faicai脚本 11x 更新

FLogo

别人发现的恶意网站，我来上报！

kaba启发恶意网页!

to kaba kill,waiting for reply。。。

TDDOWNLOAD.rar (1.exe-10.exe)---Trojan-Dropper.Win32.Agent.agil

faicai.zip

Hello,

14.htm_ - Trojan-Downloader.HTML.Agent.oi,
as.htm_ - Trojan.JS.Agent.nf,
bf2.htm_ - Trojan.JS.Agent.ng,
cx1.htm_ - Trojan-Downloader.JS.Agent.dmh,
flink.htm_ - Exploit.JS.RealPlr.ow,
ilink.htm_ - Exploit.JS.RealPlr.ox,
llzz.htm_ - Trojan.JS.Agent.nh,
office.htm_ - Trojan-Downloader.JS.Agent.dmi,
re10.htm_ - Trojan.JS.Agent.ni,
sa.htm_ - Trojan-Downloader.JS.Agent.dmj

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

re11.htm_

No malicious code was found in this file.

[ 本帖最后由 FLogo 于 2009-2-4 13:47 编辑 ]

axishero

AVG 8

"Scan ""Shell extension scan"" was finished."
"Infections";"3";"0";"3"
"Information";"10"
"Folders selected for scanning:";"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar;"
"Scan started:";"2009年2月4日, 8:08:11"
"Scan finished:";"2009年2月4日, 8:08:22 (11 second(s))"
"Total object scanned:";"18"
"User who launched the scan:";"Administrator"

"Infections"
"File";"Infection";"Result"
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar";"Virus identified JS/Downloader.Agent";"Infected"
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\re1000.htm";"Virus found Exploit";"Infected"
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\re1111.htm";"Virus identified JS/Downloader.Agent";"Infected"

"Information"
"File";"Infection";"Result"
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\1.exe";"Runtime packed upack";""
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\10.exe";"Runtime packed upack";""
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\2.exe";"Runtime packed upack";""
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\3.exe";"Runtime packed upack";""
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\4.exe";"Runtime packed upack";""
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\5.exe";"Runtime packed upack";""
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\6.exe";"Runtime packed upack";""
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\7.exe";"Runtime packed upack";""
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\8.exe";"Runtime packed upack";""
"C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar:\TDDOWNLOAD\9.exe";"Runtime packed upack";""

axishero

费尔

Date,Virus Name,Virus Type,User,Filename,Scan Type
2009/2/4 8:12:06,JS.RealExploit.c,病毒,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\re1000.htm,Manual scan
2009/2/4 8:12:06,JS.Decoder.am,病毒,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\nf.htm,Manual scan
2009/2/4 8:12:05,Trojan.Cap9242.ezzh,木马,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\10.exe,Manual scan
2009/2/4 8:12:05,Trojan.Cap9242.wfsz,木马,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\1.exe,Manual scan
2009/2/4 8:11:24,JS.RealExploit.c,病毒,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\re1000.htm,Manual scan
2009/2/4 8:11:24,JS.Decoder.am,病毒,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\nf.htm,Manual scan
2009/2/4 8:11:24,Trojan.Cap9242.ezzh,木马,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\10.exe,Manual scan
2009/2/4 8:11:24,Trojan.Cap9242.wfsz,木马,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\1.exe,Manual scan
2009/2/4 8:08:55,JS.RealExploit.c,病毒,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\re1000.htm,Manual scan
2009/2/4 8:08:55,JS.Decoder.am,病毒,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\nf.htm,Manual scan
2009/2/4 8:08:55,Trojan.Cap9242.ezzh,木马,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\10.exe,Manual scan
2009/2/4 8:08:55,Trojan.Cap9242.wfsz,木马,Administrator,C:\Users\Administrator\Desktop\test\TDDOWNLOAD.rar>>TDDOWNLOAD\1.exe,Manual scan

西风萧雨

[localimg=296,353]6[/localimg][localimg=296,351]7[/localimg]

西风萧雨

kingmuro

ledled

剩下17个 MISS,上报VB

hj5abc

14.htm      1.47 KB      UNDER ANALYSIS
163.htm      524 Byte      UNDER ANALYSIS
44.htm      10.65 KB      UNDER ANALYSIS
as.htm      3.06 KB      UNDER ANALYSIS
flink.html      1.21 KB      UNDER ANALYSIS
ilink.html      1.2 KB      UNDER ANALYSIS
nf.htm      2.21 KB      UNDER ANALYSIS
office.htm      3.53 KB      UNDER ANALYSIS
sa.htm      481 Byte      UNDER ANALYSIS

Palkia

rs kill
1

schumi小粉

C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD.rar > RAR > TDDOWNLOAD\1.exe - Win32/AutoRun.Delf.AK 蠕虫 的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD.rar > RAR > TDDOWNLOAD\10.exe - Win32/AutoRun.Delf.AK 蠕虫 的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD.rar > RAR > TDDOWNLOAD\2.exe - Win32/AutoRun.Delf.AK 蠕虫 的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD.rar > RAR > TDDOWNLOAD\3.exe - Win32/AutoRun.Delf.AK 蠕虫 的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD.rar > RAR > TDDOWNLOAD\4.exe - Win32/AutoRun.Delf.AK 蠕虫 的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD.rar > RAR > TDDOWNLOAD\5.exe - Win32/AutoRun.Delf.AK 蠕虫 的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD.rar > RAR > TDDOWNLOAD\6.exe - Win32/AutoRun.Delf.AK 蠕虫 的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD.rar > RAR > TDDOWNLOAD\7.exe - Win32/AutoRun.Delf.AK 蠕虫 的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD.rar > RAR > TDDOWNLOAD\8.exe - Win32/AutoRun.Delf.AK 蠕虫 的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD.rar > RAR > TDDOWNLOAD\9.exe - Win32/AutoRun.Delf.AK 蠕虫 的变种 - 是已删除对象的一部分