hxxp://alizafashion.com/

250662772

关于:hxxp://alizafashion.com/解密的日志(全体输出 -  5):
Level  0>http://alizafashion.com/
Level  1>http://gianttopnano.cn:8080/index.php
Level  2>http://gianttopnano.cn:8080/cache/flash.swf  
Level  2>http://gianttopnano.cn:8080/cache/readme.pdf
Level  3>http://gianttoplocate.cn:8080/landig.php?id=5 ●
网页分析：250662772

幸福的猪猪

load.exe >kaba avira miss,to kill


Hello,

load.exe_ - Trojan.Win32.Agent.cmnr

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

?Filename	Result
load.exe	MALWARE

The file 'load.exe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Dldr.Bredolab.G.9. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 幸福的猪猪 于 2009-6-18 14:55 编辑 ]

shadowmin

你是不是没有升级病毒库，这个我上报了，好像可以查了。
http://analysis.avira.com/sample ... p;incidentid=325767

幸福的猪猪

我这边是最新的病毒库，我看了你给的网址的病毒库是：

The file 'load.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Agent.HBR.2. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.04.101.


这个是我电脑上面小红伞的病毒库：

zwl2828

This website has been reported to contain the following threats:

Malicious software threat: This site contains links to viruses or other software programs that can reveal personal information stored or typed on your computer to malicious persons.