财富论坛

显示全部楼层 · 发表于 2008-2-23 11:41:47

hXXp://www.free-best.com/
被挂了。。。。。。。。。

显示全部楼层 · 发表于 2008-2-23 11:44:30

Log is generated by FreShow.
[wide]http://www.free-best.com/
[script]http://www.free-best.com/include/javascript/common.js
      [frame]http://www.52gxy.cn/gua3.html
         [frame]http://js.k0102.com/a11.htm
            [frame]http://js.k0102.com/\"a1111.htm\"
            [frame]http://js.k0102.com/\"a2111.htm\"
            [frame]http://js.k0102.com/\"a4111.htm\"
            [frame]http://js.k0102.com/\"a5111.htm\"
            [frame]http://js.k0102.com/\"a6111.htm\"
            [frame]http://js.k0102.com/\"a7111.htm\"
            [frame]http://js.k0102.com/\"a8111.htm\"
            [frame]http://js.k0102.com/\"a9111.htm\"
            [frame]http://js.k0102.com/\"a10111.htm\"
            [frame]http://js.k0102.com/\"jsr222.htm\"
         [script]http://count38.51yes.com/click.aspx?id=386950387&logo=1
[script]http://www.free-best.com/include/javascript/menu.js
[script]http://www.free-best.com/include/javascript/ajax.js

显示全部楼层 · 发表于 2008-2-23 11:46:49

hxxp://js.k0102.com/data.gif (pe文件 )
http://w.c0mo.com/setup.exe

[ 本帖最后由 qianwenxiang 于 2008-2-23 11:53 编辑 ]

显示全部楼层 · 发表于 2008-2-23 11:52:27

KAV PASS

显示全部楼层 · 发表于 2008-2-23 11:55:09

Sent to:

newvirus@kaspersky.com

显示全部楼层 · 发表于 2008-2-23 12:01:55

费尔继续MISS

显示全部楼层 · 发表于 2008-2-23 12:27:29

C:\Documents and Settings\GUNDAM\桌面\data.rar » RAR » data.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\GUNDAM\桌面\data.rar » RAR » setup.exe » UPX v12_m2 » RAR » Setup.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\GUNDAM\桌面\data.rar » RAR » setup.exe » RAR » Setup.exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2008-2-23 13:29:30

TO KL 收

显示全部楼层 · 发表于 2008-2-23 13:31:54

2008-2-23 13:32:01 Kernel File 'E:\virus\data.rar' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-2-23 13:57:27

磁碟机又换免杀方式了，等着antivir更引擎

[已鉴定] 财富论坛