[已鉴定] X1

显示全部楼层 · 发表于 2008-12-6 10:58:42

Log is generated by FreShow.
[wide]http://www.bmorn.com/cn/
[script]http://www.bmorn.com/cn/images/objectSwap.js
[script]http://www.bmorn.com/cn/qp.js
[script]http://%79%72%66%6C%61%2E%63%6E
      [frame]http://www.laoyang4.cn/laoy/16.htm
         [frame]http://sllwrnm2.cn/a192/fxx.htm
            [frame]http://sllwrnm2.cn/a192/fx.htm
                  [frame]http://sllwrnm2.cn/a192/Ilink.html
                     [script]http://sllwrnm2.cn/a192/swfobject.js
                  [frame]http://sllwrnm2.cn/a192/flink.html
            [frame]http://sllwrnm2.cn/a192/ss.html
            [frame]http://sllwrnm2.cn/a192/MS06014.htm
            [frame]http://sllwrnm2.cn/sina.htm
            [frame]http://sllwrnm2.cn/UU.htm
            [frame]http://sllwrnm2.cn/a192/Thunder.html
            [frame]http://sllwrnm2.cn/a192/GLWORLD.html
            [frame]http://sllwrnm2.cn/a192/real.htm
            [frame]http://sllwrnm2.cn/a192/Real.html
         [script]http://js.tongji.cn.yahoo.com/850894/ystet.js
      [script]http://js.tongji.cn.yahoo.com/861271/ystat.js

MP4环了。。。
去了MP4官网页。。。
结果。。。
不说啥了。。
hXXp://www.baikec.cn/new/a192.css

显示全部楼层 · 发表于 2008-12-6 11:43:27

2008-12-06 11:42:40 HTTP filter file http://www.baikec.cn/new/a192.css a variant of Win32/Agent.OGF trojan connection terminated - quarantined CHINESE-GUNDAM\GUNDAM Threat was detected upon access to web by the application: C:\Program Files\Mozilla Firefox\firefox.exe.

显示全部楼层 · 发表于 2008-12-6 11:45:47

Kaspersky KSN KILL

显示全部楼层 · 发表于 2008-12-6 11:56:15

微点拦截

显示全部楼层 · 发表于 2008-12-6 13:23:42

继续哦

显示全部楼层 · 发表于 2008-12-6 14:30:43

Log is generated by FreShow.
[wide]http://www.bmorn.com/
[script]http://www.0513jf.com/wap/s.js
      [frame]http://baidu.bbtu05.cn/w79/w79.htm
         [frame]http://baidu.bbtu05.cn/w79/new.html
      [script]http://www.0513jf.com/wap/s8.js
         [frame]http://www.0513jf.com/wap/s.htm
            [frame]http://www.ctoyota.cn/ccsw/20.htm?02
                  [frame]http://sllwrnm4.cn/a129/fxx.htm
                     [frame]http://sllwrnm4.cn/a129/fx.htm
                     [frame]http://sllwrnm4.cn/a129/ss.html
                        [object]http://www.baikec.cn/new/a1.css
                     [frame]http://sllwrnm4.cn/a129/MS06014.htm
                        [object]http://www.baikec.cn/new/a129.css
                     [frame]http://sllwrnm4.cn/sina.htm
                     [frame]http://sllwrnm4.cn/UU.htm
                     [frame]http://sllwrnm4.cn/a129/Thunder.html
                     [frame]http://sllwrnm4.cn/a129/GLWORLD.html
                     [frame]http://sllwrnm4.cn/a129/real.htm
                     [frame]http://sllwrnm4.cn/a129/Real.html
                        [object]http://www.baikec.cn/new/u316129.css
            [frame]http://www.zgynkms.cn/yhyw/21.htm
                  [frame]http://sllwrnm4.cn/a238/fxx.htm
                     [frame]http://sllwrnm4.cn/a238/fx.htm
                     [frame]http://sllwrnm4.cn/a238/ss.html
                        [object]http://www.baikec.cn/new/a1.css
                     [frame]http://sllwrnm4.cn/a238/MS06014.htm
                        [object]http://www.baikec.cn/new/a238.css
                     [frame]http://sllwrnm4.cn/sina.htm
                     [frame]http://sllwrnm4.cn/UU.htm
                     [frame]http://sllwrnm4.cn/a238/Thunder.html
                     [frame]http://sllwrnm4.cn/a238/GLWORLD.html
                     [frame]http://sllwrnm4.cn/a238/real.htm
                     [frame]http://sllwrnm4.cn/a238/Real.html
[script]http://%79%72%66%6C%61%2E%63%6E
      [frame]http://www.laoyang4.cn/laoy/16.htm
         [frame]http://sllwrnm4.cn/a192/fxx.htm
            [frame]http://sllwrnm4.cn/a192/fx.htm
            [frame]http://sllwrnm4.cn/a192/ss.html
                  [object]http://www.baikec.cn/new/a1.css
            [frame]http://sllwrnm4.cn/a192/MS06014.htm
                  [object]http://www.baikec.cn/new/a192.css
            [frame]http://sllwrnm4.cn/sina.htm
            [frame]http://sllwrnm4.cn/UU.htm
            [frame]http://sllwrnm4.cn/a192/Thunder.html
            [frame]http://sllwrnm4.cn/a192/GLWORLD.html
            [frame]http://sllwrnm4.cn/a192/real.htm
            [frame]http://sllwrnm4.cn/a192/Real.html
                  [object]http://www.baikec.cn/new/u316192.css

显示全部楼层 · 发表于 2008-12-6 22:46:15

Begin scan in 'D:\Sandbox\Limited\DefaultBox\user\current\桌面\a192.css'
D:\Sandbox\Limited\DefaultBox\user\current\桌面\a192.css
   [DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
Begin scan in 'D:\Sandbox\Limited\DefaultBox\user\current\桌面\a1.css'
D:\Sandbox\Limited\DefaultBox\user\current\桌面\a1.css
   [DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
Begin scan in 'D:\Sandbox\Limited\DefaultBox\user\current\桌面\a129.css'
D:\Sandbox\Limited\DefaultBox\user\current\桌面\a129.css
   [DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
Begin scan in 'D:\Sandbox\Limited\DefaultBox\user\current\桌面\a238.css'
D:\Sandbox\Limited\DefaultBox\user\current\桌面\a238.css
   [DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!

[已鉴定] X1

甚多

回复 6楼 lg560852 的帖子