吃饭前发个毒网

显示全部楼层 · 发表于 2007-5-9 12:07:11

http://www.citysex.com.cn/

worm加ANI,放上样本

显示全部楼层 · 发表于 2007-5-9 12:10:00

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\3.zip'
C:\Documents and Settings\morgan\My Documents\
  3.zip
[0] Archive type: ZIP
--> xasp[1].htm
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> xuik[1].exe
      [DETECTION] Contains signature of the worm WORM/SdBot.196017
      [WARNING] Infected files in archives cannot be repaired!
--> ~tmp8755.exe
      [DETECTION] Contains signature of the worm WORM/SdBot.196017
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-9 12:12:53

BitDefender Antivirus Plus v10
3.zip=>xasp[1].htm Infected: Exploit.Win32.MS05-002.Gen
3.zip=>xuik[1].exe Infected: Generic.Malware.WBdld.DFEBE15C
3.zip=>~tmp8755.exe Infected: Generic.Malware.WBdld.DFEBE15C

显示全部楼层 · 发表于 2007-5-9 12:14:57

名字都没变，还是那几个
detected: malware Exploit.Win32.IMG-ANI.ac File: C:\Documents and Settings\Owner\×ÀÃæ\3.zip/xasp[1].htm
detected: virus Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\3.zip/xuik[1].exe//FSG
detected: virus Invader (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\3.zip/~tmp8755.exe//FSG

显示全部楼层 · 发表于 2007-5-9 12:23:56

MCAFEE又是报ANI加MS06-014漏洞

显示全部楼层 · 发表于 2007-5-9 12:29:00

显示全部楼层 · 发表于 2007-5-9 12:48:20

已删除: 恶意程序 Exploit.Win32.IMG-ANI.ac 文件: C:\Documents and Settings\Administrator\桌面\3.zip/xasp[1].htm
已删除: 病毒 Invader (修改) 文件: C:\Documents and Settings\Administrator\桌面\3.zip/xuik[1].exe//FSG
已删除: 病毒 Invader (修改) 文件: C:\Documents and Settings\Administrator\桌面\3.zip/~tmp8755.exe//FSG

显示全部楼层 · 发表于 2007-5-9 15:57:23

PCC殺一個

显示全部楼层 · 发表于 2007-5-9 15:59:20

Scan performed at: 2007-5-9 15:59:25
Scanning Log
NOD32 version 2251 (20070509) NT
Command line: C:\Documents and Settings\EQ2\桌面\3.zip
Operating memory - is OK

Date: 9.5.2007 Time: 15:59:30
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\3.zip
C:\Documents and Settings\EQ2\桌面\3.zip ?ZIP ?xasp[1].htm - a variant of Win32/TrojanDownloader.Ani.Gen trojan
C:\Documents and Settings\EQ2\桌面\3.zip ?ZIP ?xuik[1].exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\3.zip ?ZIP ?~tmp8755.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 4
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 15:59:30 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-5-9 18:30:58

一个下载者　　和一个ani

[病毒样本] 吃饭前发个毒网

本帖子中包含更多资源

本帖子中包含更多资源