查看: 3207|回复: 9
收起左侧

[病毒样本] 前几天在google地图里面找到的脚本

[复制链接]
The EQs
发表于 2007-5-19 05:00:45 | 显示全部楼层 |阅读模式
当时只有nod32杀。。。不知道现在有多少杀软可以杀


Hello.
New malicious software was found in the attached file (Trojan-Downloader.JS.Agent.ge).
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
-----------------
Regards, Kirill Erakhtin
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.




> Attachment: mapabcrouting[1].rar

>  Hello
>     Is it a new virus?The password:virus

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
绅博周幸
发表于 2007-5-19 05:55:30 | 显示全部楼层
提交给AVAST了
foxhound
发表于 2007-5-19 06:31:32 | 显示全部楼层
KIS 6.0.2.621飘过了。。。。。
金剑
头像被屏蔽
发表于 2007-5-19 07:10:05 | 显示全部楼层
不怎么地
金剑
头像被屏蔽
发表于 2007-5-19 07:11:16 | 显示全部楼层
<html><head><title>google Routing</title></head><body>
<script language=javascript>
var routetext= '';routetext='PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48Um91dGluZ0ogT0s9IlQiPjxD#_base64codenn_#b3VudD4xMzwvQ291bnQ+PEl0ZW0+PFR1cm4+PC9UdXJuPjxSb2FkPumrmOaigeahpeS4nOW3tzwv#_base64codenn_#Um9hZD48RGlyZT7kuJzljZc8L0RpcmU+PERpc3Q+NTM8L0Rpc3Q+PC9JdGVtPjxJdGVtPjxUdXJu#_base64codenn_#PuWPs+i9rDwvVHVybj48Um9hZD7opb/nm7Tpl6jlpJblpKfooZfovoXot688L1JvYWQ+PERpcmU+#_base64codenn_#6KW/PC9EaXJlPjxEaXN0PjUyMzwvRGlzdD48L0l0ZW0+PEl0ZW0+PFR1cm4+6Z2g5Y+zPC9UdXJu#_base64codenn_#PjxSb2FkPuilv+ebtOmXqOWkluWkp+ihl+i+hei3rzwvUm9hZD48RGlyZT7opb88L0RpcmU+PERp#_base64codenn_#c3Q+MjQwPC9EaXN0PjwvSXRlbT48SXRlbT48VHVybj7lt6bovaw8L1R1cm4+PFJvYWQ+5YyX5bGV#_base64codenn_#5qGlPC9Sb2FkPjxEaXJlPuWNlzwvRGlyZT48RGlzdD4xNzg8L0Rpc3Q+PC9JdGVtPjxJdGVtPjxU#_base64codenn_#dXJuPuWPs+i9rDwvVHVybj48Um9hZD7opb/nm7Tpl6jlpJbljZfot688L1JvYWQ+PERpcmU+6KW/#_base64codenn_#PC9EaXJlPjxEaXN0PjExMzwvRGlzdD48L0l0ZW0+PEl0ZW0+PFR1cm4+5bem6L2sPC9UdXJuPjxS#_base64codenn_#b2FkPuWxleiniOmmhui3rzwvUm9hZD48RGlyZT7ljZc8L0RpcmU+PERpc3Q+MTU1NDwvRGlzdD48#_base64codenn_#L0l0ZW0+PEl0ZW0+PFR1cm4+5bem6L2sPC9UdXJuPjxSb2FkPumYnOaIkOmXqOWkluWkp+ihlzwv#_base64codenn_#Um9hZD48RGlyZT7kuJw8L0RpcmU+PERpc3Q+OTQ3PC9EaXN0PjwvSXRlbT48SXRlbT48VHVybj7l#_base64codenn_#j7Povaw8L1R1cm4+PFJvYWQ+6Zic5oiQ6Zeo5qGlPC9Sb2FkPjxEaXJlPuWNlzwvRGlyZT48RGlz#_base64codenn_#dD4xOTI8L0Rpc3Q+PC9JdGVtPjxJdGVtPjxUdXJuPumdoOW3pjwvVHVybj48Um9hZD7pmJzmiJDp#_base64codenn_#l6jljZflpKfooZc8L1JvYWQ+PERpcmU+5Y2XPC9EaXJlPjxEaXN0PjE3NTI8L0Rpc3Q+PC9JdGVt#_base64codenn_#PjxJdGVtPjxUdXJuPumdoOW3pjwvVHVybj48Um9hZD7lpI3lhbTpl6jljJflpKfooZc8L1JvYWQ+#_base64codenn_#PERpcmU+5Y2XPC9EaXJlPjxEaXN0PjM4ODwvRGlzdD48L0l0ZW0+PEl0ZW0+PFR1cm4+6Z2g5Y+z#_base64codenn_#PC9UdXJuPjxSb2FkPuWuo+atpumXqOilv+Wkp+ihlzwvUm9hZD48RGlyZT7kuJw8L0RpcmU+PERp#_base64codenn_#c3Q+NDAzMDwvRGlzdD48L0l0ZW0+PEl0ZW0+PFR1cm4+5bem6L2sPC9UdXJuPjxSb2FkPuW5v+Wc#_base64codenn_#uuS4nOS+p+i3rzwvUm9hZD48RGlyZT7ljJc8L0RpcmU+PERpc3Q+ODMwPC9EaXN0PjwvSXRlbT48#_base64codenn_#SXRlbT48VHVybj7lt6bovaw8L1R1cm4+PFJvYWQ+6KW/6ZW/5a6J6KGXPC9Sb2FkPjxEaXJlPuil#_base64codenn_#vzwvRGlyZT48RGlzdD4xNTI8L0Rpc3Q+PC9JdGVtPjwvUm91dGluZ0o+';
var polyline= "MTE2LjM1Mzg5NywzOS45NDA5MjkxNjY2NjY2NiwxMTYuMzUzOTY1LDM5Ljk0MDgyNTgzMzMzMzMz#_base64codenn_#NSwxMTYuMzU0MjAyLDM5Ljk0MDUxMzMzMzMzMzMzNXwxMTYuMzU0MjAyLDM5Ljk0MDUxMzMzMzMz#_base64codenn_#MzMzNSwxMTYuMzUzNjA3LDM5Ljk0MDQ1MjUsMTE2LjM1MzAxOSwzOS45NDA0MDY2NjY2NjY2Nywx#_base64codenn_#MTYuMzUyNDA5LDM5Ljk0MDMzNDE2NjY2NjY2NiwxMTYuMzUyMzcxLDM5Ljk0MDMyNjY2NjY2NjY2#_base64codenn_#NCwxMTYuMzUyMzMzLDM5Ljk0MDMyMjUsMTE2LjM1MTg2NywzOS45NDAyNjUsMTE2LjM1MDAxMywz#_base64codenn_#OS45NDAwMjgzMzMzMzMzMywxMTYuMzQ5NjI0LDM5LjkzOTk2NzUsMTE2LjM0OTA2NywzOS45Mzk4#_base64codenn_#ODc1LDExNi4zNDg2MDksMzkuOTM5NzkyNSwxMTYuMzQ4MTM2LDM5LjkzOTcwMDgzMzMzMzMzfDEx#_base64codenn_#Ni4zNDgxMzYsMzkuOTM5NzAwODMzMzMzMzMsMTE2LjM0ODAwNywzOS45Mzk3MDgzMzMzMzMzMzYs#_base64codenn_#MTE2LjM0NjkxNiwzOS45MzkzMzA4MzMzMzMzNCwxMTYuMzQ2MTUzLDM5LjkzOTA5LDExNi4zNDU1#_base64codenn_#MjcsMzkuOTM4OTE4MzMzMzMzMzN8MTE2LjM0NTUyNywzOS45Mzg5MTgzMzMzMzMzMywxMTYuMzQ1#_base64codenn_#NDUxLDM5LjkzODkwNzUsMTE2LjM0NTQ5NywzOS45Mzg1MTgzMzMzMzMzMzQsMTE2LjM0NTU1LDM5#_base64codenn_#LjkzNzc4MTY2NjY2NjY2NiwxMTYuMzQ1NTA0LDM5LjkzNzQzNSwxMTYuMzQ1NDUxLDM5LjkzNzMw#_base64codenn_#NXwxMTYuMzQ1NDUxLDM5LjkzNzMwNSwxMTYuMzQ0MTc3LDM5LjkzNzQyNzUsMTE2LjM0NDEyMywz#_base64codenn_#OS45Mzc0MzV8MTE2LjM0NDEyMywzOS45Mzc0MzUsMTE2LjM0NDA0NywzOS45Mzc0MzgzMzMzMzMz#_base64codenn_#MywxMTYuMzQzOTk0LDM5LjkzNjgwNSwxMTYuMzQzOTYzLDM5LjkzMjUwMjUsMTE2LjM0Mzk2Mywz#_base64codenn_#OS45MzI0MTgzMzMzMzMzMywxMTYuMzQzOTcxLDM5LjkzMTU3NSwxMTYuMzQzOTQsMzkuOTI5MTkw#_base64codenn_#ODMzMzMzMzQsMTE2LjM0Mzk1NSwzOS45MjgxOTE2NjY2NjY2NiwxMTYuMzQzOTMzLDM5LjkyODE5#_base64codenn_#MTY2NjY2NjY2LDExNi4zNDQwMDEsMzkuOTI3MTAwODMzMzMzMzM0LDExNi4zNDQwNzgsMzkuOTI1#_base64codenn_#ODQxNjY2NjY2NjYsMTE2LjM0NDIzLDM5LjkyMzMzNTgzMzMzMzMzfDExNi4zNDQyMywzOS45MjMz#_base64codenn_#MzU4MzMzMzMzMywxMTYuMzQ0MzYsMzkuOTIzMTY0MTY2NjY2NjY2LDExNi4zNDY1MDQsMzkuOTIz#_base64codenn_#MjAyNSwxMTYuMzQ4NTcxLDM5LjkyMzIxNzUsMTE2LjM1MDczLDM5LjkyMzI3NDE2NjY2NjY2Niwx#_base64codenn_#MTYuMzUxODQ0LDM5LjkyMzMzNTgzMzMzMzMzLDExNi4zNTI5NjYsMzkuOTIzMzY1ODMzMzMzMzM1#_base64codenn_#LDExNi4zNTMwMTIsMzkuOTIzMzcsMTE2LjM1NTUyMiwzOS45MjM1MDc1fDExNi4zNTU1MjIsMzku#_base64codenn_#OTIzNTA3NSwxMTYuMzU1NTYsMzkuOTIyNjA2NjY2NjY2NjcsMTE2LjM1NTYwNiwzOS45MjIzNzA4#_base64codenn_#MzMzMzMzMywxMTYuMzU1NjUxLDM5LjkyMjI5LDExNi4zNTU2OTcsMzkuOTIyMjM2NjY2NjY2Njcs#_base64codenn_#MTE2LjM1NTgzNCwzOS45MjIxMTA4MzMzMzMzMzUsMTE2LjM1NjA3OSwzOS45MjE5MDE2NjY2NjY2#_base64codenn_#NnwxMTYuMzU2MDc5LDM5LjkyMTkwMTY2NjY2NjY2LDExNi4zNTYyMjQsMzkuOTIxNzY0MTY2NjY2#_base64codenn_#NjcsMTE2LjM1NjI2MiwzOS45MjEwMDgzMzMzMzMzMywxMTYuMzU2MzQ2LDM5LjkxODAxODMzMzMz#_base64codenn_#MzMzNiwxMTYuMzU2NDIyLDM5LjkxNjExMDgzMzMzMzMzNSwxMTYuMzU2NDUyLDM5LjkxNTA2OTE2#_base64codenn_#NjY2NjY3LDExNi4zNTY0OTEsMzkuOTE0MTA0MTY2NjY2NjcsMTE2LjM1NjUwNiwzOS45MTM3Mywx#_base64codenn_#MTYuMzU2NjM2LDM5LjkxMTU0MDgzMzMzMzMzLDExNi4zNTY2NDMsMzkuOTExNDM3NSwxMTYuMzU2#_base64codenn_#NTU5LDM5LjkxMDcxNjY2NjY2NjY2NiwxMTYuMzU2NDk4LDM5LjkxMDMzMTY2NjY2NjY2NCwxMTYu#_base64codenn_#MzU2Mzk5LDM5LjkwOTQxNTgzMzMzMzMzNCwxMTYuMzU2MzkxLDM5LjkwODUxOTE2NjY2NjY2NSwx#_base64codenn_#MTYuMzU2NDA3LDM5LjkwNzI4MzMzMzMzMzMzLDExNi4zNTY0NDUsMzkuOTA2MTQ2NjY2NjY2NjY1#_base64codenn_#fDExNi4zNTY0NDUsMzkuOTA2MTQ2NjY2NjY2NjY1LDExNi4zNTY1NTIsMzkuOTA0MTI1LDExNi4z#_base64codenn_#NTY2MjgsMzkuOTAyNjQwODMzMzMzMzM2fDExNi4zNTY2MjgsMzkuOTAyNjQwODMzMzMzMzM2LDEx#_base64codenn_#Ni4zNTY1NTksMzkuOTAyMjc1LDExNi4zNTY0MywzOS45MDAwODkxNjY2NjY2NywxMTYuMzU2NDM3#_base64codenn_#LDM5Ljg5OTg5NDE2NjY2NjY3LDExNi4zNTY0NiwzOS44OTk3MTkxNjY2NjY2NjQsMTE2LjM1NjQ5#_base64codenn_#OCwzOS44OTk1ODUsMTE2LjM1NjU1OSwzOS44OTk0ODU4MzMzMzMzNCwxMTYuMzU2NjgxLDM5Ljg5#_base64codenn_#OTMzNzUsMTE2LjM1NjgzNCwzOS44OTkyMjY2NjY2NjY2NjQsMTE2LjM1Njk5NCwzOS44OTkxMzE2#_base64codenn_#NjY2NjY2NywxMTYuMzU3MTc3LDM5Ljg5OTA1NSwxMTYuMzU3MzQ1LDM5Ljg5ODk5NzUsMTE2LjM1#_base64codenn_#NzQ5LDM5Ljg5ODk3NSwxMTYuMzU3NjEyLDM5Ljg5ODk2NzUsMTE2LjM1Nzc0OSwzOS44OTg5ODI1#_base64codenn_#LDExNi4zNTc5NCwzOS44OTkwMjQxNjY2NjY2NiwxMTYuMzU4NjA0LDM5Ljg5OTEzMTY2NjY2NjY3#_base64codenn_#LDExNi4zNTk3NTYsMzkuODk5MjM0MTY2NjY2NjY2LDExNi4zNjA2NzksMzkuODk5MjY1LDExNi4z#_base64codenn_#NjExNjcsMzkuODk5MjY1LDExNi4zNjMzMzQsMzkuODk5MjY4MzMzMzMzMzMsMTE2LjM2MzQzMywz#_base64codenn_#OS44OTkzMzc1LDExNi4zNjYzMSwzOS44OTkzNzU4MzMzMzMzMywxMTYuMzY3NTk5LDM5Ljg5OTQy#_base64codenn_#NSwxMTYuMzY4Nzg5LDM5Ljg5OTQ2MzMzMzMzMzM0LDExNi4zNzI2MzQsMzkuODk5NTg1LDExNi4z#_base64codenn_#NzQzMzYsMzkuODk5NjM4MzMzMzMzMzM2LDExNi4zNzQ0ODEsMzkuODk5NjQyNSwxMTYuMzc2OTgz#_base64codenn_#LDM5Ljg5OTczNzUsMTE2LjM4MjM5MiwzOS44OTk5NCwxMTYuMzg0MTc4LDM5LjkwMDAwNSwxMTYu#_base64codenn_#Mzg0MjQ2LDM5LjkwMDAwNSwxMTYuMzg4LDM5LjkwMDEzNSwxMTYuMzkxNzQ2LDM5LjkwMDI1NjY2#_base64codenn_#NjY2NjY2NCwxMTYuMzkzMzMzLDM5LjkwMDI4MzMzMzMzMzMzNCwxMTYuMzk2MDExLDM5LjkwMDA1#_base64codenn_#MDgzMzMzMzMzLDExNi4zOTYwOTUsMzkuOTAwMDUwODMzMzMzMzMsMTE2LjM5NjQyMywzOS45MDAw#_base64codenn_#NDMzMzMzMzMzMzYsMTE2LjM5ODI4NCwzOS45MDAwOTY2NjY2NjY2NywxMTYuMzk5NzExLDM5Ljkw#_base64codenn_#MDE4ODMzMzMzMzMzfDExNi4zOTk3MTEsMzkuOTAwMTg4MzMzMzMzMzMsMTE2LjM5OTcxMSwzOS45#_base64codenn_#MDAyNzE2NjY2NjY2NywxMTYuMzk5NzExLDM5LjkwMDQ5NjY2NjY2NjY3LDExNi4zOTk2MiwzOS45#_base64codenn_#MDIxNiwxMTYuMzk5NTg5LDM5LjkwMzAyNTgzMzMzMzMzLDExNi4zOTkzNDUsMzkuOTA3NzUyNXwx#_base64codenn_#MTYuMzk5MzQ1LDM5LjkwNzc1MjUsMTE2LjM5OTMzNywzOS45MDc4NTE2NjY2NjY2NjYsMTE2LjM5#_base64codenn_#NzU1MiwzOS45MDc4MDI1";
var targeturl= "http://ditu.google.cn/maps?f=d&hl=zh-CN&saddr=%E5%8C%97%E4%BA%AC%E5%B8%82%E8%A5%BF%E5%9F%8E%E5%8C%BA%E8%A5%BF%E7%9B%B4%E9%97%A8&daddr=%E5%8C%97%E4%BA%AC%E5%B8%82%E4%B8%9C%E5%9F%8E%E5%8C%BA%E5%A4%A9%E5%AE%89%E9%97%A8&sll=37.649034,106.435547&sspn=29.779642,59.238281&ie=UTF8&output=mapabc";
</script>
<script language=javascript src='
http://mapgoogle.mapabc.com/googlepoi/mapabcrouting.js
'></script></body></html>
广告而已
kp2006
头像被屏蔽
发表于 2007-5-19 07:43:20 | 显示全部楼层
卡吧7报
红心王子
发表于 2007-5-19 07:57:52 | 显示全部楼层
原帖由 foxhound 于 2007-5-19 06:31 发表
KIS 6.0.2.621飘过了。。。。。

晕,我的KIS621报了,发之前看好了再打字

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
红心王子
发表于 2007-5-19 08:00:15 | 显示全部楼层
当时只有nod32杀
什么意思?只有nod32,这种说法有点夸张吧
quansen83
发表于 2007-5-19 10:03:07 | 显示全部楼层
原帖由 红心王子 于 2007-5-19 07:57 发表

晕,我的KIS621报了,发之前看好了再打字

是人家EQ2上报了的
福田
发表于 2007-5-19 10:54:09 | 显示全部楼层
红伞C版没报啊!
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-1 22:53 , Processed in 0.142015 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表