http://www.111nv.cn/ad.html

The file 'bak.css' has been determined to be 'MALWARE'. Our analysts named the threat TR/Agent.ize. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

The file 'xx.html' has been determined to be 'MALWARE'.
Our analysts named the threat JS/Dldr.Agent.1783. The term "JS/" denotes a Java scriptvirus.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Exploit.HTML.

[ 本帖最后由 Exia 于 2008-5-15 16:22 编辑 ]

qigang

Log is generated by FreShow.
[wide]http://www.111nv.cn/ad.html
    [frame]http://www.111nv.cn/xx.html
        [object]http://user1.33-25.net/Baidu.cab
        [script]http://user1.33-25.net/ms06014.js
            [object]http://user1.33-22.net/bak.css
        [frame]http://user1.33-25.net/Thunder.html
            [object]http://user1.33205.net/bak.css
        [frame]http://user1.33-25.net/GLWORLD.html
            [object]http://user1.33-22.net/bak.css
        [script]http://user1.33-25.net/real.js
            [object]http://user1.33-22.net/bak.css
        [frame]http://user1.33-25.net/Real.html
            [object]http://user1.33-22.net/bak.css
    [script]http://js.tongji.cn.yahoo.com/617574/ystat.js