4个脚本

显示全部楼层 · 发表于 2009-1-24 18:11:01

RT，kis killed one ，to lab

显示全部楼层 · 发表于 2009-1-24 18:14:37

avg 2个

显示全部楼层 · 发表于 2009-1-24 18:17:17

Begin scan in 'C:\Documents and Settings\Owner\桌面\4'
C:\Documents and Settings\Owner\桌面\4\cx[1].htm
[DETECTION] Contains recognition pattern of the HTML/Rce.Gen HTML script virus
[NOTE]    The file was deleted!
C:\Documents and Settings\Owner\桌面\4\cx[1].js
[DETECTION] Contains recognition pattern of the HTML/Shellcode.Gen HTML script virus
[NOTE]    The file was deleted!
C:\Documents and Settings\Owner\桌面\4\fx[1].htm
[DETECTION] Contains recognition pattern of the JS/Dldr.IFrame.JD Java script virus
[NOTE]    The file was deleted!
C:\Documents and Settings\Owner\桌面\4\new[1].htm
[DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2009-1-24 18:19:15

关于:解密的日志(全体输出-  22):

Level 1>http://121.12.173.218/exe1/cx.css  ●
Level 1>http://qq.18i16.net/sina.css  ●
Level 1>http://qq.18i16.net/
Level 1>http://qq.18i16.net/as.htm
Level 1>http://qq.18i16.net/14.htm
Level 2>http://qq.18i16.net/exe1/ms.css  ●
Level 1>http://qq.18i16.net/lzz.htm
Level 2>http://qq.18i16.net/lzz.js
Level 3>http://qq.18i16.net/exe1/lzz.css  ●
Level 1>http://qq.18i16.net/bfyy.htm
Level 2>http://qq.18i16.net/bf.js
Level 3>http://qq.18i16.net/exe1/bf.css  ●
Level 1>http://qq.18i16.net/real10.htm
Level 2>http://qq.18i16.net/exe1/re.css  ●
Level 1>http://qq.18i16.net/real11.htm
Level 2>http://qq.18i16.net/realplay.js
Level 3>http://qq.18i16.net/exe1/real11.css  ●
Level 1>http://qq.18i16.net/new.js
Level 1>http://qq.18i16.net/fx.htm
Level 1>http://qq.18i16.net/cx.htm
Level 2>http://qq.18i16.net/cx.js
Level 3>http://121.12.173.218/exe1/cx.css  ●

日志由 Redoce1.7第17次修正版于 2009-1-24 18:17:40 生成。

顺带解个。。

显示全部楼层 · 发表于 2009-1-24 18:20:55

熟悉的地址。

显示全部楼层 · 发表于 2009-1-24 18:26:53

这个是avast中文站被挂马的脚本，今天刚刚抓到的。。。。我郁闷

显示全部楼层 · 发表于 2009-1-24 20:09:16

C:\Documents and Settings\Administrator.LY\桌面\4\fx[1].htm 已检测: Trojan.IFrame!IK

显示全部楼层 · 发表于 2009-1-24 20:22:37

KV 0

TO KV

显示全部楼层 · 发表于 2009-1-24 20:55:52

rs 0

[病毒样本] 4个脚本

本帖子中包含更多资源