又更新了MD5: 25857fede155f0cd1baa3a7aae892804

woai_jolin

AhnLab-V3	2008.7.1.0	2008.06.30	-
AntiVir	7.8.0.59	2008.06.30	-
Authentium	5.1.0.4	2008.07.01	-
Avast	4.8.1195.0	2008.06.30	-
AVG	7.5.0.516	2008.06.30	-
BitDefender	7.2	2008.07.01	-
CAT-QuickHeal	9.50	2008.06.30	-
ClamAV	0.93.1	2008.07.01	-
DrWeb	4.44.0.09170	2008.06.30	-
eSafe	7.0.17.0	2008.06.30	Suspicious File
eTrust-Vet	31.6.5916	2008.07.01	-
Ewido	4.0	2008.06.27	-
F-Prot	4.4.4.56	2008.07.01	-
F-Secure	7.60.13501.0	2008.06.26	-
Fortinet	3.14.0.0	2008.07.01	-
GData	2.0.7306.1023	2008.07.01	-
Ikarus	T3.1.1.26.0	2008.07.01	-
Kaspersky	7.0.0.125	2008.07.01	-
McAfee	5328	2008.06.30	-
Microsoft	1.3704	2008.07.01	-
NOD32v2	3229	2008.06.30	-
Norman	5.80.02	2008.06.30	-
Panda	9.0.0.4	2008.07.01	Suspicious file
Prevx1	V2	2008.07.01	-
Rising	20.51.10.00	2008.07.01	-
Sophos	4.30.0	2008.07.01	-
Sunbelt	3.1.1509.1	2008.07.01	-
Symantec	10	2008.07.01	-
TheHacker	6.2.96.365	2008.07.01	-
TrendMicro	8.700.0.1004	2008.06.30	-
VBA32	3.12.6.8	2008.06.30	-
VirusBuster	4.5.11.0	2008.06.30	-
Webwasher-Gateway	6.6.2	2008.06.30	-

这个地址有毛病 怎么down下来的全是死了

cgf99

antiver 没哟报警

电影结束了

不报...
运行不起来....

qianwenxiang

传说中的泽拉丁？。。

woai_jolin

MS不是
eset把那地址加黑了
2008-7-1 12:04:28        HTTP filter        file        http://lovekingonline.com/mylove.exe        probably a variant of Win32/Nuwar worm        connection terminated - quarantined        3A8AD2D60C484EE\Administrator        Threat was detected upon access to web by the application: C:\Program Files\Internet Explorer\iexplore.exe.

qianwenxiang

nuwar应该是的吧

附件这个是nuwar的儿子cntr下载的 可以运行

woai_jolin

MS那个地址被电信给咔嚓了 气死了 还有一个winner不能下载

qianwenxiang

winner和mylove两个貌似是一样的
http://59.149.85.41/mylove.exe http://59.149.85.41/winner.exe

woai_jolin

原帖由 qianwenxiang 于 2008-7-1 13:00 发表
winner和mylove两个貌似是一样的
http://59.149.85.41/mylove.exe http://59.149.85.41/winner.exe

这两个地址才是老窝 难怪http://lovekingonline.com/这么快就被咔嚓了

markrhy

红伞没反应