红伞报

显示全部楼层 · 发表于 2007-12-6 20:00:02

lm.koubei.com/fang/Web/qmain.htm

[ 本帖最后由 y37007 于 2007-12-6 20:02 编辑 ]

显示全部楼层 · 发表于 2007-12-6 20:02:35

allyes

PS:以后此類報發扔到傘區專題帖子好了

显示全部楼层 · 发表于 2007-12-6 21:32:29

上报給卡巴看看

显示全部楼层 · 发表于 2007-12-7 00:05:09

Hello,

qmain[1].htm_, qright1[1].htm_

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Namestnikov Yury
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-12-7 00:32:16

IE7都挡住了。

行为：

2007-12-07 00:30:51 修改注册表内容操作:阻止
进程路径:C:\Program Files\Internet Explorer\IEXPLORE.EXE
注册表路径:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4E8A5278-C04E-4FE3-BF78-8A7CCD6EF333}
注册表名称:SecurityLevel

显示全部楼层 · 发表于 2007-12-7 13:31:28

有iframe;

<IFRAME WIDTH=0 HEIGHT=0 MARGINWIDTH=0 MARGINHEIGHT=0 HSPACE=0 VSPACE=0 FRAMEBORDER=0 SCROLLING=no BORDERCOLOR='#000000' SRC='http://play.unionsky.cn/track/?DotID=748'></IFRAME>

[已鉴定] 红伞报