PCSL 可疑恶意网站每日分析 20080919

lanvin

1. blazingtools.com
   
2. 
   
3. http://www.blazingtools.com/downloads/i_bpk2003.exe
   
4. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   
5. swmirror.com
   
6. 
   
7. http://dreamingsoft.swmirror.com/fcsetup.exe
   
8. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   
9. blazingtools.com
   
10. 
    
11. http://www.blazingtools.com/downloads/i_bpk2003.exe
    
12. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
13. facaizhifuok.cn
    
14. 
    
15. http://facaizhifuok.cn/hb/1.exe
    
16. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    

复制代码

以上信息仅供研究

嘁。不稀罕~

支持，顺便AD一下。。。
http://bbs.kafan.cn/thread-327328-1-1.html
在线查询恶意url。。。

尤金卡巴斯基

这个广告我喜欢

尤金卡巴斯基

2008/9/19 16:14:11 已清除 风险软件 not-a-virus:Monitor.Win32.Perflogger.cr G:\Temp\Virus\i_bpk2003.rar/i_bpk2003.exe/bpkwb.dll  
2008/9/19 16:14:11 已清除 风险软件 not-a-virus:Monitor.Win32.Perflogger.ca G:\Temp\Virus\i_bpk2003.rar/i_bpk2003.exe/bpkvw.exe  
2008/9/19 16:14:11 已清除 风险软件 not-a-virus:Monitor.Win32.Perflogger.cl G:\Temp\Virus\i_bpk2003.rar/i_bpk2003.exe/bpkun.exe  
2008/9/19 16:14:11 已清除 风险软件 not-a-virus:Monitor.Win32.Perflogger.cb G:\Temp\Virus\i_bpk2003.rar/i_bpk2003.exe/bpkr.exe  
2008/9/19 16:14:11 已清除 风险软件 not-a-virus:Monitor.Win32.Perflogger.ca G:\Temp\Virus\i_bpk2003.rar/i_bpk2003.exe/bpkhk.dll  
2008/9/19 16:14:11 已清除 风险软件 not-a-virus:Monitor.Win32.Perflogger.ad G:\Temp\Virus\i_bpk2003.rar/i_bpk2003.exe/bpk.exe  
2008/9/19 16:14:11 已清除 风险软件 not-a-virus:Monitor.Win32.Perflogger.ct G:\Temp\Virus\i_bpk2003.rar/i_bpk2003.exe/Setup.exe  
2008/9/19 16:14:11 已清除 风险软件 not-a-virus:Monitor.Win32.Perflogger.cb G:\Temp\Virus\i_bpk2003.rar  
2008/9/19 16:14:10 已删除 木马程序 Trojan-GameThief.Win32.OnLineGames.synr G:\Temp\Virus\1.rar/1.exe//PE_Patch//UPack  
2008/9/19 16:14:10 已删除 木马程序 Trojan-GameThief.Win32.OnLineGames.synr G:\Temp\Virus\1.rar/1.exe  
2008/9/19 16:14:10 已清除 木马程序 Trojan-GameThief.Win32.OnLineGames.synr G:\Temp\Virus\1.rar  


fcsetup.exe 没有一家报

-squared	4.0.0.14	2008.09.17	2008-09-17	-	1.514
AntiVir	7.8.1.34	7.0.6.180	2008-09-18	-	2.337
Arcavir	1.0.5	200809182042	2008-09-18	-	2.075
AVAST!	3.0.1	080918-0	2008-09-18	-	0.728
AVG	7.5.52.442	270.7.0/1679	2008-09-18	-	1.580
BitDefender	7.60825.1766781	7.20964	2008-09-19	-	16.300
CA (VET)	9.0.0.143	31.6.6094	2008-09-18	-	6.733
ClamAV	0.94	8285	2008-09-19	-	1.107
Comodo	2.11	2.0.0.650	2008-09-18	-	2.078
CP Secure	1.1.0.715	2008.09.19	2008-09-19	-	6.927
Dr.Web	4.44.0.9170	2008.09.19	2008-09-19	-	4.348
ewido	4.0.0.2	2008.09.18	2008-09-18	-	3.397
F-Prot	4.4.4.56	20080918	2008-09-18	-	1.141
F-Secure	5.51.6100	2008.09.19.01	2008-09-19	-	2.080
Ikarus	T3.1.01.34	2008.09.19.71487	2008-09-19	-	3.375
Microsoft	1.3903	2008.09.18	2008-09-18	-	7.340
mks_vir	2.01	2008.09.18	2008-09-18	-	2.630
Norman	5.93.01	5.93.00	2008-09-18	-	5.377
nProtect	2008-09-18.00	2118370	2008-09-18	-	4.247
Quick Heal	9.50	2008.09.19	2008-09-19	-	2.376
Sophos	2.78.0	4.33	2008-09-19	-	2.475
Sunbelt	3.1.1647.1	2241	2008-09-18	-	1.606
The Hacker	6.3.0.9	v00088	2008-09-18	-	0.806
VBA32	3.12.8.5	20080918.0815	2008-09-18	-	17.250
ViRobot	20080918	2008.09.18	2008-09-18	-	0.408
VirusBuster	4.5.11.10	10.87.17/635387	2008-09-18	-	3.267
卡巴斯基	5.5.10	2008.09.19	2008-09-19	-	0.657
安博士V3	2008.09.19.01	2008.09.19	2008-09-19	-	1.364
江民杀毒	11.0.706	2008.09.19	2008-09-19	-	1.565
熊猫卫士	9.05.01	2008.09.18	2008-09-18	-	2.079
瑞星	20.0	20.62.40.00	2008-09-19	-	1.336
赛门铁克	1.3.0.24	20080918.008	2008-09-18	-	0.065
趋势科技	8.700-1004	5.552.03	2008-09-18	-	0.469
迈克菲	5.3.00	5387	2008-09-18	-	1.902
金山毒霸	2008.1.14.15	2008.9.19.14	2008-09-19	-	0.619
飞塔	2.81-3.113	9.565	2008-09-18	-	0.213

Palkia

金山 杀 2

BING126

McAfee  报了2个。。

i_bpk2003.exe          Generic.dx
fcsetup.exe               no
1.exe                        New Malware.aj

尤金卡巴斯基

Hello.
No malicious software was found in the attached file.

Please quote all when answering.


-----------------
Regards, Kirill Erakhtin
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.
http://www.kaspersky.com/trials - trial version


> Attachment: fcsetup.rar