[e1c27c 8a30af 18fb0f 788aaa]来4个htm

显示全部楼层 · 发表于 2007-6-15 11:40:36

KIS6 报3个

显示全部楼层 · 发表于 2007-6-15 11:41:02

咖啡直接杀俩，另俩执行后通杀（ANI）

这样的脚本到现在危害已变成小很多

显示全部楼层 · 发表于 2007-6-15 11:58:51

显示全部楼层 · 发表于 2007-6-15 12:06:14

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\43222178[1].zip'
C:\Documents and Settings\Administrator\My Documents\
  43222178[1].zip
[0] Archive type: ZIP
--> 43222178[1].htm
      [DETECTION] Contains signature of the exploits EXP/Agent.B
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\231[1].zip'
C:\Documents and Settings\Administrator\My Documents\
  231[1].zip
[0] Archive type: ZIP
--> 231[1].htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\0614[1].zip'
C:\Documents and Settings\Administrator\My Documents\
  0614[1].zip
[0] Archive type: ZIP
--> 0614[1].htm
      [DETECTION] Contains signature of the HTML script virus HTML/Dldr.Agent.FG
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\8055[1].zip'
C:\Documents and Settings\Administrator\My Documents\
  8055[1].zip
[0] Archive type: ZIP
--> 8055[1].htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-6-15 14:12:46

病毒: Trojan-Downloader.VBS.Small.eo

Virus beim Laden von Web-Inhalten gefunden.

Adresse: bbs.kafan.cn 病毒: Trojan-Downloader.JS.IstBar.ai

Virus beim Laden von Web-Inhalten gefunden.

Adresse: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-15 15:05:30

楼主真是的，直接把网址发出来就得了
第一个

http://59.34.197.239/cj/cc_231.exe

复制代码

[ 本帖最后由 zane_xzz 于 2007-6-15 15:08 编辑 ]

显示全部楼层 · 发表于 2007-6-15 15:12:14

ht tp://59.34.197.239/cj/805.exe

还有很多懒得抓了

显示全部楼层 · 发表于 2007-6-15 19:27:17

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

Generic.XPL.ADODB.63F1E42F
Generic.XPL.ADODB.A8F9AEEC
Trojan.Downloader.Istbar.WQ

Virus: Trojan-Downloader.VBS.Small.eo

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-6-15 19:33:50

扫描开始时间: 2007-6-15 19:36:34
扫描日志
NOD32 版本 2331 (20070615) NT
命令行: F:\virus\231[1].zip F:\virus\0614[1].zip F:\virus\8055[1].zip F:\virus\43222178[1].zip
C:\Program Files\Eset\nod32.exe<病毒 - 正常>

日期: 2007年6月15日时间: 19:36:36
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\231[1].zip; F:\virus\0614[1].zip; F:\virus\8055[1].zip; F:\virus\43222178[1].zip
F:\virus\231[1].zip ?ZIP ?231[1].htm<病毒 - 正常>
F:\virus\231[1].zip:Zone.Identifier<病毒 - 正常>
F:\virus\0614[1].zip ?ZIP ?0614[1].htm<病毒 - 正常>
F:\virus\0614[1].zip:Zone.Identifier<病毒 - 正常>
F:\virus\8055[1].zip ?ZIP ?8055[1].htm<病毒 - 正常>
F:\virus\8055[1].zip:Zone.Identifier<病毒 - 正常>
F:\virus\43222178[1].zip ?ZIP ?43222178[1].htm<病毒 - JS/TrojanDownloader.IstBar.G 木马>
F:\virus\43222178[1].zip:Zone.Identifier<病毒 - 正常>
已扫描文件数量: 8
已发现病毒数量: 1
完成时间: 19:36:37 总共扫描时间: 1 秒 (00:00:01)

[病毒样本] [e1c27c 8a30af 18fb0f 788aaa]来4个htm

本帖子中包含更多资源

KIS6

本帖子中包含更多资源

本帖子中包含更多资源

AVK

本帖子中包含更多资源

avk07