又找到一个很猛的毒网[MD5: 4152C2 377688 D02BD6 E8C9AA 55A568]

allenhippo

hxxp://www.86579.cn

下载大量盗号木马+arp局域网感染工具+viking+改系统时间

发几个不报的上来

[ 本帖最后由 allenhippo 于 2007-6-17 12:32 编辑 ]

红心王子

斧头KV继续报

kp2006

卡吧7挂

kp2006

原帖由 红心王子 于 2007-6-17 12:19 发表
斧头KV继续报

和你发了几个消息 你居然不理我

yashoo

咖啡的表现非常好

yashoo

样本扫描结果

The EQs

Scan performed at: 2007-6-17 12:33:03
Scanning Log
NOD32 version 2335 (20070616) NT
Command line: C:\Documents and Settings\EQ2\桌面\virus.rar
Operating memory - is OK

Date: 17.6.2007  Time: 12:33:12
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\virus.rar
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?tcp.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?1632[1].exe - a variant of Win32/PSW.Legendmir.NEP trojan
Number of scanned files: 6
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 12:33:21 Total scanning time: 9 sec (00:00:09)

Notes:
[7] File is probably infected with an unknown virus.

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\virus.rar'
C:\Documents and Settings\Administrator\My Documents\
  virus.rar
    [0] Archive type: RAR
    --> UPnPSvc.dll
    --> tcp.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1632[1].exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> ip001_1.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Agent.akk
        [WARNING]   Infected files in archives cannot be repaired!
    --> 163e[1].exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLine.WY.11
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

九尾野狐

留了2日志就完了



浏览器的警告






EQ日志

[ 本帖最后由 没注册 于 2007-6-17 12:54 编辑 ]

scottxzt

一大堆得啊！