红伞报的

显示全部楼层 · 发表于 2008-10-4 12:09:05

红伞报的

显示全部楼层 · 发表于 2008-10-4 12:11:46

Begin scan in 'C:\Users\TOSHIBA\Downloads\111.zip.htm'
C:\Users\TOSHIBA\Downloads\111.zip.htm
   [0] Archive type: ZIP
   --> 14[1].htm
   [DETECTION] Contains recognition pattern of the HTML/Rce.Gen HTML script virus
   --> alimoma[1]
   [DETECTION] Contains HEUR/HTML.Malware suspicious code
   --> as[1].htm
   [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.FW Java script virus
   --> ce[1].htm
   [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.FX Java script virus
   --> deal_8_pop[1].htm
   [DETECTION] Contains recognition pattern of the HTML/Infected.WebPage.Gen HTML script virus
   --> fx[1].htm
   [DETECTION] Contains HEUR/HTML.Malware suspicious code
   [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.FW Java script virus
   [NOTE] A backup was created as '4917efa2.qua' ( QUARANTINE )
   [NOTE] The file was deleted!

[ 本帖最后由 Kitman 于 2008-10-4 12:23 编辑 ]

显示全部楼层 · 发表于 2008-10-4 12:19:30

nod32也报
C:\Documents and Settings\Administrator\桌面\111.zip > ZIP > as[1].htm - JS/Exploit.CVE-2008-2463 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\111.zip > ZIP > fx[1].htm - JS/TrojanDownloader.Iframe.NBT 特洛伊木马 - 是已删除对象的一部分

显示全部楼层 · 发表于 2008-10-4 12:42:17

Hello,

14[1].htm_ - Trojan-Downloader.JS.Psyme.alp,
alimoma[1] - Trojan-Downloader.JS.Iframe.wt,
as[1].htm_ - Trojan-Downloader.JS.Iframe.wv,
ce[1].htm_ - Trojan-Downloader.JS.Iframe.wu,
deal_8_pop[1].htm_ - Trojan-Downloader.JS.Iframe.ww

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

fx[1].htm_

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Andrey Ladikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-10-4 12:48:47

发现病毒: VBS:Obfuscated-gen [Trj] (引擎 B)
文件: 111[1].zip
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\GHUFWLMB
进程: Maxthon.exe

显示全部楼层 · 发表于 2008-10-4 13:34:03

linkscanner直接block了

第一次這麼神

显示全部楼层 · 发表于 2008-10-4 15:44:52

金山也报了。

显示全部楼层 · 发表于 2008-10-4 16:15:02

卡巴没有任何反应…………

显示全部楼层 · 发表于 2008-10-4 16:26:02

没下下来，就让EAV解决了！

显示全部楼层 · 发表于 2008-10-4 16:32:36

卡巴竟然没报？

[病毒样本] 红伞报的

本帖子中包含更多资源

浏览过的版块