5个脚本，过的很多

schumi小粉

rt

花间酒

all to avira..

File ID         Filename        Size (Byte)        Result
25338580         5.rar        39.7 KB        OK


A listing of files contained inside archives alongside their results can be found below:File ID         Filename        Size (Byte)        Result
25332605         index2[1].htm         83 Byte         MALWARE
25338581         iplus1[1].htm         647 Byte         UNDER ANALYSIS
25338582         iplus2[1].htm         639 Byte         UNDER ANALYSIS
25338573         search1[1].gif         8.17 KB         MALWARE
25338575         zzy[1].gif         31.77 KB         MALWARE



Please find a detailed report concerning each individual sample below: Filename        Result
 index2[1].htm         MALWARE


The file 'index2[1].htm' has been determined to be 'MALWARE'. Our analysts named the threat HTML/Dldr.Iframe.JZ. The term "HTML/" denotes a script-virus that is able to infect the system using a HTML script.Detection will be added to our virus definition file (VDF) with one of the next updates. 
 Filename        Result
 iplus1[1].htm         UNDER ANALYSIS


The file 'iplus1[1].htm' has been determined to be 'UNDER ANALYSIS'. 
 Filename        Result
 iplus2[1].htm         UNDER ANALYSIS


The file 'iplus2[1].htm' has been determined to be 'UNDER ANALYSIS'. 
 Filename        Result
 search1[1].gif         MALWARE


The file 'search1[1].gif' has been determined to be 'MALWARE'. Our analysts named the threat HTML/PicFrame.Gen. The term "HTML/" denotes a script-virus that is able to infect the system using a HTML script.This malware is detected by a special detection routine from the engine module. 
 Filename        Result
 zzy[1].gif         MALWARE


The file 'zzy[1].gif' has been determined to be 'MALWARE'. Our analysts named the threat HTML/PicFrame.Gen. The term "HTML/" denotes a script-virus that is able to infect the system using a HTML script.This malware is detected by a special detection routine from the engine module.

[ 本帖最后由 lunglungyu 于 2009-5-3 13:12 编辑 ]

saga3721

红伞全杀

kingmuro

过kv

BING126

McAfee miss

黑衣~魂

TO DW

HKLHF

这样的，其实就是被感染以后的文件吧,HTM或者GIF文件，打开以后，最后面多了一段访问恶意网站的连接，只要你运行了这个HTM，然后你 的IE会马上出问题，然后就是DOWN下来那上面的木马或者病毒啦，接下来的情况就蛮复杂的了，也许你的杀软好，有行为分析可以阻止，就是说这个样本不报但是只要病毒行为出来了被拦截也好。以前深受其害，余不敢以身试毒，PCT MISS 但是里面的TF会不会放过，下次搞定了虚拟机再玩！

JusT.Like

HTML:Iframe-inf (4x)

wgh916

大家一起想办法对付了

zhanyuchenbobo

熊猫云miss