嘿嘿

爱·妖姬

之前那mm才清除没几天，今天发现又被人更新了



http://sese.iqdqpdq.cn/11.exe

allinwonderi

MISS

allinwonderi

没用到Gen
Found downloader]         <JS/Psyme.CN (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\14[1].rar->14[1].htm

---------------------------------------------------------------------
Scan ended:        2008-6-1, 20:18:11
Duration:        0:00:00

Scan result:

Scanned files:                 6
Infected objects:         1
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

爱·妖姬

测后面那个exe就行了，那htm只是一个桥梁，鄙视把地址入库

a256886572008

[oo]
c0=http://xxx.dfasdaqwd.cn/cao/aa1.exe
c1=http://xxx.dfasdaqwd.cn/cao/aa2.exe
c2=http://xxx.dfasdaqwd.cn/cao/aa3.exe
c3=http://5.gexiub38.info/cao/aa4.exe
c4=http://5.gexiub38.info/cao/aa5.exe
c5=http://5.gexiub38.info/cao/aa6.exe
c6=http://5.gexiub38.info/cao/aa7.exe
c7=http://xxx.dfasdaqwd.cn/cao/aa8.exe
c8=http://xxx.dfasdaqwd.cn/cao/aa9.exe
c9=http://111.dfasdaqwd.cn/cao/aa10.exe
c10=http://111.dfasdaqwd.cn/cao/aa11.exe
c11=http://111.dfasdaqwd.cn/cao/aa12.exe
c12=http://111.dfasdaqwd.cn/cao/aa13.exe
c13=http://111.dfasdaqwd.cn/cao/aa14.exe
c14=http://222.dfasdaqwd.cn/cao/aa15.exe
c15=http://222.dfasdaqwd.cn/cao/aa16.exe
c16=http://222.dfasdaqwd.cn/cao/aa17.exe
c17=http://222.dfasdaqwd.cn/cao/aa18.exe
c18=http://222.dfasdaqwd.cn/cao/aa19.exe
c19=http://333.dfasdaqwd.cn/cao/aa20.exe
c20=http://333.dfasdaqwd.cn/cao/aa21.exe
c21=http://333.dfasdaqwd.cn/cao/aa22.exe
c22=http://333.dfasdaqwd.cn/cao/aa23.exe
c23=http://444.dfasdaqwd.cn/cao/aa24.exe
c24=http://444.dfasdaqwd.cn/cao/aa111.exe

qigang

下载列表没更新。

tanlimo

还是00嘛

Joker

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://bbs.kafan.cn/attachment.p ... 19&t=1212323402
Information:  Contains suspicious code HEUR/HTML.Malware  

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://sese.iqdqpdq.cn/11.exe
Information:  Is the Trojan horse TR/Downloader.Gen

wangjay1980

K

电影结束了

对象: 14[1].htm
        在压缩档案里: F:\virus\14[1].rar
        Status: 已发现病毒
        病毒: Trojan.Downloader.Js.Psyme.KQ (BD 引擎)