http://www.365educ.cn[Malicious][Detected by 是昔流芳]

显示全部楼层 · 发表于 2012-4-14 11:03:41

本帖最后由是昔流芳于 2012-4-14 11:04 编辑

关于:hxxp://www.365educ.cn/jierichangshi/0602/4318.html解密的日志(全体输出 -  22):

Level  0>http://www.365educ.cn/jierichangshi/0602/4318.html
Level  1>http://www.365educ.cn/jierichangshi/0602/4318.html?CFG
Level  1>http://kr6.ios6.in:5847/fe/c.html
Level  2>http://53q.ios6.in:6867/下载升级补丁.exe
Level  2>http://kr6.ios6.in:5847/fe/mop.html
Level  3>http://7e.xpsp.in:5847/fe/xl.exe
Level  2>http://kr6.ios6.in:5847/fe/pop.html
Level  3>http://kr6.ios6.in:5847/fe/p5.js
Level  3>http://kr6.ios6.in:5847/fe/p4.js
Level  3>http://kr6.ios6.in:5847/fe/p3.js
Level  3>http://kr6.ios6.in:5847/fe/p2.js
Level  4>http://7e.xpsp.in:5847/fe/xl.exe
Level  3>http://kr6.ios6.in:5847/fe/p1.js
Level  2>http://kr6.ios6.in:5847/fe/1.htm
Level  3>http://kr6.ios6.in:5847/fe/nop.html
Level  4>http://kr6.ios6.in:5847/fe/nop.swf
Level  4>http://7e.xpsp.in:5847/fe/xl.exe
Level  3>http://kr6.ios6.in:5847/fe/oop.html
Level  4>http://kr6.ios6.in:5847/fe/ck.swf
Level  3>http://kr6.ios6.in:5847/fe/ckwm.swf
Level  3>http://kr6.ios6.in:5847/fe/1.js
Level  2>http://js.tongji.linezing.com/1112096/tongji.js

日志由 Redoce2.1第17次修正版于 2012-4-14 11:01:22 生成。

显示全部楼层 · 发表于 2012-4-14 13:30:57

http://53q.ios6.in:6867/下载升级补丁.exe
http://7e.xpsp.in:5847/fe/xl.exe

Sophos和EAM都可以查杀，浏览网页没反应

显示全部楼层 · 发表于 2012-4-14 13:57:13

Ashampoo_Snap_2012.04.14_13h56m55s_003_.png

[已鉴定] http://www.365educ.cn[Malicious][Detected by 是昔流芳]