X6

电影结束了

Log is generated by FreShow.
[wide]http://www.huoche.com.cn/c65923/
    [script]http://js.users.51.la/2066055.js
    [frame]http://www.reaas.cn/dl2.htm?03
        [frame]http://www.reaas.cn/old.html
            [script]http://www.v1-360.cn/ms06014.js
                      http://www.v1-360.cn/bak.css
            [frame]http://www.v1-360.cn/GLWORLD.html
            [script]http://www.v1-360.cn/real.js
            [frame]http://www.v1-360.cn/Real.html
            [frame]http://www.v1-360.cn/Qvod.html
        [script]http://js.users.51.la/1967518.js
    [script]http://www.huoche.com.cn/member/checksms.asp
    [script]http://affiliate.qunar.com/affiliate/js-iframe.do?track_code=bd_11b057af466&from=%E6%AD%A6%E6%98%8C&to=%E5%B9%BF%E5%B7%9E
    [script]http://www.google-analytics.com/urchin.js

有个代码很好玩。。。~

1. AntiVir=AntiVir+Nod32;AntiVir=AntiVir+Norton}else if(TTPlayerVersion.indexOf("6.0.11.")!=-1){for(i=0;i<6;i++)AntiVir=AntiVir+Nod32;AntiVir=AntiVir+Norton}else if(TTPlayerVersion.indexOf("6.0.12.")!=-1){for(i=0;i<9;i++)AntiVir=AntiVir+Nod32;AntiVir=AntiVir+Norton}else if(TTPlayerVersion.indexOf("6.0.14.")!=-1){for(i=0;i<10;i++)AntiVir=AntiVir+Nod32;AntiVir=AntiVir+Norton}

复制代码

[ 本帖最后由 电影结束了 于 2008-8-14 13:57 编辑 ]

IllusionWing

x6

tian832

费尔 杀

无尽藏海

扫描统计:
扫描时间: 4秒
扫描选项:
扫描目标: F:\VIRUS\6.zip
  计数:
扫描的项目总数: 7
- 文件和目录: 7
- 注册表项: 0
- 进程和启动项: 0
- 网络和浏览器项目: 0
- 其他: 0

检测到的安全风险总数: 2
已解决的项目总数: 2
需要注意的项目总数: 0

已解决的风险:
Downloader
病毒 ID: 26637
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 完全解决
-----------
1 文件
[bak.css] 位于[f:\virus\6.zip] - 已删除


Bloodhound.Exploit.171
病毒 ID: 23675
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 启发式病毒
状态: 完全解决
-----------
1 文件
[glworld.html] 位于[f:\virus\6.zip] - 已删除

Kitman

Begin scan in 'C:\Users\TOSHIBA\Downloads\6'
C:\Users\TOSHIBA\Downloads\6\bak.css
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Dldr.Small.aasf Trojan
        --> Object
          [DETECTION] Is the TR/Dldr.Small.zfq Trojan
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '490ed3d3.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\6\GLWORLD.html
    [DETECTION] Contains recognition pattern of the HTML/Shellcode.Gen HTML script virus
    [NOTE]      A backup was created as '48fad3be.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\6\Qvod.html
    [DETECTION] Contains recognition pattern of the HTML/Silly.Gen HTML script virus
    [NOTE]      A backup was created as '4912d3e8.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\6\Real.html
    [DETECTION] Contains recognition pattern of the HTML/Rce.Gen HTML script virus
    [NOTE]      A backup was created as '4904d3d7.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\6\real.js
    [DETECTION] Contains HEUR/HTML.Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      A backup was created as '4becb510.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年8月14日  14:40
Used time: 00:03 Minute(s)

The scan has been done completely.

      1 Scanning directories
      6 Files were scanned
      6 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      5 files were deleted
      0 files were repaired
      5 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -1 Files not concerned
      0 Archives were scanned
      0 Warnings
      5 Notes

Palkia

病毒        2008-08-14  15:02:07        C:\Documents and Settings\Administrator\桌面\6.zip\bak.css        Win32.TrojDownloader.Small.196608        清除成功

chenyilong58

F:\Users\Administrator\Desktop\6.zip > ZIP > bak.css - Win32/TrojanDownloader.Agent.OBQ 特洛伊木马 的变种

啊弥陀佛

微点拦截

Love=卡巴+费尔

woai_jolin

正在扫描日志
病毒库版本: 3354 (20080814)
日期: 2008-8-14  时间: 19:09:41
已扫描的磁盘、文件夹和文件: G:\v\6.zip
G:\v\6.zip > ZIP > bak.css - Win32/TrojanDownloader.Agent.OBQ 特洛伊木马 的变种
G:\v\6.zip > ZIP > GLWORLD.html - 正常
G:\v\6.zip > ZIP > ms06014.js - 正常
G:\v\6.zip > ZIP > Qvod.html - 正常
G:\v\6.zip > ZIP > Real.html - 正常
G:\v\6.zip > ZIP > real.js - 正常
G:\v\6.zip:Zone.Identifier - 正常
已扫描的对象数: 7
发现的威胁数: 1
已清除对象数:0
完成时间: 19:09:41  总扫描时间: 0 秒 (00:00:00)