfsd32323.com/web/htm.html

[script]http://www.sdfsd32323.com/web/1.js

[object]http://exe.wokaixin.com/014.exe

[script]http://www.sdfsd32323.com/web/bf.js

[object]http://exe.wokaixin.com/bf.exe

[script]http://www.sdfsd32323.com/web/pps.js

[object]http://exe.wokaixin.com/pps.exe

[frame]http://www.sdfsd32323.com/web/3.htm

[object]http://exe.wokaixin.com/lz.exe

[frame]http://gf.uuzzvv.com/g.htm

[frame]http://cc.haowangma.com/one/huai5.htm
            [frame]http://cc.haowangma.com/wmwm/a014.htm
                  http://dd.tianxiayouzei.com/mmuu/a014.exe
            [frame]http://cc.haowangma.com/wmwm/alz.htm
                  http://dd.tianxiayouzei.com/mmuu/alz.exe
            [frame]http://cc.haowangma.com/wmwm/new.htm
                  [script]http://cc.haowangma.com/wmwm/a014.js
                     http://dd.tianxiayouzei.com/mmuu/a014.exe
                  [script]http://cc.haowangma.com/wmwm/arl.js
                     http://dd.tianxiayouzei.com/mmuu/alz.exe
                  [script]http://cc.haowangma.com/wmwm/abf.js
                     http://dd.tianxiayouzei.com/mmuu/abf.exe
                  [frame]http://cc.haowangma.com/wmwm/alz.htm
                     http://dd.tianxiayouzei.com/mmuu/alz.exe
                  [frame]http://cc.haowangma.com/wmwm/anrl.htm
                     http://dd.tianxiayouzei.com/mmuu/anrl.exe

[frame]http://www.serversina.cn/5519.htm

[frame]http://www.serversina.cn/wm/Ajax.htm

[object]http://www.serversina.cn/wm/mm.exe

[frame]http://www.serversina.cn/wm/Ms06014.htm

[object]http://www.serversina.cn/wm/mm.exe

[script]http://www.serversina.cn/wm/Real.gif

[frame]http://www.serversina.cn/wm/Bfyy.htm

[frame]http://www.serversina.cn/wm/Lz.htm

[frame]http://www.serversina.cn/wm/XunLei.htm

[frame]http://www.serversina.cn/main.htm

[frame]http://www.serversina.cn/1.gif

[frame]http://www.serversina.cn/z.gif

[frame]http://www.serversina.cn/b.gif

[frame]http://www.serversina.cn/0.gif

[frame]http://www.serversina.cn/r.gif

能力有限,只能解这么多

重新打包上来

[ 本帖最后由 shery0000 于 2008-5-5 19:52 编辑 ]

显示全部楼层 · 发表于 2008-5-5 17:02:02

原帖由 shery0000 于 2008-5-5 15:49 发表
不行了,太多了,受不了,先解几个出来
http://b.s102-cnzz.com/0014.exe
http://b.s102-cnzz.com/0bf.exe
http://b.s102-cnzz.com/0pps.exe
http://b.s102-cnzz.com/0lz.exe

卡巴:
Scanned file: 4.rar - Infected
4.rar/0bf.exe - infected by Trojan-Downloader.Win32.Small.suu
4.rar/0pps.exe - infected by Trojan-Downloader.Win32.Small.suu
4.rar/0lz.exe - infected by Trojan-Downloader.Win32.Small.suu
4.rar/0014.exe - infected by Trojan-Downloader.Win32.Small.suu

显示全部楼层 · 发表于 2008-5-5 17:03:50

信息 2008-05-05  17:03:18 您此次查毒隔离了4个文件
信息 2008-05-05  17:03:18 您此次查毒共查出4个病毒以及危险代码
信息 2008-05-05  17:03:18 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件5个
信息 2008-05-05  17:03:18 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-05-05  17:03:18 D:\Desktop\4.rar\0014.exe2 Win32.Troj.AiT.dg.2564 隔离成功
病毒 2008-05-05  17:03:18 D:\Desktop\4.rar\0lz.exe3 Win32.Troj.AiT.dg.2564 隔离成功
病毒 2008-05-05  17:03:18 D:\Desktop\4.rar\0pps.exe3 Win32.Troj.AiT.dg.2564 隔离成功
病毒 2008-05-05  17:03:18 D:\Desktop\4.rar\0bf.exe3 Win32.Troj.AiT.dg.2564 隔离成功

显示全部楼层 · 发表于 2008-5-5 17:18:44

木马名称:Trojan-Downloader.Win32.Small.npc
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\4\0BF.EXE3
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.Small.npc
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\4\0PPS.EXE3
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.Small.npc
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\4\0LZ.EXE3
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-5-5 18:37:14

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： RootKit.Win32.Undef.dg

用户来源：互联网

软件版本：20.43.01

4个

显示全部楼层 · 发表于 2008-5-5 19:59:25

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： RootKit.Win32.Undef.dg
病毒： Trojan.DL.Win32.Direct.me

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.43.02

显示全部楼层 · 发表于 2008-5-6 03:13:06

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\downloads'
C:\Documents and Settings\morgan\My Documents\downloads\
  0014.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.suu.11
   [NOTE]    The file was deleted!
  014.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
         [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!
  0bf.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.suu.11
   [NOTE]    The file was deleted!
  0lz.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.suu.11
   [NOTE]    The file was deleted!
  0pps.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.suu.11
   [NOTE]    The file was deleted!
  0rl.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.suu.11
   [NOTE]    The file was deleted!
  a014.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  abf.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  alz.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  anrl.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  bf.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
         [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!
  lz.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
         [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!
  mm.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Losabel.IV
   [NOTE]    The file was deleted!
  pps.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
         [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!

End of the scan: 2008年5月5日  12:13
Used time: 00:04 min

The scan has been done completely.

   1 Scanning directories
   14 Files were scanned
   14 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   14 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   4 Warnings
   14 Notes

显示全部楼层 · 发表于 2008-5-6 14:55:48

对象: 0bf.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Small.AANC (BD 引擎)
对象: 0pps.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Small.AANC (BD 引擎)
对象: 0lz.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Small.AANC (BD 引擎)
对象: 0rl.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Small.AANC (BD 引擎)
对象: 0014.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Small.AANC (BD 引擎)
对象: 014.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Trojan.Dropper.Agent.TOH (BD 引擎)
对象: bf.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Trojan.Dropper.Agent.TOH (BD 引擎)
对象: pps.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Trojan.Dropper.Agent.TOH (BD 引擎)
对象: lz.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Trojan.Dropper.Agent.TOH (BD 引擎)
对象: mm.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Murlo.GD (BD 引擎)
对象: a014.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Generic.Malware.Sdld!!.728482DE (BD 引擎)
对象: alz.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Generic.Malware.Sdld!!.728482DE (BD 引擎)
对象: abf.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Generic.Malware.Sdld!!.728482DE (BD 引擎)
对象: anrl.exe
在压缩档案里: F:\downloads.rar
Status: 已发现病毒
病毒: Generic.Malware.Sdld!!.728482DE (BD 引擎)

[已鉴定] 挂马网站，很多木马！·

回复 4楼 kato9096 的帖子

28/9