可疑网址

Joker

http://www.dm5x.com/4yxf/3637/

AhnLab-V3	2008.5.30.1	2008.06.03	-
AntiVir	7.8.0.26	2008.06.03	HEUR/HTML.Malware
Authentium	5.1.0.4	2008.06.02	-
Avast	4.8.1195.0	2008.06.03	-
AVG	7.5.0.516	2008.06.03	JS/Downloader.Agent
BitDefender	7.2	2008.06.03	-
CAT-QuickHeal	9.50	2008.06.02	-
ClamAV	0.92.1	2008.06.03	-
DrWeb	4.44.0.09170	2008.06.03	-
eSafe	7.0.15.0	2008.06.02	-
eTrust-Vet	31.4.5845	2008.06.03	-
Ewido	4.0	2008.06.02	-
F-Prot	4.4.4.56	2008.06.02	-
F-Secure	6.70.13260.0	2008.06.03	VBS/Psyme.BG
Fortinet	3.14.0.0	2008.06.03	-
GData	2.0.7306.1023	2008.06.03	-
Ikarus	T3.1.1.26.0	2008.06.03	-
Kaspersky	7.0.0.125	2008.06.03	-
McAfee	5308	2008.06.02	-
Microsoft	1.3604	2008.06.03	-
NOD32v2	3153	2008.06.03	-
Norman	5.80.02	2008.06.02	-
Panda	9.0.0.4	2008.06.02	-
Prevx1	V2	2008.06.03	-
Rising	20.47.11.00	2008.06.03	-
Sophos	4.29.0	2008.06.03	-
Sunbelt	3.0.1143.1	2008.06.03	-
Symantec	10	2008.06.03	-
TheHacker	6.2.92.332	2008.06.03	-
VBA32	3.12.6.7	2008.06.03	-
VirusBuster	4.3.26:9	2008.06.02	-
Webwasher-Gateway	6.6.2	2008.06.03	Heuristic.HTML.Malware

[ 本帖最后由 Joker 于 2008-6-3 19:54 编辑 ]

冷冷

没有发现

wintrysun

病毒(Script.HttpDownloader.y): C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\98D8UL00\index[1].htm

电影结束了

...
FS自己的引擎报的。。。

Joker

The file 'index.htm' has been determined to be 'MALWARE'. Our analysts named the threat HTML/Dldr.Multi.B.

qigang

Log is generated by FreShow.
[wide]http://www.dm5x.com/4yxf/3637/
    [frame]http://www.dm5x.cn/gg.htm
        [script]http://s90.cnzz.com/stat.php?id=879722&web_id=879722
    [script]http://a.alimama.cn/inf.js
        [frame]http://a.alimama.cn/
    [script]http://www.dm5x.com/js/tj.js
    [script]http://count37.51yes.com/click.aspx?id=379130368&logo=1
    [script]http://code13.keyrun.com/js/124/124995.js
    [script]http://u.keyrun.com/voo.php
        [frame]http://keyrun.com/code/code/kpcode.php?cid=0&username='+username+'&adid_ary=2815||4&ad_replace=1&width=468&height=60&krview=2815&codetype=0
            [script]http://keyrun.com/code/code/flash.js
            [frame]http://ww.keyrun.com/code/p.php?a='+id[idd]+'&c=0&t=1
        [frame]http://ww.keyrun.com/code/p.php?a='+id+'&c='+cid+'&t=3
        [frame]http://u.keyrun.com/'+paypopupURL+'
    [script]http://www.dm5x.com/4yxf/3637/../../inc/hits.asp?zt_id=3637

huai168an

没发现哎，难道被过了

Joker

反正。。就是有问题。。
Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Namestnikov Yury
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


> Attachment: index.rar

joo1024

BD没报

TIS2008 不报