恶意网站

显示全部楼层 · 发表于 2009-10-13 19:59:58

病毒
vae.nna.cc/k/xx.exe

色站
av.9gaoav.com
www.m6mm.info
m6mm.info
www.tube1820.com
tube1820.com

钓鱼
www.comfarmz.cn
www.sc7w.cn
sc7w.cn
qq10000ky.cn/qq/shuhuodong4.asp
www.qqzock.cn
qqzock.cn
www.mir2sdo.biz
www.vip-cctv2.com
www.qqsevice.com.cn
qqsevice.com.cn
www.cctv3-09.cn
cctv3-09.cn

假冒福利彩票网
www.77777cp.cn
77777cp.cn
www.cp63.com
cp63.com
www.fcw088.com
fcw088.com
www.cp479.cn
cp479.cn
www.234068.com
234068.com
www.010968.com
010968.com
www.bjflcp.com
bjflcp.com
www.cp67788.cn
cp67788.cn
www.3d127.cn
3d127.cn
www.70870.cn
70870.cn

显示全部楼层 · 发表于 2009-10-13 21:15:34

用IPneighbors查了下www.tube1820.com这个色站服务器上的其他域名，结果发现了一堆。

都是国外的，全部丢进hosts屏蔽。
色站
www.love-stream.com
www.loveyounggirlz.com
www.marbarmar.com
www.pleasedteens.com
www.porn-keeper.com
www.schoolwench.com
www.teaseagirl.com
www.teenfuckland.com
www.teeniefucked.com
www.teenpussyistight.com
www.teenstgp.net
www.thefuckdolls.com
www.trafficholder.com
www.vestalgirls.com
www.xfusioncash.com
xteenparty.com
xvideoteens.com
yoslut.com
youngcloseup.com
teenland.biz
teensart.com
teenscheaply.com
teenxvog.com
vickyclips.com
vickyfuck.com
vickyglam.comfictionsex.com
ilovesexxx.net
katrina.teensart.com
vickynaked.com
vickytube.com

[ 本帖最后由 RandomOS 于 2009-10-13 21:24 编辑 ]

显示全部楼层 · 发表于 2009-10-14 00:15:24

url and sample to kl

显示全部楼层 · 发表于 2009-10-14 00:37:02

xx.exe - Worm.Win32.AutoRun.ayta

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2009-10-14 00:43:46

Checking: http://vae.nna.cc/k/xx.exe
Engine version: 5.0.0.12182
Total virus-finding records: 659168
File size: 24.27 KB
File MD5: 3a05be88aee855f77599842a90372997

http://vae.nna.cc/k/xx.exe packed by UPACK
>http://vae.nna.cc/k/xx.exe infected with Trojan.MulDrop.origin
>http://vae.nna.cc/k/xx.exe packed by XOREXE
>>http://vae.nna.cc/k/xx.exe - archive BINARYRES
>>>http://vae.nna.cc/k/xx.exe/data001 packed by XOREXE
>>>>http://vae.nna.cc/k/xx.exe/data001 - Ok
>>>http://vae.nna.cc/k/xx.exe/data002 packed by XOREXE
>>>>http://vae.nna.cc/k/xx.exe/data002 infected with Trojan.KillProc.1565

显示全部楼层 · 发表于 2009-10-15 12:20:37

FSCS 9.0
xx.exe - Worm.Win32.AutoRun.ayta

[其它] 恶意网站