大毒网！

显示全部楼层 · 发表于 2008-2-12 22:41:23

http://www.xbt.com.cn/Article/200802/show288992c23p1.html

复制代码

自己上，nod报！

显示全部楼层 · 发表于 2008-2-12 22:43:16

2008-2-12 22:46:21 HTTP filter file http://www.xbt.com.cn/cookiepop.js HTML/Exploit.CodeBaseExec trojan connection terminated - quarantined 48AC8E79A65A4E0\Administrator Threat was detected upon access to web by the application: C:\Program Files\TheWorld 2.0\TheWorld.exe.
2008-2-12 22:46:03 HTTP filter file http://www.xbt.com.cn/cookiepop.js HTML/Exploit.CodeBaseExec trojan connection terminated - quarantined 48AC8E79A65A4E0\Administrator Threat was detected upon access to web by the application: C:\Program Files\TheWorld 2.0\TheWorld.exe.

显示全部楼层 · 发表于 2008-2-12 23:01:47

看了下- -

貌似没有什么问题?

显示全部楼层 · 发表于 2008-2-12 23:03:46

The file 'cookiepop.js' has been determined to be 'MALWARE'. Our analysts named the threat EXP.CodeBaseExec. Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-2-12 23:04:16

are u sure???

显示全部楼层 · 发表于 2008-2-12 23:10:43

只是挂了一个吗？

显示全部楼层 · 发表于 2008-2-12 23:57:51

KIS7.0:
检测到：恶意程序 Exploit.HTML.CodeBaseExec URL: http://www.xbt.com.cn/cookiepop.js
2008-2-12 23:55:37 URL: http://www.xbt.com.cn/cookiepop.js 检测到恶意程序 'Exploit.HTML.CodeBaseExec'
2008-2-12 23:55:37 URL: http://www.xbt.com.cn/cookiepop.js 拒绝访问

显示全部楼层 · 发表于 2008-2-13 00:00:14

Starting the file scan:

Begin scan in 'C:\Sandbox'
C:\Sandbox\Administrator\DefaultBox\user\current\Local Settings\Temporary Internet Files\Content.IE5\3ZQCYYIN\nvwkanx1[1].cab
  [0] Archive type: CAB (Microsoft)
  --> nvwkanx1.dll
   [DETECTION] Is the Trojan horse TR/Dldr.AlexaBar.J
   [INFO]    The file was moved to '4828c306.qua'!

显示全部楼层 · 发表于 2008-2-13 08:40:10

又是這項目

显示全部楼层 · 发表于 2008-2-13 10:08:34

我去看看先

[已鉴定] 大毒网！