hxxp://www.jp578.cn [挂马] [by jimmyleo]

显示全部楼层 · 发表于 2009-1-7 13:27:18

挂马

[ 本帖最后由 jimmyleo 于 2009-1-7 13:34 编辑 ]

显示全部楼层 · 发表于 2009-1-7 13:30:23

LinkScanner

显示全部楼层 · 发表于 2009-1-7 13:35:52

Log is generated by FreShow.
[wide]http://www.jp578.cn
[script]http://bbs.jp578.cn/api/javascript.php?key=memberrank_iIQ
      [script]http://bbs.jp578.cn/api/javascript.php?key=memberrank_iIQ
         [script]http://www.asp-htm.cn/jpg.js
            [frame]http://xxxxcccvv.cn/2/zhan.htm?17
                  [frame]http://xxxxcccvv.cn/2/123.htm
                     [frame]http://xxxxcccvv.cn/2/flash.htm
                     [frame]http://xxxxcccvv.cn/2/as.htm
                     [frame]http://xxxxcccvv.cn/2/14.htm
                        [object]http://nnnnaaadd.cn/2.exe
                     [frame]http://xxxxcccvv.cn/2/lz.htm
                     [frame]http://xxxxcccvv.cn/2/sina.htm
                     [frame]http://xxxxcccvv.cn/2/office.htm
                     [frame]http://xxxxcccvv.cn/2/NCTAudioFile.htm
                     [frame]http://xxxxcccvv.cn/2/re10.htm
                     [frame]http://xxxxcccvv.cn/2/re11.htm

//过滤360封域名代码专用设置参数

狠可爱哦

显示全部楼层 · 发表于 2009-1-7 14:31:32

p://nnnnaaadd.cn/1.exe
p://nnnnaaadd.cn/2.exe
p://nnnnaaadd.cn/3.exe
p://nnnnaaadd.cn/4.exe都能下载

显示全部楼层 · 发表于 2009-1-7 23:55:24

nod都报了！

显示全部楼层 · 发表于 2009-1-8 00:50:34

Hello,

1.exe_ - Worm.Win32.AutoRun.wuv

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Regards, Aseev Evgeny
Virus Analyst

Kaspersky Lab Ltd
Moscow, Russia
Tel/Fax: +7 (095) 797-8700
E-mail: newvirus@kaspersky.com

[已鉴定] hxxp://www.jp578.cn [挂马] [by jimmyleo]