红伞

显示全部楼层 · 发表于 2008-7-5 08:50:18

kaspsky miss

显示全部楼层 · 发表于 2008-7-5 08:51:31

毒霸 0

显示全部楼层 · 发表于 2008-7-5 09:07:04

KIS8.0.0.429过。

显示全部楼层 · 发表于 2008-7-5 10:50:34

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... a8&t=1215226212
Information: Contains suspicious code HEUR/HTML.Malware

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.64, VDF 7.0.5.52

显示全部楼层 · 发表于 2008-7-5 11:12:49

HEUR/HTML.Malware

显示全部楼层 · 发表于 2008-7-5 11:23:30

蜘蛛不报咖啡不报，伞报

显示全部楼层 · 发表于 2008-7-5 11:36:15

http://tongji520.com.cn/count/js/i1232.swf
http://count.xj.cn/count/js/css.css
http://tongji520.com.cn/count/js/update/update.exe
http://tongji520.com.cn/count/js/update/hosts.exe
http://tongji520.com.cn/count/js/update/wow.exe
http://tongji520.com.cn/count/js/update/microsoft.exe

复制代码

61.191.52.111 sdch.sdo.com
61.191.52.111 ekey.sdo.com
61.191.52.103 mir2.sdo.com
61.191.52.111 kf.sdo.com
61.191.52.103 www.mir2.com.cn
61.191.52.103 mir2.com.cn
61.191.52.103 home.mir2.sdo.com
61.191.52.103 shandacs.allyes.com
61.191.52.103 home.woool.sdo.com
61.191.52.103 woool.sdo.com
61.191.52.111 pwd.sdo.com
61.191.52.111 www.sdo.com

复制代码

显示全部楼层 · 发表于 2008-7-5 11:48:20

[Scanning : C:\Download Files]

C:\Download Files\g2.rar<RAR>:microsoft.exe <- Heur.RoundKick : No action

Scanned objects : 10

Infected objects : 1

显示全部楼层 · 发表于 2008-7-5 11:48:38

[Found security risk]    <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Download Files\g2.rar->wow.exe
[Found possible security risk]    <W32/Heuristic-CSU!Eldorado (dropper, damaged, not disinfectable)> C:\Download Files\g2.rar->microsoft.exe->(embedded)
[Found possible virus]    <W32/Threat-HLLIP-based!Maximus (not disinfectable)> C:\Download Files\g2.rar->css.css->(PecBundle)->(PECompact)
[Found possible security risk]    <W32/Heuristic-257!Eldorado (not disinfectable)> C:\Download Files\g2.rar->update.exe->(NSPack)->(PE_Patch)

---------------------------------------------------------------------
Scan ended: 2008-7-5, 11:48:52
Duration: 0:00:06

Scan result:

Scanned files:       6
Infected objects:    4
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

[病毒样本] 红伞

本帖子中包含更多资源

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4