网马加一个下载者样本

dayang1717

>http://ccsskkk.cn/new7/feng.htm?02
>http://ccsskkk.cn/new7/au.htm
>http://ccsskkk.cn/new7/re1111.htm
>http://ccsskkk.cn/new7/realdadong.js
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/re1000.htm
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/nf.htm
>[TR.Downloader]http://ccsskkk.cn/1.exe
>http://ccsskkk.cn/new7/ooff.htm
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/163.htm
>http://ccsskkk.cn/new7/wokaono.js
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/lcc.htm
>http://ccsskkk.cn/new7/hohogl.js
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/44.htm
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/s0.htm
>http://ccsskkk.cn/new7/flxx.htm
>http://ccsskkk.cn/new7/fl/ffl.html
>http://ccsskkk.cn/new7/fl/f16.swf
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/fl/f28.swf
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/fl/f45.swf
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/fl/f47.swf
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/fl/f64.swf
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/fl/f115.swf
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/fl/ifl.html
>http://ccsskkk.cn/new7/fl/i16.swf
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/fl/i28.swf
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/fl/i45.swf
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/fl/i47.swf
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/fl/i64.swf
>http://ccsskkk.cn/8.exe
>http://ccsskkk.cn/new7/fl/i115.swf
>http://ccsskkk.cn/8.exe
>http://www.a3168.com/mydown.asp?ver=090203&tgid=8&address=**-**-**-**-**-**
>[TR.Pophot]http://wew2223.cn/new/30.exe
>http://wew2223.cn/new/msn180.exe
>http://wew2223.cn/new/zzz.exe
>http://wew2223.cn/new/css.exe
>http://wew2223.cn/new/shengji.exe

网马是大东的。没什么意思，瑞星全杀，8.exe瑞星扫描不出，过不了咔吧。

ledled

Name: Packed/Upack
Type: Sequence

Description:


Files:
c:\users\administrator\desktop\8.exe

zqmm100

avast: Win32:Agent-SIM

wptyh73hm

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://bbs.kafan.cn/attachment.p ... fc&t=1233921973
Information:  Is the TR/ATRAPS.Gen Trojan  


--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.2.0.74, VDF 7.1.1.235

Sherry.ai

目标...Down Loader

kingmuro

Palkia

畅游都报了好几个

电影结束了

Win32:Agent-SIM [Trj]