hxxp://www.tgula.com/book/default.aspx（唐古拉--文化社区）

显示全部楼层 · 发表于 2009-7-18 23:55:46

Log is generated by FreShow.
[wide]http://www.tgula.com/book/default.aspx
[script]http://www.tgula.com/book/../include/head.js
[script]http://yucibaby.com/x.js
      [frame]http://tbttbt.cn/01/01.htm?n05
         [frame]http://tbttbt.cn/01/dr1.html
            [frame]http://tbttbt.cn/01/fdsa33dsa.htm
                  [script]http://tbttbt.cn/01/go.jpg
                     [object]http://dsade332.cn/smss.exe
                  [script]http://tbttbt.cn/01/go1.jpg
            [frame]http://tbttbt.cn/01/ojkjuuu.htm
         [script]http://js.tongji.linezing.com/1183893/tongji.js
[script]http://c6.50bang.com/click.js?user_id=424847&l=701

显示全部楼层 · 发表于 2009-7-19 08:53:31

smss.exe
kis8.0 miss

显示全部楼层 · 发表于 2009-7-19 21:24:46

url and sample to KL

[ 本帖最后由尤金卡巴斯基于 2009-7-19 21:26 编辑 ]

显示全部楼层 · 发表于 2009-7-19 21:40:35

Hello,

smss.exe - Worm.Win32.AutoRun.arzt

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Regards, Tatarinov Ivan
Virus Analyst

显示全部楼层 · 发表于 2009-7-19 23:59:00

这个网站要死人进去

网盾拦截但是内存还是被吃劲

显示全部楼层 · 发表于 2009-7-21 03:04:23

小A拦截了3个

[已鉴定] hxxp://www.tgula.com/book/default.aspx（唐古拉--文化社区）