大家来看看这网挂了什么？

zipurple

http://xsc.aynu.edu.cn/
就这个网，小A搞不定。

yusup

我的小A上去也没有反应，不过用opera上的。

觅寒枚

是挂了，首先首页上被挂了ntuser.com（在附件中），然后ntuser.com从http://513389.cn/上下载了808.txt（即http://513389.cn/808.txt），808.txt是一个下载列表，列表里面一共有28个木马待下载，看了一下，还都有效，大家自己小心一点下载吧。
ntuser.rar (2.06 KB, 下载次数: 79)

2008-5-28 09:27 上传

点击文件名下载附件

[ 本帖最后由 Lenove 于 2008-5-28 09:27 编辑 ]

Starting the file scan:

Begin scan in 'E:\AV\ntuser.rar'
E:\AV\ntuser.rar
  [0] Archive type: RAR
  --> ntuser.com
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.qqb.1
      [NOTE]      The file was deleted!


28
http://a.xiaba66.cn/yd.exe
http://a.xiaba66.cn/y0.exe
http://a.xiaba66.cn/y1.exe
http://a.xiaba66.cn/y2.exe
http://a.xiaba66.cn/y3.exe
http://a.xiaba66.cn/y4.exe
http://a.xiaba66.cn/y5.exe
http://a.xiaba66.cn/y6.exe
http://a.xiaba66.cn/y7.exe
http://a.xiaba66.cn/y8.exe
http://b.xiaba66.cn/y9.exe
http://b.xiaba66.cn/y10.exe
http://b.xiaba66.cn/y11.exe
http://b.xiaba66.cn/y12.exe
http://b.xiaba66.cn/y13.exe
http://b.xiaba66.cn/y14.exe
http://b.xiaba66.cn/y15.exe
http://b.xiaba66.cn/y16.exe
http://b.xiaba66.cn/y17.exe
http://c.xiaba66.cn/y18.exe
http://c.xiaba66.cn/y19.exe
http://c.xiaba66.cn/y20.exe
http://c.xiaba66.cn/y21.exe
http://c.xiaba66.cn/y22.exe
http://c.xiaba66.cn/y23.exe
http://c.xiaba66.cn/y24.exe
http://c.xiaba66.cn/y25.exe
http://c.xiaba66.cn/y26.exe

[ 本帖最后由 Exia 于 2008-5-28 09:30 编辑 ]

aribeth199

已检测到: 木马程序 Trojan-Downloader.Win32.Agent.qqb        URL: http://bbs.kafan.cn/attachment.p ... 1941291//ntuser.com

palfan

红伞杀光
---------------------------------------------

Begin scan in 'H:\Virus\xiaba66'
H:\Virus\xiaba66\yd.exe
      [DETECTION] Is the Trojan horse TR/Agent.nbl
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y0.exe
      [DETECTION] Is the Trojan horse TR/Agent.nbj
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y6.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y5.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y8.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y1.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y2.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y4.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y9.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y7.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y13.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y17.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y10.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y16.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y12.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y11.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y19.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y14.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y15.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y18.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y21.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y22.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y24.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y20.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y26.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y23.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
H:\Virus\xiaba66\y25.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年5月28日  10:26
Used time: 00:18 min

The scan has been done completely.

      1 Scanning directories
     28 Files were scanned
     28 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     28 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
     28 Notes

啊弥陀佛

微点砍掉

yunhan123

信息        2008-05-28  11:03:57        您此次查毒清除了1个病毒                       
信息        2008-05-28  11:03:57        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-05-28  11:03:57        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件2个                       
信息        2008-05-28  11:03:57        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-05-28  11:03:57        C:\Documents and Settings\Administrator\桌面\ntuser.rar\ntuser.com        Win32.TrojDownloader.Agent.16384        清除成功

冷冷

http://user1.12-27.net/ms06014.js
--->http://user1.12-27.net/bak.css

gaojun7206

啊啊，那么厉害！