5个网马

显示全部楼层 · 发表于 2008-6-9 16:16:39

http://www.wofafa.info/xzz/real.exe
http://www.wofafa.info/web/4561.swf
http://www.wofafa.info/web/4562.swf
http://www.wofafa.info/xzz/614.exe
http://www.wofafa.info/xzz/lz.exe
flash 这个地址好多

显示全部楼层 · 发表于 2008-6-9 16:21:02

RS20.48未杀！

显示全部楼层 · 发表于 2008-6-9 16:21:59

http://www.wofafa.info/web/4561.swf
http://www.wofafa.info/web/4562.swf

显示全部楼层 · 发表于 2008-6-9 16:23:20

2008-6-9 16:23:10 已删除: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/real.exe
2008-6-9 16:23:10 已检测到: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/real.exe/PE_Patch/UPack
2008-6-9 16:23:10 已删除: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/lz.exe
2008-6-9 16:23:10 已检测到: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/lz.exe/PE_Patch/UPack
2008-6-9 16:23:10 已删除: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/614.exe
2008-6-9 16:23:10 已检测到: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/614.exe/PE_Patch/UPack
2008-6-9 16:23:10 未清除: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/real.exe/PE_Patch/UPack 已延期
2008-6-9 16:23:10 已检测到: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/real.exe/PE_Patch/UPack
2008-6-9 16:23:10 未清除: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/614.exe/PE_Patch/UPack 已延期
2008-6-9 16:23:10 已检测到: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/614.exe/PE_Patch/UPack
2008-6-9 16:23:10 未清除: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/lz.exe/PE_Patch/UPack 已延期
2008-6-9 16:23:10 已检测到: Trojan-Spy.Win32.Pophot.bed C:\Documents and Settings\Administrator\桌面\virus1.rar/lz.exe/PE_Patch/UPack

显示全部楼层 · 发表于 2008-6-9 16:23:26

跟此帖7楼的样本重复！

http://bbs.kafan.cn/viewthread.p ... p;extra=&page=1

显示全部楼层 · 发表于 2008-6-9 16:23:35

C:\Documents and Settings\Administrator\桌面\virus1.rar>>614.exe TrojanDownloader.MyDown.z.aqhm 木马还未处理
C:\Documents and Settings\Administrator\桌面\virus1.rar>>lz.exe TrojanDownloader.MyDown.z.aqhm 木马还未处理
C:\Documents and Settings\Administrator\桌面\virus1.rar>>real.exe TrojanDownloader.MyDown.z.aqhm 木马还未处理

显示全部楼层 · 发表于 2008-6-9 16:25:13

4561.swf 1.18/1.18KB 100.00% 在线扫描它是一个“木马” 2008-6-9 16:24:42 2008-6-9 16:24:53
4562.swf 1.24/1.24KB 100.00% 在线扫描它是一个“木马” 2008-6-9 16:24:47 2008-6-9 16:25:14

显示全部楼层 · 发表于 2008-6-9 16:25:27

4561.swf和4562.swf卡巴也能杀

已删除：木马程序 Exploit.SWF.Downloader.av 文件　: E:\4561.swf//Swf2Swc
已删除：木马程序 Exploit.SWF.Downloader.aw 文件　: E:\4562.swf//Swf2Swc

就等冷冷来分析下面隐藏着的东东了

显示全部楼层 · 发表于 2008-6-9 16:28:28

。。。。没事解解原来有人发过了！！

显示全部楼层 · 发表于 2008-6-9 16:31:17

http://www.yiqifa.info/f.exe

[已鉴定] 5个网马

9/0

冷冷来嗅探吧。

评分