找MTV的时候的居然进了毒网~

显示全部楼层 · 发表于 2007-4-13 12:28:14

http://mtv.uying.com/html/20051117/23113525906.stm

我找什么都差不多都进到有毒网的站~~!!

显示全部楼层 · 发表于 2007-4-13 12:32:31

直接把它抓来了：是个ANI。。。

显示全部楼层 · 发表于 2007-4-13 12:33:19

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\ani.rar'
C:\Documents and Settings\morgan\My Documents\
  ani.rar
[0] Archive type: RAR
--> ani.com
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-13 12:42:34

原帖由 曲中求 于 2007-4-13 12:32 发表
直接把它抓来了：是个ANI。。。

不止是ANI哦，还有一个MS06-014的，http://ceoww.com/in.htm

捉了几个样本

显示全部楼层 · 发表于 2007-4-13 12:46:42

扫的四楼的样本.

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\TEMP.rar'
C:\Documents and Settings\Administrator\桌面\TEMP.rar
  [0] Archive type: RAR
  --> TEMP\cha.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> TEMP\caspc.asp
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> TEMP\123a.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    A backup was created as '466c0b9b.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-13 12:48:59

4楼的avast!下载即报

显示全部楼层 · 发表于 2007-4-13 12:59:12

杀了4个

显示全部楼层 · 发表于 2007-4-13 13:00:54

avast!扫描结果

显示全部楼层 · 发表于 2007-4-13 13:08:04

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-13
Start time: 2007-4-13 13:07
Engine(s): KAV engine (AVK 17.4015), BD-Engine (BD 17.3672)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: TEMP\cha.exe
In archive: C:\Documents and Settings\Administrator\桌面\TEMP.rar
Status: Virus detected
Virus: Generic.PWStealer.A0B13EC8 (BD-Engine)
Object: TEMP\caspc.asp
In archive: C:\Documents and Settings\Administrator\桌面\TEMP.rar
Status: Virus detected
Virus: Exploit.Win32.MS05-002.Gen (BD-Engine)
Object: TEMP\123a.exe
In archive: C:\Documents and Settings\Administrator\桌面\TEMP.rar
Status: Virus detected
Virus: Generic.PWStealer.A0B13EC8 (BD-Engine)
Object: TEMP.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Generic.PWStealer.A0B13EC8 (2x), Exploit.Win32.MS05-002.Gen (BD-Engine)
Analysis complete: 2007-4-13 13:07
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-13 13:08:31

Starting the file scan:

Begin scan in 'C:\Documents and Settings\user\桌面\TEMP.rar'
C:\Documents and Settings\user\桌面\TEMP.rar
  [0] Archive type: RAR
  --> TEMP\cha.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> TEMP\caspc.asp
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> TEMP\123a.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    A backup was created as '466c10b2.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: 2007年4月13日  13:09
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   9 Files were scanned
   3 viruses and/or unwanted programs were found
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   6 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

[病毒样本] 找MTV的时候的居然进了毒网~

本帖子中包含更多资源

本帖子中包含更多资源

评分

本帖子中包含更多资源

本帖子中包含更多资源