一些挂马URL

Wesly.Zhang

今天管理360安全卫士论坛时，获得了一些挂马地址，希望有人举报一下！

http://mm.cj-vv.cn:8888/mm/jm/new2.exe

http://www.hoho-3.cn/down/gr.exe

http://mm.cj-vv.cn:8888/mm/la/new6.exe

http://mm.cj-vv.cn:8888/mm/la/new5.exe

http://mm.cj-vv.cn:8888/mm/qt/new3.exe

http://mm.cj-vv.cn:8888/mm/qt/new7.exe

http://mm.cj-vv.cn:8888/mm/lm/new4.exe

http://mm.cj-vv.cn:8888/mm/lm/new6.exe

http://mm.cj-vv.cn:8888/mm/lm/new17.exe

http://mm.cj-vv.cn:8888/mm/lm/new1.exe

http://mm.cj-vv.cn:8888/mm/lm/new7.exe

http://mm.cj-vv.cn:8888/mm/lm/new20.exe

http://mm.cj-vv.cn:8888/mm/lm/new5.exe

http://mm.cj-vv.cn:8888/mm/jx/new4.exe

http://mm.cj-vv.cn:8888/mm/lm/new11.exe

http://mm.cj-vv.cn:8888/mm/lm/new21.exe

http://mm.cj-vv.cn:8888/mm/jx/new10.exe

http://mm.cj-vv.cn:8888/mm/lm/new14.exe

http://mm.cj-vv.cn:8888/mm/lm/new16.exe

http://mm.cj-vv.cn:8888/mm/lm/new10.exe

http://mm.cj-vv.cn:8888/mm/jm/new1.exe

http://mm.cj-vv.cn:8888/mm/lm/new2.exe

http://mm.cj-vv.cn:8888/mm/la/new4.exe

http://mm.cj-vv.cn:8888/mm/la/new3.exe

http://mm.cj-vv.cn:8888/mm/jx/new2.exe

http://mm.cj-vv.cn:8888/mm/jx/new7.exe

http://mm.cj-vv.cn:8888/mm/qt/new8.exe

http://mm.cj-vv.cn:8888/mm/qt/new5.exe

http://mm.cj-vv.cn:8888/mm/qt/new6.exe

http://mm.cj-vv.cn:8888/mm/jx/new3.exe

http://mm.cj-vv.cn:8888/mm/lm/new8.exe

http://mm.cj-vv.cn:8888/mm/lm/new12.exe

http://mm.cj-vv.cn:8888/mm/jx/new5.exe

http://mm.cj-vv.cn:8888/mm/qt/new1.exe

[ 本帖最后由 Wesly.Zhang 于 2009-6-12 20:41 编辑 ]

Sherry.ai

killer_rodog.exe...机器狗专杀

Wesly.Zhang

一步小心把360的专杀下载地址也报告了，已经修正了。

schumi小粉

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\3.exe - Win32/PSW.Legendmir.NGZ 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\34.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\gr.exe - Win32/TrojanDownloader.Agent.PDX 特洛伊木马

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new1.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new10.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new100.exe - 可能是 Win32/PSW.OnLineGames.NSU 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new101.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new11.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new122.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new131.exe - Win32/PSW.QQPass.NEH 特洛伊木马

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new14.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new16.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new17.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new2.exe - Win32/PSW.OnLineGames.OIX 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new20.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new200.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new201.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new21.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new3.exe - Win32/TrojanDownloader.Agent.OQW 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new300.exe - Win32/PSW.OnLineGames.NSU 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new4.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new400.exe - Win32/PSW.OnLineGames.NUO 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new41.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new5.exe - Win32/PSW.OnLineGames.NSU 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new51.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new512.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new532.exe - Win32/Rootkit.Agent.NLR 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new6.exe - Win32/PSW.OnLineGames.NSU 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new61.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new7.exe - Win32/PSW.Legendmir.NGZ 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new71.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new721.exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new812.exe - 可能是 Win32/Genetik 特洛伊木马 的变种

C:\Documents and Settings\Administrator\桌面\新建文件夹\virus\new821.exe - Win32/KillAV.NDC 特洛伊木马 的变种

Nod32清空，打包上传~~~

Sebastian

Starting the file scan:

Begin scan in 'D:\kafan\virus'
D:\kafan\virus\3.exe
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\34.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\gr.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new1.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new10.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new100.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new101.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new11.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new122.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new131.exe
    [DETECTION] Is the TR/Crypt.UPKM.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new14.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new16.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new17.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new2.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new20.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new200.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new201.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new21.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new3.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new300.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Is the TR/PSW.OnlineGames.vcar Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new4.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new400.exe
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new41.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new5.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new51.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new512.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new532.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new6.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Is the TR/PSW.Wow.pnt Trojan
      --> Object
        [DETECTION] Is the TR/PSW.OnlineGames.bmcp Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new61.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new7.exe
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new71.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new721.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
D:\kafan\virus\new812.exe
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      The file was moved to '4aaa90e3.qua'!
D:\kafan\virus\new821.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!


End of the scan: 2009年6月13日  19:41
Used time: 00:03 Minute(s)

The scan has been done completely.

      1 Scanned directories
     34 Files were scanned
     35 Viruses and/or unwanted programs were found
      1 Files were classified as suspicious
     33 files were deleted
      0 Viruses and unwanted programs were repaired
      1 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
     -2 Files not concerned
      0 Archives were scanned
      0 Warnings
     34 Notes

黑衣~魂

DR.WEB
data002;C:\Documents and Settings\all\桌面;Archive contains infected objects;;
data003;C:\Documents and Settings\all\桌面;Archive contains infected objects;;
sss.exe;C:\Documents and Settings\all\桌面;Container contains infected objects;Invalid path to file ;
new300.exe;C:\Documents and Settings\all\桌面\virus\virus;Container contains infected objects;Deleted.;
new6.exe;C:\Documents and Settings\all\桌面\virus\virus;Container contains infected objects;Deleted.;
new812.exe;C:\Documents and Settings\all\桌面\virus\virus;Probably BACKDOOR.Trojan;Renamed.;
sss.exe/data003\s.exe;C:\Documents and Settings\all\桌面\sss.exe/data003;Probably DLOADER.Trojan;;
new821.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.AVKill.origin;Deleted.;
new3.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.DownLoad.31345;Deleted.;
sss.exe/data002\p.dll.zgx;C:\Documents and Settings\all\桌面\sss.exe/data002;Trojan.DownLoad.38409;;
gr.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.MulDrop.30754;Deleted.;
new532.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.MulDrop.31900;Deleted.;
new5.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Gamania.18753;Deleted.;
new131.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Gamania.19070;Deleted.;
new300.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Gamania.origin;Invalid path to file ;
new6.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Gamania.origin;Invalid path to file ;
3.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Legmir.2631;Deleted.;
new7.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Legmir.2631;Deleted.;
new14.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.11386;Deleted.;
new2.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.11749;Deleted.;
new51.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.11776;Deleted.;
new17.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.11788;Deleted.;
new20.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.11809;Deleted.;
new721.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.11811;Deleted.;
new101.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12035;Deleted.;
new11.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12035;Deleted.;
new16.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12035;Deleted.;
new4.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12035;Deleted.;
new61.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12035;Deleted.;
new71.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12035;Deleted.;
new122.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12041;Deleted.;
new512.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12042;Deleted.;
new200.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12056;Deleted.;
new21.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12056;Deleted.;
34.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12059;Deleted.;
new1.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12059;Deleted.;
new10.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12059;Deleted.;
new201.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12059;Deleted.;
new41.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12059;Deleted.;
new400.exe;C:\Documents and Settings\all\桌面\virus\virus;Trojan.PWS.Wsgame.12083;Deleted.;
new6.exe\data002;C:\Documents and Settings\all\桌面\virus\virus\new6.exe;Trojan.Starter.1021;;
new300.exe\data002;C:\Documents and Settings\all\桌面\virus\virus\new300.exe;Trojan.Starter.979;;