PCSL 可疑恶意网站每日分析 20080917

lanvin

1. prtectionactivescan.com
   
2. 
   
3. http://softwaredesign6.com/2009/download/trial/A9loader_770522160214.exe
   
4. http://prtectionactivescan.com/2009/download/trial/A9loader_770522164720.exe
   
5. http://prtectionactivescan.com/2009/download/trial/A9loader_77052201.exe
   
6. http://prtectionactivescan.com/2009/download/trial/A9loader_770522164437.exe
   
7. 
   
8. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   
9. 
   
10. http://www.freewebs.com/chipxinh503/GirlKuTe.exe
    
11. 
    
12. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
13. 
    
14. http://www.cao-2.cn/Real10.js
    
15. http://www.cao-1.cn/Real10.js
    
16. http://202.106.195.23:6688/aicss_test241.css (invalid)
    
17. 
    
18. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
19. 
    
20. as-pro-xp-download.com
    
21. 
    
22. http://files.as-pro-xp-download.com/load/setup_100525_3_.exe
    
23. http://files.as-pro-xp-download.com/load/setup_110084_3_.exe
    
24. http://files.as-pro-xp-download.com/load/setup_110102_3_.exe
    
25. http://files.as-pro-xp-download.com/load/setup_100525_6_.exe
    
26. http://files.as-pro-xp-download.com/load/setup_110151_3_.exe
    
27. 
    
28. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
29. 
    
30. 
    
31. 
    
32. 
    

复制代码

以上信息仅供研究

sanhu35

谁打个包 晚上玩玩

Kitman

http://softwaredesign6.com/2009/download/trial/A9loader_770522160214.exe]http://softwaredesign6.com/2009/ ... er_770522160214.exe
http://prtectionactivescan.com/2009/download/trial/A9loader_770522164720.exe]http://prtectionactivescan.com/2009/download/trial/A9loader_770522164720.exe
http://prtectionactivescan.com/2009/download/trial/A9loader_77052201.exe]http://prtectionactivescan.com/2009/download/trial/A9loader_77052201.exe
http://prtectionactivescan.com/2009/download/trial/A9loader_770522164437.exe]http://prtectionactivescan.com/2009/download/trial/A9loader_770522164437.exe
This link appears broken.
-----------------------------------------------------------------------------------------------------------------------------------------------
http://www.freewebs.com/chipxinh503/GirlKuTe.exe]http://www.freewebs.com/chipxinh503/GirlKuTe.exe
GirlKuTe.rar (300.21 KB, 下载次数: 59)

2008-9-17 15:33 上传

点击文件名下载附件
-----------------------------------------------------------------------------------------------------------------------------------------------
http://files.as-pro-xp-download.com/load/setup_100525_3_.exe]http://files.as-pro-xp-download.com/load/setup_100525_3_.exe
http://files.as-pro-xp-download.com/load/setup_110084_3_.exe]http://files.as-pro-xp-download.com/load/setup_110084_3_.exe
http://files.as-pro-xp-download.com/load/setup_110102_3_.exe]http://files.as-pro-xp-download.com/load/setup_110102_3_.exe
http://files.as-pro-xp-download.com/load/setup_100525_6_.exe]http://files.as-pro-xp-download.com/load/setup_100525_6_.exe
http://files.as-pro-xp-download.com/load/setup_110151_3_.exe]http://files.as-pro-xp-download.com/load/setup_110151_3_.exe
equal md5 setup_110084_3_.rar (55.38 KB, 下载次数: 51)

2008-9-17 15:33 上传

点击文件名下载附件


Begin scan in 'C:\Users\TOSHIBA\Downloads\GirlKuTe.exe'
C:\Users\TOSHIBA\Downloads\GirlKuTe.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4942b302.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'C:\Users\TOSHIBA\Downloads\setup_110084_3_.exe'


End of the scan: 2008年9月17日  15:32
Used time: 00:03 Minute(s)

The scan has been done completely.

      0 Scanning directories
      3 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      0 Archives were scanned
      0 Warnings
      1 Notes

[ 本帖最后由 Kitman 于 2008-9-17 15:42 编辑 ]

啊弥陀佛

微点拦截