3x 可能有点相同吧！

幸福的猪猪

hxxp://y.hd3s.cn/d2/a1/all.htm
hxxp://y.hd3s.cn/d1/03/all.htm
hxxp://y.hd3s.cn/d1/06/all.htm

>以上挂马网页，上报kaba！


其下载物地址：（kaba heur，to kill ！恶意程序下载地址上报kaba）
hxxp://d1.456363.com/01/e.exe
hxxp://d1.456363.com/01/e1.exe

Hello,

e.exe_ - Trojan.Win32.AntiAV.aun

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由 幸福的猪猪 于 2009-4-3 09:28 编辑 ]

幸福的猪猪

运行之后，得到的下载列表：（kaba miss 4x ，heur 1x,以打包上传）（kaba miss+heur.zip and url filtering to kaba kill)
再附送一个赠品，kaba heur出来的Hupigon   >1.rar  (to kaba kill )

hxxp://u8.739292.com/sb/ko.exe
hxxp://u1.739292.com/la/L2.exe
hxxp://u1.739292.com/la/L4.exe
hxxp://u3.739292.com/lm/S8.exe
hxxp://u3.739292.com/lm/S1.exe
hxxp://u3.739292.com/lm/S10.exe
hxxp://u9.739292.com/cj/a1.exe
hxxp://u2.739292.com/gz/G1.exe
hxxp://u2.739292.com/gz/G5.exe
hxxp://u2.739292.com/gz/G31.exe
hxxp://u2.739292.com/gz/G4.exe
hxxp://u2.739292.com/gz/G39.exe
hxxp://u2.739292.com/gz/G37.exe
hxxp://u2.739292.com/gz/G33.exe
hxxp://u2.739292.com/gz/G32.exe
hxxp://u2.739292.com/gz/G35.exe
hxxp://u2.739292.com/gz/G15.exe
hxxp://u2.739292.com/gz/G12.exe
hxxp://u2.739292.com/gz/G9.exe
hxxp://u2.739292.com/gz/G22.exe
hxxp://u4.739292.com/gb/B11.exe
hxxp://u4.739292.com/gb/B6.exe
hxxp://u4.739292.com/gb/B2.exe
hxxp://u4.739292.com/gb/B3.exe
hxxp://u4.739292.com/gb/B7.exe
hxxp://u9.739292.com/cj/a2.exe
hxxp://u9.739292.com/cj/a10.exe
hxxp://u9.739292.com/cj/a6.exe
hxxp://u9.739292.com/cj/q1.exe
hxxp://u9.739292.com/cj/q2.exe
hxxp://u9.739292.com/cj/a8.exe
hxxp://u8.739292.com/sb/01.exe
hxxp://u9.739292.com/cj/sb.exe

[ 本帖最后由 幸福的猪猪 于 2009-4-3 10:04 编辑 ]

mox

e=g=e1=g1=X牛？
http://d3.456783.com/03/g.exe
-->http://g.nbr8.com/01/xfz.txt