[挂马分析] http://love.cnyw.net/

显示全部楼层 · 发表于 2009-11-10 01:17:52

[root]http://love.cnyw.net/
[script]http://group.cnyw.net/groupjs.jsp
[script]http://vhb.xorg.pl/c.js?google_ad=1030x30_ad
      [iframe]http://kae.nna.cc/88/360sd.htm
         [iframe]http://kae.nna.cc/88/at.htm
            [iframe]http://kae.nna.cc/88/mpie.htm
                  [script]http://kae.nna.cc/88/o.swf
                  [script]http://kae.nna.cc/88/a.swf
                     [exe]http://kae.nna.cc/h/av.exe
                  [script]http://kae.nna.cc/88/a1.swf
                  [script]http://kae.nna.cc/88/c.swf
                  [script]http://kae.nna.cc/88/cc.swf
                  [script]http://kae.nna.cc/88/d.swf
                  [script]http://kae.nna.cc/88/e.swf
                  [script]http://kae.nna.cc/88/f.swf
            [iframe]http://kae.nna.cc/88/ofic.htm
                  [script]http://kae.nna.cc/88/ofic.swf
                     [exe]http://kae.nna.cc/h/av.exe
            [iframe]http://kae.nna.cc/88/al.htm
                  [iframe]http://kae.nna.cc/88/ofnt.htm
                     [script]http://kae.nna.cc/88/ofnt.swf
                        [exe]http://kae.nna.cc/h/av.exe
                  [iframe]http://kae.nna.cc/88/glz.htm
                     [script]http://kae.nna.cc/88/glz.swf
                     [script]http://kae.nna.cc/88/glzz.swf
                        [exe]http://kae.nna.cc/h/av.exe
            [iframe]http://kae.nna.cc/88/ar.htm
                  [iframe]http://kae.nna.cc/88/myra.htm
                     [script]http://kae.nna.cc/88/myra.swf
                        [exe]http://kae.nna.cc/h/av.exe
                  [iframe]http://kae.nna.cc/88/myrax.htm
                     [script]http://kae.nna.cc/88/myrax.swf
         [script]http://kae.nna.cc/88/fa.js
            [iframe]http://kae.nna.cc/88/fa.htm
                  [iframe]http://kae.nna.cc/88/ff.html
                  [iframe]http://kae.nna.cc/88/ie.html
                  [iframe]http://kae.nna.cc/88/ff.html
                  [iframe]http://kae.nna.cc/88/ie.html
                  [iframe]http://kae.nna.cc/88/ff.html
                  [iframe]http://kae.nna.cc/88/ff.html

显示全部楼层 · 发表于 2009-11-10 01:38:59

To KL

显示全部楼层 · 发表于 2009-11-10 01:47:10

什么玩意

显示全部楼层 · 发表于 2009-11-10 02:10:03

av.exe - Worm.Win32.AutoRun.barm

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2009-11-10 08:35:17

[其它] [挂马分析] http://love.cnyw.net/