畅游报警 vip.av511.net 带毒av网站！

显示全部楼层 · 发表于 2008-6-17 11:55:39

D:\firefox download\real.rar » RAR » real.exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2008-6-17 12:01:22

晕~样本区第一次来，看到这么多~怕~

显示全部楼层 · 发表于 2008-6-17 12:01:46

http://aaa.nbbar.info/e.exe

http://aaa.nbbar.info/e.txt

[3]
20080606 http://aaa.popit.info/ww/china1.exe
20080606 http://aaa.popit.info/ww/china2.exe
20080606 http://aaa.popit.info/ww/china3.exe
20080606 http://aaa.popit.info/ww/china4.exe
20080606 http://aaa.popit.info/ww/china5.exe
20080606 http://aaa.popit.info/ww/china6.exe
20080606 http://aaa.popit.info/ww/china7.exe
20080606 http://aaa.popit.info/ww/china8.exe
20080606 http://aaa.popit.info/ww/china9.exe
20080606 http://aaa.popit.info/ww/china10.exe
20080606 http://aaa.popit.info/ww/china11.exe
20080606 http://aaa.popit.info/ww/china12.exe
20080606 http://aaa.popit.info/ww/china13.exe
20080606 http://aaa.popit.info/ww/china14.exe
20080606 http://aaa.popit.info/ww/china15.exe
20080606 http://aaa.popit.info/ww/china16.exe
20080606 http://aaa.popit.info/ww/china17.exe
20080606 http://aaa.popit.info/ww/china18.exe
20080606 http://aaa.popit.info/ww/china19.exe
20080606 http://aaa.popit.info/ww/china20.exe
20080606 http://aaa.popit.info/ww/china21.exe
20080606 http://aaa.popit.info/ww/china22.exe
20080606 http://aaa.popit.info/ww/china23.exe
20080606 http://aaa.popit.info/ww/china24.exe
20080606 http://aaa.popit.info/ww/china25.exe
20080606 http://aaa.popit.info/ww/china26.exe
20080606 http://aaa.popit.info/ww/china27.exe
20080606 http://aaa.popit.info/ww/china28.exe
20080606 http://aaa.popit.info/ww/china29.exe
20080606 http://aaa.popit.info/ww/china30.exe
20080606 http://aaa.popit.info/ww/china31.exe
20080606 http://aaa.popit.info/ww/china32.exe
20080606 http://aaa.popit.info/ww/china33.exe
20080606 http://aaa.popit.info/ww/china34.exe

复制代码

[ 本帖最后由 tanlimo 于 2008-6-17 12:06 编辑 ]

显示全部楼层 · 发表于 2008-6-17 12:10:35

360安全卫士木马查杀历史报告

360木马库加载成功.......

安天木马查杀引擎加载成功......

木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china6.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china4.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china3.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china1.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\real.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\e.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china33.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china32.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china31.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china30.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china27.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china26.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china23.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china22.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china21.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china20.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china19.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china18.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china17.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china14.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china12.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china11.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china10.exe
查杀时间：2008-06-17 12:11
木马名称：Trojan/Win32.AutoRV.lvp
路径：G:\virus\virus（31个）\china9.exe
查杀时间：2008-06-17 12:11

共查杀24个

显示全部楼层 · 发表于 2008-6-17 12:34:07

原帖由 tanlimo 于 2008-6-17 12:01 发表
 http://aaa.nbbar.info/e.exe

http://aaa.nbbar.info/e.txt[3]
20080606 http://aaa.popit.info/ww/china1.exe
20080606 http://aaa.popit.info/ww/china2.exe
20080606 http://aaa.popit.info/ww/china3.exe
...

果真还有...
又是这个木马群

360用的是安天木马库...

显示全部楼层 · 发表于 2008-6-17 13:20:22

瑞星卡卡没反应，但挂马给360监控拦截了...可以正常浏览...

连卡巴都不用上场...

显示全部楼层 · 发表于 2008-6-17 14:05:18

C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china9.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china10.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china11.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china12.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china14.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china16.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china17.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china18.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china19.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china20.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china21.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china22.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china23.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china25.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china26.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china27.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china30.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china31.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china32.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china33.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » e.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » real.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china1.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china2.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china3.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china4.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china5.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china6.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china7.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\virus（31个）.rar » RAR » china8.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
30

显示全部楼层 · 发表于 2008-6-17 18:52:08

费尔拦截

显示全部楼层 · 发表于 2008-6-17 20:18:30

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.AntiAV.aj

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.49.12

显示全部楼层 · 发表于 2008-6-17 20:20:46

无法下载。

[已鉴定] 畅游报警 vip.av511.net 带毒av网站！

2/1

http://aaa.nbbar.info/e.exe