http://clock.smeshtorg.ru/products_all/katalog_tovarov11125.html

显示全部楼层 · 发表于 2012-9-22 20:14:35

Category: Tool

Description: This program is used to create viruses, worms or other malware.

Recommended action: Remove this software immediately.

Items:
file:C:\Sandbox\S\Browser\user\current\AppData\Roaming\SogouExplorer\Temp\__SEHttpCache__\5316\3988\%2f%7ewayne_stock%2f.html
file:C:\Sandbox\S\Browser\user\current\AppData\Roaming\SogouExplorer\Webkit\Default\Cache\f_000024

Get more information about this item online.

Category: Exploit

Description: This program is dangerous and exploits the computer on which it is run.

Recommended action: Remove this software immediately.

Items:
file:C:\Sandbox\S\Browser\user\current\AppData\Roaming\SogouExplorer\Temp\__SEHttpCache__\5316\3988\%2f%7ewayne_stock%2f.html
file:C:\Sandbox\S\Browser\user\current\AppData\Roaming\SogouExplorer\Webkit\Default\Cache\f_000024

Get more information about this item online.

显示全部楼层 · 发表于 2012-9-24 15:47:40

本帖最后由 said411f 于 2012-9-24 15:51 编辑

直接進入~~金山衛士攔截報告
clock.smeshtorg.ru/js/AC_RunActiveContent.js
clock.smeshtorg.ru/js/protoaculous1.6.packed.js
clock.smeshtorg.ru/js/highslide-full.js
clock.smeshtorg.ru/js/shopping_cart.js
clock.smeshtorg.ru/templates/luxwatch/css/admin.css
clock.smeshtorg.ru/templates/luxwatch/images/default.jpg
hxxp://google-banking.com/main.php?page=f8a892dc63e25f27

显示全部楼层 · 发表于 2012-9-24 19:55:40

如图所示。

红伞报告：

开始在“C:\Users\Wu Jiangxin\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000f44”中扫描
C:\Users\Wu Jiangxin\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000f44
[检测] 包含 JS/Redirector.PM.26 Java 脚本病毒的识别模式
[注意] 文件已被移到隔离目录中，文件名为“573aea44.qua”。

[未鉴定] http://clock.smeshtorg.ru/products_all/katalog_tovarov11125.html