7

nosferatu

电影结束了

对象: ac[1].htm
        路径: F:\virus\vir
        Status: 已发现病毒
        病毒: Exploit.JS.Objsnap.A (BD 引擎)
对象: ce[1].htm
        路径: F:\virus\vir
        Status: 已发现病毒
        病毒: Trojan.JS.Downloader.BFA (BD 引擎)
对象: ilink[1].htm
        路径: F:\virus\vir
        Status: 已发现病毒
        病毒: Trojan.Exploit.Js.Agent.AR (BD 引擎)

Nerazzurri

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Nerazzurri\桌面\virus.rar'
C:\Documents and Settings\Nerazzurri\桌面\virus.rar
  [0] Archive type: RAR
  --> ce[1].htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Agent.cij
  --> ilink[1].htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Agent.SI
  --> ac[1].htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Agent.cik
  --> 14[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Rce.Gen
  --> fx[1].htm
      [DETECTION] Contains suspicious code HEUR/HTML.Malware
  --> ms[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/IFrame.UX
  --> top[1].gif
      [DETECTION] Contains suspicious code HEUR/HTML.Malware
      [NOTE]      The file was deleted!

电影结束了

http://down.nihao69.cn/down/ko.exe
http://dddd.nihao69.cn/down/ko.exe

taihuxian

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://bbs.kafan.cn/attachment.p ... a0&t=1216274837
Information:         Contains detection pattern of the Java script virus JS/Dldr.Agent.cij


Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.68, VDF 7.0.5.129

taihuxian

Access to the URL has been denied!
Warning: The content of this website is part of a unwanted category: Malware

Requested URL:         http://down.nihao69.cn/down/ko.exe


Generated by AntiVir WebGuard 8.0.13.0, WCDB 7.0.717.700

taihuxian

Access to the URL has been denied!
Warning: The content of this website is part of a unwanted category: Malware

Requested URL:         http://dddd.nihao69.cn/down/ko.exe


Generated by AntiVir WebGuard 8.0.13.0, WCDB 7.0.717.700

Palkia

C:\Documents and Settings\Administrator\桌面\virus.rar=]ilink[1].htm Trojan.Exploit.Js.Agent.AR 删除失败（文件是一个存档）

kkgh

费尔            JS.Decoder.al         Script.HttpDownloader.i

sam.to

Kaspersky Internet Security 7.0

The requested URL http://down.nihao69.cn/down/ko.exe is infected with Trojan-GameThief.Win32.OnLineGames.sgnm virus

Kaspersky Internet Security 7.0

The requested URL http://dddd.nihao69.cn/down/ko.exe is infected with Trojan-GameThief.Win32.OnLineGames.sgnm virus


卡巴不报1楼的样本,已上报.