卡饭论坛 » 病毒样本区 » 网络安全（毒网分析） » 巨毒网站 让红伞狂跳

chang2413 发表于 2008-8-17 09:21

我的NOD32也是报了一大堆的病毒，威胁是JS/TROJANDOWNLOADER.SWFLASH.J特洛伊木马

6466336 发表于 2008-8-17 09:42

AVG 诺顿NIS08  NAB一个都没报

honker_feng 发表于 2008-8-17 09:42

果然剧毒 呼呼

aqshy2006 发表于 2008-8-17 09:45

谢谢提醒了!

seiyus 发表于 2008-8-17 10:29

1218939863,2008-8-17 10:24:23,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\old[1].htm,Realtime scan
1218939894,2008-8-17 10:24:54,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\old[2].htm,Realtime scan
1218939897,2008-8-17 10:24:57,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4TE1UPKX\old[1].htm,Realtime scan
1218939898,2008-8-17 10:24:58,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4TE1UPKX\old[2].htm,Realtime scan
1218939898,2008-8-17 10:24:58,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\old[6].htm,Realtime scan
1218939898,2008-8-17 10:24:58,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\old[1].htm,Realtime scan
1218939898,2008-8-17 10:24:58,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\old[5].htm,Realtime scan
1218939899,2008-8-17 10:24:59,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\old[1].htm,Realtime scan
1218939899,2008-8-17 10:24:59,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\old[2].htm,Realtime scan
1218939899,2008-8-17 10:24:59,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\old[9].htm,Realtime scan
1218939899,2008-8-17 10:24:59,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\old[8].htm,Realtime scan
1218939900,2008-8-17 10:25:00,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\old[7].htm,Realtime scan
1218939900,2008-8-17 10:25:00,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\old[3].htm,Realtime scan
1218939900,2008-8-17 10:25:00,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\06014[1].htm,Realtime scan
1218939901,2008-8-17 10:25:01,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4TE1UPKX\06014[1].htm,Realtime scan
1218939901,2008-8-17 10:25:01,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\old[5].htm,Realtime scan
1218939901,2008-8-17 10:25:01,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4TE1UPKX\old[3].htm,Realtime scan
1218939901,2008-8-17 10:25:01,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\old[4].htm,Realtime scan
1218939902,2008-8-17 10:25:02,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\old[11].htm,Realtime scan
1218939902,2008-8-17 10:25:02,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\old[6].htm,Realtime scan
1218939903,2008-8-17 10:25:03,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4TE1UPKX\old[5].htm,Realtime scan
1218939903,2008-8-17 10:25:03,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\old[12].htm,Realtime scan
1218939903,2008-8-17 10:25:03,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\old[13].htm,Realtime scan
1218939904,2008-8-17 10:25:04,JS.Decoder.m,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\old[6].htm,Realtime scan
1218939904,2008-8-17 10:25:04,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\06014[1].htm,Realtime scan
1218939905,2008-8-17 10:25:05,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4TE1UPKX\CAFWXPJG.htm,Realtime scan
1218939907,2008-8-17 10:25:07,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4TE1UPKX\CAKXCDSN.htm,Realtime scan
1218939907,2008-8-17 10:25:07,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\06014[1].htm,Realtime scan
1218939907,2008-8-17 10:25:07,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\06014[2].htm,Realtime scan
1218939908,2008-8-17 10:25:08,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\CAINGRRC.htm,Realtime scan
1218939908,2008-8-17 10:25:08,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\CAO923GJ.htm,Realtime scan
1218939908,2008-8-17 10:25:08,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\CAP9RB2W.htm,Realtime scan
1218939908,2008-8-17 10:25:08,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\CAQX5LG2.htm,Realtime scan
1218939909,2008-8-17 10:25:09,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\CAVRX5T5.htm,Realtime scan
1218939909,2008-8-17 10:25:09,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4TE1UPKX\06014[2].htm,Realtime scan
1218939910,2008-8-17 10:25:10,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\0DQRGHI7\CAEB49E3.htm,Realtime scan
1218939910,2008-8-17 10:25:10,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\CABODDRG.htm,Realtime scan
1218939910,2008-8-17 10:25:10,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4TE1UPKX\CAG8DTBY.htm,Realtime scan
1218939910,2008-8-17 10:25:10,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\CAGJ2JGD.htm,Realtime scan
1218939911,2008-8-17 10:25:11,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\CAZ1376K.htm,Realtime scan
1218939911,2008-8-17 10:25:11,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\CASPQB0N.htm,Realtime scan
1218939911,2008-8-17 10:25:11,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\CAAZWTYD.htm,Realtime scan
1218939912,2008-8-17 10:25:12,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\06014[2].htm,Realtime scan
1218939912,2008-8-17 10:25:12,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\CA6ICHQI.htm,Realtime scan
1218939913,2008-8-17 10:25:13,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\CA6NG12V.htm,Realtime scan
1218939913,2008-8-17 10:25:13,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\CAG5ERSH.htm,Realtime scan
1218939913,2008-8-17 10:25:13,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\CA7IFQB1.htm,Realtime scan
1218939914,2008-8-17 10:25:14,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C3CBCHIX\CAKCGPGN.htm,Realtime scan
1218939914,2008-8-17 10:25:14,Script.HttpDownloader.u,病毒,Administrator,C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PH0JTCVW\CAI9418M.htm,Realtime scan


费尔报的。微点没报，

o心灵o 发表于 2008-8-17 10:33

不用虚拟机或沙盘....不是一上就"完"了[:08:]

看哦看哦 发表于 2008-8-17 10:46

avast 一直响警报

fqcomodo 发表于 2008-8-17 12:14

VBA32报

VBA.gen.Onlinemor

Agent.JAVE

一良大帝 发表于 2008-8-17 13:13

回复 14楼 tcgg1983 的帖子

是因为你病毒库更新了~~
因为上报过了

lyruyitong 发表于 2008-8-17 15:52

厉害，我吓得都不敢去了！装好影子再去看看！

玄蜗 发表于 2008-8-17 16:02

[:08:] kis2009没反应.........

hajing520 发表于 2008-8-17 16:46

[quote]原帖由 [i]玄蜗[/i] 于 2008-8-17 16:02 发表 [url=http://bbs.kafan.cn/redirect.php?goto=findpost&pid=4521139&ptid=308066][img]http://bbs.kafan.cn/images/common/back.gif[/img][/url]
[:08:] kis2009没反应......... [/quote]
我也是,难道我不懂的看?

heyuan0722 发表于 2008-8-17 16:58

vs没反应

wjhstu-VxG 发表于 2008-8-17 17:39

谁说诺顿米报？ NIS08   入侵防护拦截

[table][tr][td]详细信息:[/td][td]检测到并禁止了针对您计算机的入侵企图
“MSIE RealPlayer rmoc ActiveX BO”。
风险级别: 高。
网址: [url=http://www.shppw.com/]http://www.shppw.com/[/url]。

[/td][/tr][tr][td=2,1][/td][/tr][tr][td=2,1]您可以在以下位置获取有关此攻击的详细信息: [url=http://securityresponse.symantec.com/avcenter/nis_ids/][color=#0000ff]Symantec 安全响应中心[/color][/url]。 [/td][/tr][/table]

一个普通的RealPlayer漏洞，

其实用NIS08根本不用怕网页挂马，它的入侵防护系统检测的是漏洞攻击代码。一旦检测到，自动切断和漏洞有关的连接——无论啥牛逼的木马，根本就下载不了，进不了系统，也就不存在拦不住的问题。

qigang 发表于 2008-8-17 21:36

下载地址：

http://count.xj.cn/count/js/css.css

http://fangaizheng.com.cn/count/js/ie.swf

http://fangaizheng.com.cn/count/js/ff.swf

左手 发表于 2008-8-17 22:54

小红伞跳的真厉害，关了，用EQ看~

mikoyan1988 发表于 2008-8-18 08:02

我的大蜘蛛没反应，晕了！

gankeyu 发表于 2008-8-18 08:16

实机Firefox没有事情

wwezsqzr 发表于 2008-8-18 09:46

已报告的攻击站点！
位于 [url]www.shppw.com[/url] 的站点已经被报告为攻击网站，而且已根据您的安全首选项而阻止。
攻击站点会安装用于盗窃隐私信息的程序，或使用您的计算机来攻击其他人，或者损坏您的系统。
某些攻击站点故意发布有害软件，但是许多都没有在获得用户允许或者了解的情况下进行。
[:xi34:] [:xi34:] [:xi34:] 火狐很厉害吧

themarsant 发表于 2008-8-19 10:49

为什么在IE里不报，而在沙盘里报个不停

查看完整版本: 巨毒网站 让红伞狂跳