小红伞抓的病毒样本

卡巴专家

VT上10个杀软报

尤金卡巴斯基

MISS,To KL

兵者

NOD32 不报

尤金卡巴斯基

Hello.

cl4[1].htm - Trojan-Downloader.JS.Iframe.yq


New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

qianwenxiang

关于:解密的日志(全体输出-  7):

Level 1>http://www.csccx.cn/flash.htm
Level 1>http://www.csccx.cn/14.htm
Level 2> http://www.2sdo.cn/down/360tray.exe  ●
Level 1>http://www.csccx.cn/xx.htm
Level 1>http://www.csccx.cn/lz.htm
Level 1>http://www.csccx.cn/re10.htm
Level 1>http://www.csccx.cn/re11.htm

尤金卡巴斯基

AhnLab-V3	2008.11.11.0	2008.11.10	-
AntiVir	7.9.0.30	2008.11.11	TR/Hijacker.Gen
Authentium	5.1.0.4	2008.11.11	W32/NewMalware-Rootkit-PX-based!Maximus
Avast	4.8.1248.0	2008.11.10	Win32:Warezov-MF
AVG	8.0.0.161	2008.11.11	-
BitDefender	7.2	2008.11.11	Generic.Malware.P!dldPk!g.E87F10AD
CAT-QuickHeal	9.50	2008.11.11	-
ClamAV	0.94.1	2008.11.11	-
DrWeb	4.44.0.09170	2008.11.11	Trojan.DownLoader.origin
eSafe	7.0.17.0	2008.11.10	Suspicious File
eTrust-Vet	31.6.6203	2008.11.11	-
Ewido	4.0	2008.11.11	-
F-Prot	4.4.4.56	2008.11.10	W32/NewMalware-Rootkit-PX-based!Maximus
F-Secure	8.0.14332.0	2008.11.11	W32/Malware
Fortinet	3.117.0.0	2008.11.11	-
GData	19	2008.11.11	Generic.Malware.P!dldPk!g.E87F10AD
Ikarus	T3.1.1.45.0	2008.11.11	-
K7AntiVirus	7.10.521	2008.11.10	-
Kaspersky	7.0.0.125	2008.11.11	-
McAfee	5430	2008.11.10	New Malware
Microsoft	1.4104	2008.11.11	Trojan:Win32/AgentBypass.gen!I
NOD32	3602	2008.11.11	probably unknown NewHeur_PE
Norman	5.80.02	2008.11.10	W32/Malware
Panda	9.0.0.4	2008.11.10	Suspicious file
PCTools	4.4.2.0	2008.11.11	-
Prevx1	V2	2008.11.11	Suspicious
Rising	21.03.12.00	2008.11.11	Trojan.DL.Win32.Mnless.bnf
SecureWeb-Gateway	6.7.6	2008.11.11	Trojan.Hijacker.Gen
Sophos	4.35.0	2008.11.11	-
Sunbelt	3.1.1785.2	2008.11.11	Backdoor.Win32.S (vf)
Symantec	10	2008.11.11	-
TheHacker	6.3.1.1.147	2008.11.10	-
TrendMicro	8.700.0.1004	2008.11.11	PAK_Generic.001
VBA32	3.12.8.9	2008.11.10	-
ViRobot	2008.11.11.1461	2008.11.11	-
VirusBuster	4.5.11.0	2008.11.10	-

360tray.exe To KL