毒网

显示全部楼层 · 发表于 2007-6-16 18:41:25

http://www.happydown.com/soft/soft/4021.htm

显示全部楼层 · 发表于 2007-6-16 18:42:20

病毒: Trojan-Downloader.JS.IstBar.ai
文件: pp[1].js
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\ZM0SZ5EQ
进程: iexplore.exe

显示全部楼层 · 发表于 2007-6-16 19:16:25

开卡巴进去踩踩，没发现pp[1].js这个文件，仔细分析，发现被反广告给拦截了

显示全部楼层 · 发表于 2007-6-16 21:18:34

没发现pp[1].js这个文件

显示全部楼层 · 发表于 2007-6-16 21:21:03

2007/6/16 21:15:26 eAmon file C:\Users\Jason\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7I335OH7\pp[1].js JS/TrojanDownloader.IstBar.G trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Windows\system32\SearchProtocolHost.exe.
2007/6/16 21:15:20 eAmon file C:\Users\Jason\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7I335OH7\pp[1].js JS/TrojanDownloader.IstBar.G trojan unable to clean Event occurred on a new file created by the application: C:\Program Files\Internet Explorer\iexplore.exe.
2007/6/16 21:15:18 ePfw-Http file http://www.happydown.com/soft/ads/pp.js JS/TrojanDownloader.IstBar.G trojan connection terminated Jason-PC\Jason

显示全部楼层 · 发表于 2007-6-16 22:00:42

微点没反应·····

显示全部楼层 · 发表于 2007-6-16 22:02:43

打足了补丁飘过

显示全部楼层 · 发表于 2007-6-16 22:08:09

江民+PC TOOLS飘过

显示全部楼层 · 发表于 2007-6-16 22:12:10

Virus: Trojan-Downloader.JS.IstBar.ai

Virus found while downloading Web content.

Address:

显示全部楼层 · 发表于 2007-6-16 23:24:12

无反应