hxxp://nctz888.com/n.js

显示全部楼层 · 发表于 2009-7-17 13:44:45

可疑連結請幫忙分析
謝謝
hxxp://nctz888.com/n.js

显示全部楼层 · 发表于 2009-7-17 13:47:26

网址已经关闭。。。
这个素脚本文件。。。

显示全部楼层 · 发表于 2009-7-17 13:58:37

Log is generated by FreShow.
[wide]http://nctz888.com/n.js
[frame]http://asddwe32.cn/01/01.htm?f
      [frame]http://asddwe32.cn/01/as1.html
         [frame]http://asddwe32.cn/01/dsaf32.htm
            [script]http://asddwe32.cn/01/go.jpg
                  [object]http://fewwe322.cn/360safe.exe
            [script]http://asddwe32.cn/01/go1.jpg
         [frame]http://asddwe32.cn/01/ofi.htm
            [object]http://fewwe322.cn/360safe.exe
      [script]http://asddwe32.cn/01/\"http:\/\/js.tongji.linezing.com\/1183893\/tongji.js\"

显示全部楼层 · 发表于 2009-7-17 18:24:49

"时间" "描述" "网站地址"
"2009-7-17 18:23:07" "已成功阻止 http://www.9ady.com/ 试图感染的威胁" "http://www.9ady.com/"
"2009-7-17 18:23:06" "已成功阻止 http://www.9ady.com/ 试图感染的威胁" "http://www.9ady.com/"

显示全部楼层 · 发表于 2009-7-18 00:18:27

url and sample to KL

显示全部楼层 · 发表于 2009-7-18 00:25:29

费尔在线扫描它是一个木马

显示全部楼层 · 发表于 2009-7-18 00:49:30

Hello,

360safe.exe - Worm.Win32.AutoRun.aruj

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Best regards, Sergey Prokudin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[已鉴定] hxxp://nctz888.com/n.js