http://74.52.238.242/~carwash/bayxsrh/0fek8x7.html

knifed

关于:hxxp://74.52.238.242/~carwash/bayxsrh/0fek8x7.html解密的日志(全体输出 -  3):

Level  0>http://74.52.238.242/~carwash/bayxsrh/0fek8x7.html
Level  1>http://xbx.tw/in.cgi?3
Level  2>http://esli.tw/2/getexe.php

日志由 Redoce2.0第15次修正版于 2009-7-22 11:17:49 生成。

fanture

小红伞报
Virus or unwanted program 'HEUR/HTML.Malware [heuristic]'
detected in file 'C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\EQAVGPQU\0fek8x7[1].htm.
Action performed: Move file to quarantine
另网盾
[2009-07-22 13:13:43] 成功阻止iexplore.exe访问esli.tw/2/index.php，此页面含有微软Access漏洞攻击恶意

[ 本帖最后由 fanture 于 2009-7-22 13:17 编辑 ]

幸福的猪猪

to avira kill。

A listing of files contained inside archives alongside their results can be found below:

File ID	?Filename	Size (Byte)	Result
25404838	load.exe	85 KB	MALWARE

Please find a detailed report concerning each individual sample below:

?Filename	Result
load.exe	MALWARE

The file 'load.exe' has been determined to be 'MALWARE'.
Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.




to kv kill。

[ 本帖最后由 幸福的猪猪 于 2009-7-22 15:58 编辑 ]

尤金卡巴斯基

原帖由 幸福的猪猪 于 2009-7-22 14:15 发表
to avira kill。

A listing of files contained inside archives alongside their results can be found below:
File ID?FilenameSize (Byte)Result25404838 load.exe 85 KB MALWARE
Please find a detailed re ...

2009/7/22 23:00:41 已清除 木马程序 Trojan-Proxy.Win32.Agent.bqi G:\Temp\Virus\load.rar/load.exe