高手解密吧。

qq890

http://user2.33220.net/ms06014.js
http://user2.33220.net/Thunder.htm
http://user2.33220.net/GLWORLD.html
http://user2.33220.net/Real.html
http://user2.33220.net/real.js

http://www.52m6.com/14.htm
http://www.52m6.com/bfyy.htm
http://www.52m6.com/lz.htm
http://www.52m6.com/real.htm
http://www.52m6.com/real11.htm
我解不出来

qigang

http://user2.33220.net/bak.css（另外还有一个）

http://ccc.52gol.com/xx.exe

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\ms06014.js'
E:\新建文件夹 (2)\ms06014.js
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [INFO]      The file was moved to '483189ae.qua'!
Begin scan in 'E:\新建文件夹 (2)\GLWORLD.html'
Begin scan in 'E:\新建文件夹 (2)\Real.html'
E:\新建文件夹 (2)\Real.html
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Agent.chy
      [INFO]      The file was deleted!
Begin scan in 'E:\新建文件夹 (2)\real.js'
E:\新建文件夹 (2)\real.js
      [DETECTION] Contains detection pattern of the exploits EXP/RealPlay.AH
      [INFO]      The file was deleted!
Begin scan in 'E:\新建文件夹 (2)\14.htm'
E:\新建文件夹 (2)\14.htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [INFO]      The file was moved to '482f896f.qua'!
Begin scan in 'E:\新建文件夹 (2)\bfyy.htm'
Begin scan in 'E:\新建文件夹 (2)\lz.htm'
E:\新建文件夹 (2)\lz.htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [INFO]      The file was moved to '482f89b5.qua'!
Begin scan in 'E:\新建文件夹 (2)\real.htm'
E:\新建文件夹 (2)\real.htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Agent.ES
      [INFO]      The file was deleted!
Begin scan in 'E:\新建文件夹 (2)\real11.htm'


End of the scan: 2008年4月13日  12:16
Used time: 00:12 min

The scan has been done completely.

      0 Scanning directories
      9 Files were scanned
      3 viruses and/or unwanted programs were found
      3 Files were classified as suspicious:
      3 files were deleted
      0 files were repaired
      3 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      6 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\xx.exe'
E:\新建文件夹 (2)\xx.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!

Joker

C:\Documents and Settings\Administrator\Application Data\IDM\DwnlData\Administrator\xx_1488\xx.exe TrojanDownloader.Nurech.bd.bmqk

granthill

user1.33220.net/   bak.css
ccc.52m6.com/xx.exe

[ 本帖最后由 granthill 于 2008-4-13 15:41 编辑 ]

ykz1991

http://ccc.52m6.com/xx.exe