PCSL 可疑恶意网站每日分析 20080930

lanvin

1. http://enu.v6.update.cab.en.winupdate.com.updatescabensrv70.cn/setup.exe
   
2. https://s.aolcdn.com/art/aimindia/aol_india_messenger_6.5.16.2.exe
   
3. http://onlineprivatescan.com/2009/download/trial/A9installer_880595.exe
   
4. http://onlineprivatescan.com/2009/download/trial/A9installer_77040502.exe
   
5. http://onlineprivatescan.com/2009/download/trial/A9installer_880113.exe
   
6. http://onlineprivatescan.com/2009/download/trial/A9installer_880181.exe
   
7. http://onlineprivatescan.com/2009/download/trial/A9installer_880056.exe
   
8. http://onlineprivatescan.com/2009/download/trial/A9installer_77013615.exe
   
9. http://onlineprivatescan.com/2009/download/trial/A9installer_77040506.exe
   
10. http://fullantivirusscan.com/2009/download/trial/A9installer_880221.exe
    
11. http://fullantivirusscan.com/2009/download/trial/A9installer_77071503.exe
    
12. http://www.acespy.com/dls/acespy.exe
    
13. http://secureclick1.com/2009/download/trial/A9installer_880285.exe
    
14. http://secureclick1.com/2009/download/trial/A9installer_880293.exe
    
15. http://secureclick1.com/2009/download/trial/A9installer_880488.exe
    
16. http://secureclick1.com/2009/download/trial/A9installer_880135.exe
    
17. http://secureclick1.com/2009/download/trial/A9installer_880551.exe
    
18. http://secureclick1.com/2009/download/trial/A9installer_880705.exe
    
19. http://secureclick1.com/2009/download/trial/A9installer_880221.exe
    
20. http://ia-scanonline.com/download/IAInstall.exe
    
21. http://bestprivatetube.com/cd/519/0/Adobe%20Acrobat%20Pro%207.0%20(Serial).exe
    
22. http://bestprivatetube.com/cd/519/0/Active%20Partition%20Recovery%20v3.0.exe
    
23. http://bestprivatetube.com/cd/519/0/Zoom%20Search%20Engine%20Professional%20Edition%20v5.1.exe
    
24. http://bestprivatetube.com/cd/519/0/Mystery%20P.I.%20The%20Lottery%20Ticket%20v1.0.0.3%20by%20LineZer0.exe
    
25. http://personalantispy.com/.ware/js/order.js
    
26. http://www.personalantispy.com/.ware/js/order.js
    
27. http://bestantivirusscan.com/2009/download/trial/A9installer_880221.exe
    
28. http://bestantivirusscan.com/2009/download/trial/A9installer_880658.exe
    
29. http://bestantivirusscan.com/2009/download/trial/A9installer_880154.exe
    
30. http://stat.antimalware2009.com/download/17/AntiMalware2009Installer.exe
    
31. http://stat.antivirusxp08.net/download/AntivirusXP2008Installer.exe
    
32. http://theprivatetube.com/cd/219/0/wmcodec_update.exe
    
33. http://theprivatetube.com/cd/174/0/wmcodec_update.exe
    
34. http://theprivatetube.com/cd/183/0/wmcodec_update.exe
    
35. http://theprivatetube.com/cd/83/0/wmcodec_update.exe
    
36. http://theprivatetube.com/cd/357/0/wmcodec_update.exe
    
37. http://theprivatetube.com/cd/402/0/image_decoder.exe
    
38. http://theprivatetube.com/cd/767/0/wmcodec_update.exe
    
39. http://theprivatetube.com/cd/519/0/AutoDesk%20AutoCAD%202007.exe
    
40. http://softwaredesign6.com/2009/download/trial/A9loader_770522160214.exe
    
41. http://prtectionactivescan.com/2009/download/trial/A9loader_770522164720.exe
    
42. http://prtectionactivescan.com/2009/download/trial/A9loader_77052201.exe
    
43. http://smartantivirusv2.com/soft/sa2009.exe
    
44. http://viruslabs2009.com/distrib/1/virlab_install.exe
    
45. http://viruslabs2009.com/distrib/1012/virlab_install.exe
    
46. http://scanner.microantivirus-2009.com/setup/install_3697_MHwzNnwxMDEwMDAwMDAwfHx8fHx8fHw_.exe
    
47. http://scanner.microantivirus-2009.com/setup/install_4887_MHwzNnwxMDAwMDAwMDAwfHx8fHx8fHw_.exe
    
48. http://scanner.microantivirus-2009.com/setup/install_4749_MHwzNnwxMDIwMDAwMDAwfHx8fHx8fHw_.exe
    
49. http://win-antivirus-2008.com/a/Install.exe
    
50. http://scanner.win-antivirus-2008.com/setup/setup_1257_MHwzM3wxMDIwMDAwMDAwfHx8fHx8_.exe
    
51. http://up.50db34d5.info/update.gif
    
52. http://xh-codec.net/download/crack.Steinberg.Nuendo.3.2.0.1128c3098.exe
    
53. http://xh-codec.net/download/crack.Visual.CertExam.Suite.1.9.978c3098.exe
    
54. http://xh-codec.net/download/keygen.Nero.8.3.6.0c3098.exe
    
55. http://xh-codec.net/download/keygen.Nero.8.3.6.0c3098.exe
    
56. http://xh-codec.net/download/keygen.Norton.Internet.Security.2008c3098.exe
    
57. http://xh-codec.net/download/keygen.Microsoft.Live.OneCare.2.0c3098.exe
    
58. http://xh-codec.net/download/keygen.RealPlayer.11.0.0.446c3098.exe
    
59. http://xh-codec.net/download/serial.Microsoft.Live.OneCare.2.0c3098.exe
    
60. http://stat.antivirusxp08.net/download/16/AntivirusXP2008Installer.exe
    
61. http://stat.antivirusxp08.net/download/AntivirusXP2008Installer.exe
    
62. http://www.registrycleanerxp.com/download/setup_rcxp.exe
    
63. http://216.12.204.2/softwareclub/sccdc.exe
    
64. http://216.12.204.2/softwareclub/scnb.exe
    
65. http://216.12.204.2/softwareclub/scdr.exe
    
66. http://216.12.204.2/softwareclub/scax.exe
    
67. http://216.12.204.2/softwareclub/scnl.exe
    
68. http://216.12.204.2/softwareclub/scmp.exe
    
69. http://216.12.204.2/softwareclub/sccs.exe
    
70. http://216.12.204.2/softwareclub/scsm.exe
    
71. http://216.12.204.2/softwareclub/scst.exe
    
72. http://216.12.204.2/softwareclub/scaex.exe
    
73. http://216.12.204.2/softwareclub/sccc.exe
    
74. http://viruslabs2009.com/distrib/1/virlab_install.exe
    
75. http://viruslabs2009.com/distrib/1012/virlab_install.exe
    
76. http://download.dailykeys.com/files/intellij%20idea%207.0.4.exe
    
77. http://download.dailykeys.com/files/animal%20seks%20video.com.exe
    
78. http://kpdef8.com/download/rhtools14e.zip
    
79. http://ntsecurity.nu/downloads/clearlogs.exe
    
80. http://soft.enet.org.cn/kejian/gongju/X-Scan-v3.3-cn.rar
    
81. http://downloads.zango.com/zangogames/library/setuplibrary2797.exe
    
82. http://downloads.zango.com/zangogames/dvg/setupdavid2365.exe
    
83. http://downloads.zango.com/zangogames/chamber/setupchamber2848.exe
    
84. http://upgrades.hotbar.com/installs/hotbar/programs/4.8.0.0/hbtstart.exe
    
85. http://installs.hotbar.com/installs/hbtools/programs/hbtools.cab
    
86. http://installs.hotbar.com/installs/hbtools/programs/hbtools.exe
    
87. http://downloads.zango.com/zangogames/zangotv/setupzangotv2593.exe
    
88. http://installs.hotbar.com/installs/hotbar/programs/10.0.368.0/hotbar.exe
    
89. 
    
90. 
    
91. 
    
92. 
    

复制代码

sbbdms

帮忙打包。
有一些比较大的，3MB以上的，我就不打在内了。

sbbdms

卡巴杀35漏14

已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\Zoom Search Engine Professional Edition v5.1.exe//data0003/0.exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\Zoom Search Engine Professional Edition v5.1.exe//data0003/1.exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\Zoom Search Engine Professional Edition v5.1.exe//data0003/2.exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\Zoom Search Engine Professional Edition v5.1.exe//data0003/3.exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\Zoom Search Engine Professional Edition v5.1.exe//data0003/4.exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\Zoom Search Engine Professional Edition v5.1.exe//data0003/5.exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\Zoom Search Engine Professional Edition v5.1.exe//data0003/7.exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\Active Partition Recovery v3.0.exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\Adobe Acrobat Pro 7.0 (Serial).exe
已删除：木马程序 Trojan.Win32.Monder.qir        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\animal seks video.com.exe/crack.exe
已删除：木马程序 Trojan-Downloader.Win32.Agent.ahyl        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\animal seks video.com.exe/serial.exe//FSG
已删除：木马程序 Trojan-Downloader.Win32.Agent.ahus        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\animal seks video.com.exe/number.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-Dropper.Win32.Agent.xgt        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\animal seks video.com.exe/keygen.exe
已删除：风险软件 not-a-virus:FraudTool.Win32.XPAntivirus.nz        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\AntivirusXP2008Installer(1).exe//stream//data0008
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\AutoDesk AutoCAD 2007.exe
已删除：恶意程序 HackTool.Win32.Clearlog.c        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\clearlogs.exe
已删除：木马程序 Trojan-Downloader.Win32.Agent.ahbj        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\crack.Steinberg.Nuendo.3.2.0.1128c3098.exe//stream//data0001
已删除：木马程序 Trojan-Downloader.Win32.Agent.ahbj        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\crack.Visual.CertExam.Suite.1.9.978c3098.exe
已删除：广告程序 not-a-virus:AdWare.Win32.180Solutions.ay        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\hbtools.exe//data0018//data0002
已删除：广告程序 not-a-virus:AdWare.Win32.180Solutions.ay        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\hbtools.exe//data0018//data0003//UPX
已删除：广告程序 not-a-virus:AdWare.Win32.180Solutions.ay        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\hbtools.exe//data0018//data0004
已删除：广告程序 not-a-virus:AdWare.Win32.180Solutions.ay        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\hbtstart.exe//data0002
已删除：广告程序 not-a-virus:AdWare.Win32.HotBar.bi        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\hbtstart.exe//data0003//data0007//data0003//UPX
已删除：广告程序 not-a-virus:AdWare.Win32.HotBar.bi        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\hbtstart.exe//data0003//data0007//data0004
已删除：广告程序 not-a-virus:AdWare.Win32.HotBar.bq        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\hbtstart.exe//data0003//data0008/HbTools.mlp
已删除：广告程序 not-a-virus:AdWare.Win32.BHO.dbk        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\IAInstall.exe//data0002
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\image_decoder.exe
已删除：风险软件 not-a-virus:FraudTool.Win32.MSAntivirus.ak        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\install_3697_MHwzNnwxMDEwMDAwMDAwfHx8fHx8fHw_.exe//stream//data0003
已删除：风险软件 not-a-virus:FraudTool.Win32.UltimateAntivirus.cq        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\install_3697_MHwzNnwxMDEwMDAwMDAwfHx8fHx8fHw_.exe//stream//data0004
已删除：风险软件 not-a-virus:FraudTool.Win32.UltimateAntivirus.cq        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\install_4749_MHwzNnwxMDIwMDAwMDAwfHx8fHx8fHw_.exe
已删除：木马程序 Trojan-Dropper.Win32.Agent.xgt        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\intellij idea 7.0.4.exe
已删除：木马程序 Trojan-Downloader.Win32.Agent.ahbj        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\keygen.Microsoft.Live.OneCare.2.0c3098.exe
已删除：木马程序 Trojan-Downloader.Win32.Agent.ahbj        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\keygen.Nero.8.3.6.0c3098.exe
已删除：木马程序 Trojan-Downloader.Win32.Agent.ahbj        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\keygen.Norton.Internet.Security.2008c3098.exe
已删除：木马程序 Trojan-Downloader.Win32.Agent.ahbj        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\keygen.RealPlayer.11.0.0.446c3098.exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\Mystery P.I. The Lottery Ticket v1.0.0.3 by LineZer0.exe
已删除：恶意程序 HackTool.VBS.Rhtool.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\rhtools14e.zip/rhtools.asp
已删除：木马程序 Trojan-Downloader.Win32.Agent.ahbj        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\serial.Microsoft.Live.OneCare.2.0c3098.exe
已删除：广告程序 not-a-virus:AdWare.Win32.BHO.cwd        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\setup.exe//PE_Patch.UPX//UPX//data0001//PE_Patch.UPX//UPX
已删除：风险软件 not-a-virus:FraudTool.Win32.RegCleanerXP.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\setup_rcxp.exe//UPX
已删除：风险软件 not-a-virus:AdTool.Win32.Zango.s        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\setupchamber2848.exe//UPX
已删除：风险软件 not-a-virus:AdTool.Win32.Zango.s        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\setupdavid2365.exe//UPX
已删除：风险软件 not-a-virus:AdTool.Win32.Zango.s        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\setuplibrary2797.exe//UPX
已删除：风险软件 not-a-virus:AdTool.Win32.Zango.s        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\setupzangotv2593.exe//UPX
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\wmcodec_update(1).exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\wmcodec_update(2).exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\wmcodec_update(3).exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\wmcodec_update(4).exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\wmcodec_update(5).exe
已删除：木马程序 Trojan-Downloader.Win32.Hoaxer.a        文件　: D:\TDDownload\其它\新建文件夹\新建文件夹\wmcodec_update.exe

TO KL

（有12个是重复的，因此只上报2个……）

[ 本帖最后由 sbbdms 于 2008-9-29 19:32 编辑 ]

Palkia

有1个是12M~

wangjay1980

国外就是流行BANKER

The EQs

原帖由 wangjay1980 于 2008-9-29 19:35 发表
国外就是流行BANKER

这里面都没有banker。。。。。。。。。。。。

醉一生爱妍

我只是见到了fruadtools...

megakotaro

紅傘：50/60
其餘回報

woai_jolin

FakeAlert啊FakeAlert  zlob啊zlob