易优影视[挂马][by always]

firefox3

http://movie.euooo.com/

Virus: Trojan.JS.Agent.EPE (Engine A)

An attempt was made to open an infected file.

File: ff[1].htm
Directory: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W59LAM0W




Virus: Exploit.JS.AL (Engine A)

An attempt was made to open an infected file.

File: ie[1].htm
Directory: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZHLXAWB0



Virus: Exploit.CVE-2009-1862.A (Engine A)

An attempt was made to open an infected file.

File: xp[1].swf
Directory: C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YAK0UPEC

always

关于:hxxp://movie.euooo.com/解密的日志(全体输出 -  8):

Level  0>hxxp://movie.euooo.com/
Level  1>hxxp://www.jiathis.com/code/jiathis_r.js
Level  1>hxxp://www.euooo.com/bbs/include/javascript/ie.html
Level  2>hxxp://www.euooo.com/bbs/include/javascript/ie.js
Level  3>hxxp://www.euooo.com/bbs/include/javascript/1.exe
Level  2>hxxp://www.euooo.com/bbs/include/javascript/xp.swf
Level  1>hxxp://www.euooo.com/bbs/include/javascript/svfl0.htm
Level  1>hxxp://www.euooo.com/bbs/include/javascript/ff.html

日志由 Redoce2.1第28次修正版于 2012/4/9 19:50:19 生成。