PCSL 可疑恶意网站每日分析 20080921

lanvin

1. http://www.6rb-ksa.com/vip.exe
   
2. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   
3. http://tudoforum.webcindario.com/verdinho.jpg PE
   
4. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   
5. http://www.pointcashbag.com/cashback/download/install.exe
   
6. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   
7. http://avzhan.3322.org:81/1.exe
   
8. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
   
9. http://lyon2008.sitesled.com/image09776554foto01.exe
   
10. http://blackman717.sitesled.com/instal-tv-sexe-24h.exe
    
11. http://gaming3d.sitesled.com/DragonBot_3_FullSetup.exe
    
12. http://gaming3d.sitesled.com/sexbot_fullsetup.exe
    
13. http://gaming3d.sitesled.com/gzn_setup.exe
    
14. http://voce.sitesled.com/veja.exe
    
15. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
16. http://786ts.qqsafe-qqservicesyydswfhuw8ysjftwf.org/dl.exe
    
17. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    

复制代码

hj5abc

貌似这些都下不了.
http://lyon2008.sitesled.com/image09776554foto01.exe
http://blackman717.sitesled.com/instal-tv-sexe-24h.exe
http://gaming3d.sitesled.com/DragonBot_3_FullSetup.exe
http://gaming3d.sitesled.com/sexbot_fullsetup.exe
http://gaming3d.sitesled.com/gzn_setup.exe
http://voce.sitesled.com/veja.exe

其余打包 5x. desktop.rar (290.93 KB, 下载次数: 40)

2008-9-21 17:48 上传

点击文件名下载附件

G:\desktop\desktop.rar
  [0] Archive type: RAR
  --> install.exe
      [DETECTION] Is the Trojan horse TR/Dldr.JJJY
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Tiny.bwu
  --> dl.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> verdinho.jpg
      [DETECTION] The file contains an executable. This, however, is disguised by a harmless file extension (HIDDENEXT/Crypted)
      [WARNING]   The file was ignored!

[ 本帖最后由 hj5abc 于 2008-9-21 17:51 编辑 ]

lanvin

原帖由 hj5abc 于 2008-9-21 17:48 发表


其余打包 5x. 362122

屏蔽了china
所以要用代理服务器下

change_018

补上

wangjay1980

K