小马一只

显示全部楼层 · 发表于 2009-1-29 17:03:32

小马一只

费尔说：real10漏洞.rar>>new[1].htm JS.RealExploit.d 病毒还未处理

文件 real10______.rar 接收于 2009.01.29 09:55:10 (CET)

结果: 10/39 (25.65%)
反病毒引擎版本最后更新扫描结果
a-squared 4.0.0.93 2009.01.29 -
AhnLab-V3 5.0.0.2 2009.01.29 -
AntiVir 7.9.0.60 2009.01.29 HTML/Malicious.ActiveX.Gen
Authentium 5.1.0.4 2009.01.28 -
Avast 4.8.1281.0 2009.01.28 VBS:Obfuscated-gen
AVG 8.0.0.229 2009.01.28 Exploit
BitDefender 7.2 2009.01.29 Trojan.IFrame.FW
CAT-QuickHeal 10.00 2009.01.29 -
ClamAV 0.94.1 2009.01.29 -
Comodo 951 2009.01.28 -
DrWeb 4.44.0.09170 2009.01.29 -
eSafe 7.0.17.0 2009.01.28 -
eTrust-Vet 31.6.6333 2009.01.29 -
F-Prot 4.4.4.56 2009.01.28 -
F-Secure 8.0.14470.0 2009.01.29 -
Fortinet 3.117.0.0 2009.01.29 -
GData 19 2009.01.29 Trojan.IFrame.FW
Ikarus T3.1.1.45.0 2009.01.29 -
K7AntiVirus 7.10.608 2009.01.28 -
Kaspersky 7.0.0.125 2009.01.29 -
McAfee 5509 2009.01.28 -
McAfee+Artemis 5509 2009.01.28 -
Microsoft 1.4205 2009.01.29 TrojanDownloader:JS/Multibreach.B
NOD32 3809 2009.01.29 -
Norman 6.00.02 2009.01.28 -
nProtect 2009.1.8.0 2009.01.29 -
Panda 9.5.1.2 2009.01.28 -
PCTools 4.4.2.0 2009.01.28 JS.ActiveXploit.Gen
Prevx1 V2 2009.01.29 -
Rising 21.13.42.00 2009.01.23 -
SecureWeb-Gateway 6.7.6 2009.01.29 Script.Malicious.ActiveX.Gen
Sophos 4.38.0 2009.01.29 Mal/Iframe-G
Sunbelt 3.2.1835.2 2009.01.16 -
Symantec 10 2009.01.29 -
TheHacker 6.3.1.5.231 2009.01.29 -
TrendMicro 8.700.0.1004 2009.01.29 -
VBA32 3.12.8.11 2009.01.29 -
ViRobot 2009.1.29.1580 2009.01.29 -
VirusBuster 4.5.11.0 2009.01.28 JS.ActiveXploit.Gen
附加信息
File size: 1998 bytes
MD5...: da3af0e134c9a5139fff363d0de1fd45
SHA1..: a2ad220bd6da93539b84b644a61acca4a3e5f524
SHA256: 72b8233c62c5197d107436d309887e69e8477dda66e8a54538ffb215a0dc7ed8
SHA512: c827930f636de6ad892a015f1461d99406928aef042a0a0066747d4656be55d7
24b1ea5113df44e713136018d0038f94c9b2bea912f96c459a086459c7a47908

ssdeep: 48:8Z8Qy1wT1fxC+qcmgaq23lLZ8Qy1wT1fxC+qcmgaq2k:8O1WBxC+qL7ZO1WBx
C+qLI

PEiD..: -
TrID..: File type identification
RAR Archive (83.3%)
REALbasic Project (16.6%)
PEInfo: -

ht tp://www.virustotal.com/zh-cn/analisis/6005894838e0c717e06f6ff268c2f6da

VirSCAN.org Scanned Report :
Scanned time : 2009/01/29 16:55:16 (CST)
Scanner results: 22%的杀软(8/37)报告发现病毒
File Name    : real10漏洞.rar
File Size    : 1998 byte
File Type    : RAR archive data, v1d, os
MD5          : da3af0e134c9a5139fff363d0de1fd45
SHA1          : a2ad220bd6da93539b84b644a61acca4a3e5f524
Online report  : ht tp://virscan.org/report/39ad703fbdfed0dba8b51924b07042fd.html

Scanner       Engine Ver    Sig Ver          Sig Date Time Scan result
a-squared    4.0.0.29       20090128170451 2009-01-28  4.10 -
安博士V3    2009.01.29.03 2009.01.29       2009-01-29  2.90 -
AntiVir       7.9.0.60       7.1.1.197       2009-01-28  1.89 HTML/Malicious.ActiveX.Gen
安天          2.0.18       20090118.2063925  2009-01-18  0.02 -
Authentium    5.1.1          200901281745    2009-01-28  1.08 -
AVAST!       3.0.1          090128-0       2009-01-28  0.00 -
AVG          7.5.52.442    270.10.15/1922 2009-01-28  1.86 -
BitDefender 7.81008.2617344 7.23380          2009-01-29  2.43 Trojan.IFrame.FW
CA (VET)    9.0.0.143    31.6.6333       2009-01-29  6.06 JS/RealExpolit.C trojan.
ClamAV       0.94.2       8917             2009-01-29  0.00 -
Comodo       3.0          951             2009-01-28  1.69 -
CP Secure    1.1.0.715    2009.01.29       2009-01-29  6.80 -
Dr.Web       4.44.0.9170    2009.01.29       2009-01-29  3.93 -
F-Prot       4.4.4.56       20090128       2009-01-28  1.05 -
F-Secure    5.51.6100    2009.01.29.01    2009-01-29  0.58 -
飞塔          2.81-3.117    9.976          2009-01-28  0.27 -
GData       19.2635/19.201  20090129       2009-01-29  12.65  VBS:Obfuscated-gen [Trj] [Engine:B]
ViRobot       20090128       2009.01.28       2009-01-28  1.41 -
Ikarus       T3.1.01.45    2009.01.29.72228  2009-01-29  3.56 -
江民杀毒    11.0.706       2009.01.29       2009-01-29  4.90 -
卡巴斯基    5.5.10       2009.01.29       2009-01-29  0.03 -
金山毒霸    2008.9.8.18    2009.1.29.9    2009-01-29  3.23 -
迈克菲       5.3.00       5509             2009-01-28  3.04 -
Microsoft    1.4205       2009.01.29       2009-01-29  11.71  TrojanDownloader:JS/Multibreach.B
mks_vir       2.01          2009.01.28       2009-01-28  2.60 -
Norman       5.93.01       5.93.00          2009-01-20  7.96 -
熊猫卫士    9.05.01       2009.01.28       2009-01-28  4.94 -
趋势科技    8.700-1004    5.804.01       2009-01-28  0.02 -
Quick Heal    10.00          2009.01.29       2009-01-29  3.69 -
瑞星          20.0          21.14.20.00    2009-01-28  0.59 -
Sophos       2.83.3       4.38             2009-01-29  2.23 Mal/Iframe-G
Sunbelt       4786          4786             2009-01-28  13.25  -
赛门铁克    1.3.0.24       20090128.003    2009-01-28  0.04 -
nProtect    20090129.01    3074762          2009-01-29  20.25  Trojan.IFrame.FW
The Hacker    6.3.1.5       v00231          2009-01-29  0.80 -
VBA32       3.12.8.11    20090128.1105    2009-01-28  1.47 -
VirusBuster 4.5.11.10    10.100.41/784710  2009-01-28  0.99 JS.ActiveXploit.Gen

显示全部楼层 · 发表于 2009-1-29 17:04:33

你又来了

显示全部楼层 · 发表于 2009-1-29 17:09:39

html解密出来的:

关于:hxxp://qq.18i16.net/解密的日志(全体输出-  20):

Level 0>http://qq.18i16.net/
Level 1>http://qq.18i16.net/cx.htm
Level 2>http://qq.18i16.net/cx.js
Level 3>http://121.12.173.218/exe1/cx.css  ●
Level 1>http://qq.18i16.net/fx.htm
Level 1>http://qq.18i16.net/new.js
Level 2>http://qq.18i16.net/baidu.cab  ●
Level 1>http://qq.18i16.net/real11.htm
Level 2>http://qq.18i16.net/realplay.js
Level 3>http://qq.18i16.net/exe1/real11.css  ●
Level 1>http://qq.18i16.net/real10.htm
Level 1>http://qq.18i16.net/bfyy.htm
Level 2>http://qq.18i16.net/bf.js
Level 3>http://qq.18i16.net/exe1/bf.css  ●
Level 1>http://qq.18i16.net/lzz.htm
Level 2>http://qq.18i16.net/lzz.js
Level 3>http://qq.18i16.net/exe1/lzz.css  ●
Level 1>http://qq.18i16.net/14.htm
Level 2>http://qq.18i16.net/exe1/ms.css  ●
Level 1>http://qq.18i16.net/as.htm

日志由 Redoce1.7第21次修正版于 2009-1-29 17:09:27 生成。

显示全部楼层 · 发表于 2009-1-29 17:11:38

原帖由 killloop 于 2009-1-29 17:04 发表
你又来了

米办法，那是挂在网游的迷你首页上面，经常被挂。

显示全部楼层 · 发表于 2009-1-29 17:48:30

空间是女的
QQ是男的

弄的挺谜语的

[ 本帖最后由 killloop 于 2009-1-29 17:52 编辑 ]

显示全部楼层 · 发表于 2009-1-29 18:03:48

Ka8 0

显示全部楼层 · 发表于 2009-1-29 18:42:31

TO KL

显示全部楼层 · 发表于 2009-1-29 18:42:39

TO KL

显示全部楼层 · 发表于 2009-1-29 18:52:46

NOD miss

显示全部楼层 · 发表于 2009-1-29 19:31:34

伞杀

[病毒样本] 小马一只

本帖子中包含更多资源

本帖子中包含更多资源