http://theyaredead.net/123/1/in.php

shadowmin

关于:hxxp://theyaredead.net/123/1/in.php解密的日志(全体输出 -  9):
Level  0>http://theyaredead.net/123/1/in.php
Level  1>http://theyaredead.net/123/1/load.php?id=5
Level  1>http://theyaredead.net/123/1/load.php?id=1
Level  1>http://theyaredead.net/123/1/load.php?id=5
Level  1>http://theyaredead.net/123/1/pdf.php
Level  2>http://theyaredead.net/123/1/load.php?id=2
Level  2>http://theyaredead.net/123/1/load.php?id=4
Level  2>http://theyaredead.net/123/1/load.php?id=3
Level  1>http://theyaredead.net/123/1/swf.php
日志由 Redoce2.0第15次修正版于 2009-7-20 6:51:52 生成。

幸福的猪猪

kaspersky miss，to kill。（load.exe)

avira heuristics，to kill。（load.exe)


We received the following archive files:

File ID	?Filename	Size (Byte)	Result
25402489	1.rar	21.41 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	?Filename	Size (Byte)	Result
25402490	load	23 KB	MALWARE

Please find a detailed report concerning each individual sample below:

?Filename	Result
load	MALWARE

The file 'load' has been determined to be 'MALWARE'.
Our analysts named the threat Worm/Autorun.asbb. The term "WORM/" denotes a worm that is able to spread itself for instance over the Internet (using eMail, peer-to-peer networks, IRC networks etc.).

[ 本帖最后由 幸福的猪猪 于 2009-7-21 05:20 编辑 ]

328397663

原帖由 幸福的猪猪 于 2009-7-20 07:46 发表
kaspersky miss，to kill。（load.exe)

avira heuristics，to kill。（load.exe)

load - Worm.Win32.AutoRun.asbb

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.