与卡饭一样被感染的网站及样本x4

luxiao200888

hxxp://www.q68.com/html/pic/gaoxiaoQQbiaoqing/200806/30-6yue24rizuixinjingdianbiaoqing_10369.html (hxxp://yizhan.whyi.org/baidu.js)

http://www.2iqq.cn/html/QQyuanchuangbiaoqing/20071112/264.html
(hxxp://yizhan.whyi.org/g.js)

hxxp://www.iicbs.com/html/tool/200806/20-250.html
http://www.x355.cn/QQxuanwuwubu/200808/09-246.html
(hxxp://hp540.weedns.com/g.js)

hxxp://www.lelezu.com/
(hxxp://hp540.weedns.com/g.js,hxxp://hp540.weedns.com/b.js)

此样本与卡饭所挂样本类似,此样本感染迅速...请各位上报

[ 本帖最后由 luxiao200888 于 2009-4-26 13:12 编辑 ]

einnawy

过nis

Palkia

金山 0

板砖飞向我

过RS

hddu

费尔在线扫描杀。

luxiao200888

更新

Elcondorposa

The file 'E:\DownLoad\2\1.js'
contained a virus or unwanted program 'HEUR/HTML.Malware' [heuristic]

The file 'E:\DownLoad\3\2.js'
contained a virus or unwanted program 'HEUR/HTML.Malware' [heuristic]

The file 'E:\DownLoad\4\3.js'
contained a virus or unwanted program 'HEUR/HTML.Malware' [heuristic]

[ 本帖最后由 Elcondorposa 于 2009-4-26 13:07 编辑 ]

luxiao200888

又找到一些受害者

sharkkong

2009-4-26 13:05:38        Detected        Trojan program Trojan-Clicker.HTML.IFrame.afy        h11p://bbs.kafan.cn/attachment.php?aid=521654&k=15192bc491fc27f6250e7808935bad45&t=1240722258//1//attachment               
2009-4-26 13:05:43        Detected        Trojan program Trojan-Clicker.HTML.IFrame.afy        h11p://bbs.kafan.cn/attachment.php?aid=521659&k=f4481fea55373d3d2449a72a915f79bd&t=1240722258//2//attachment               
2009-4-26 13:05:47        Detected        Trojan program Trojan-Clicker.HTML.IFrame.afy        h11p://bbs.kafan.cn/attachment.php?aid=521662&k=133bfb5bba662fd0eb2321bef6691fc8&t=1240722258//3//attachment

taoyuan237

已经收集过了