用犀牛抓了支给大家玩儿

jlennon

这年头真的是...........胡萝卜也不可靠了

刚去常呆的网站转了一圈儿，犀牛马上报警，一看不对劲，赶紧捞下来

jlennon

又是ANI ，烦不繁琐啊

jlennon

网络延迟，SO.............发重复了

The EQs

Scan performed at: 2007-4-3 1:39:54
Scanning Log
NOD32 version 2163 (20070402) NT
Command line: C:\Documents and Settings\EQ2\桌面\1[1]jpg.rar C:\Documents and Settings\EQ2\桌面\1[1].rar
Operating memory - is OK

Date: 3.4.2007  Time: 01:39:58
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\1[1]jpg.rar; C:\Documents and Settings\EQ2\桌面\1[1].rar
C:\Documents and Settings\EQ2\桌面\1[1]jpg.rar ?RAR ?1[1].jpg - a variant of Win32/TrojanDownloader.Ani.Gen trojan
C:\Documents and Settings\EQ2\桌面\1[1].rar ?RAR ?1[1].exe - Win32/PSW.Delf.NGG trojan - was a part of the deleted object
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 01:39:58 Total scanning time: 0 sec (00:00:00)

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\1[1]jpg.rar'
C:\Documents and Settings\morgan\My Documents\
  1[1]jpg.rar
    [0] Archive type: RAR
    --> 1[1].jpg
        [DETECTION] Contains signature of the exploits EXP/MS05-002.Ani.A
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\1[1].rar'
C:\Documents and Settings\morgan\My Documents\
  1[1].rar
    [0] Archive type: RAR
    --> 1[1].exe
        [DETECTION] Is the Trojan horse TR/PSW.Steal.27486
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

剑指七星

已检测到: 恶意程序 Exploit.Win32.IMG-ANI.k        URL: http:/bbs.kafan.cn/attachment.php?aid=51005/1[1].jpg
已检测到: 木马程序 Trojan-PSW.Win32.Delf.qc        URL: http:/bbs.kafan.cn/attachment.php?aid=51006/1[1].exe/UPX

第一个以前发过的   第二个是新的

蓝色牛仔裤

发现beta蜘蛛跟正式版蜘蛛差距越拉越大了....现在才看到原来多引擎里面dr.web found nothing !

1[1].rar\1[1].exe;C:\Documents and Settings\Administrator\桌面\1[1].rar;Trojan.PWS.Gamania.origin;;
1[1].rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
1[1]jpg.rar\1[1].jpg;C:\Documents and Settings\Administrator\桌面\1[1]jpg.rar;Trojan.DownLoader.19858;;
1[1]jpg.rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

[ 本帖最后由 蓝色牛仔裤 于 2007-4-3 18:37 编辑 ]

soul20010

FS7.0
Result: 2 malware found
Exploit.Win32.IMG-ANI.k (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\1[1]jpg.rar\1[1].jpg
Trojan-PSW.Win32.Delf.qc (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\1[1].rar\1[1].exe

Anycall-D908

原帖由 jlennon 于 2007-4-3 01:34 发表
这年头真的是...........胡萝卜也不可靠了

刚去常呆的网站转了一圈儿，犀牛马上报警，一看不对劲，赶紧捞下来51003
51004

       胡萝卜是虾米?我不懂哦....

soul20010

LS，这是一个典故，有点H。。。