这是这个病毒说明：
http://www.microsoft.com/securit ... %3AJS%2FIframeRef.K
Malware Protection Center
Home > Learn more about malware > Research Trojan:JS/IframeRef.K
Trojan:JS/IframeRef.K (?)
Encyclopedia entry
Updated: Mar 27, 2013 | Published: Mar 15, 2013
Aliases
Mal/Iframe-AL (Sophos)
Alert Level (?)
Severe
Antimalware protection details
Microsoft recommends that you download the latest definitions to get protected.
Detection initially created:
Definition: 1.145.1905.0
Released: Mar 15, 2013
--------------------------------------------------------------------------------
On this page
Summary|Symptoms|Technical Information|Prevention|Recovery
--------------------------------------------------------------------------------
Summary
Trojan:JS/IframeRef.K is a specially formed IFrame that links out to another website that contains other malware.
An IFrame is an HTML document that is embedded in another HTML document.
Top
--------------------------------------------------------------------------------
Symptoms
There are no common symptoms associated with this threat - links are activated within IFrames while viewing web content on maliciously modified pages. Alert notifications from installed antivirus software may be the only symptoms.
Top
--------------------------------------------------------------------------------
Technical Information (Analysis)
Trojan:JS/IframeRef.K is a specially formed IFrame tag that points to websites containing malicious content, for example malicious JavaScript that exploits a specific vulnerability.
In the wild , Trojant:JS/IframeRef.K redirects browsers to certain URLs in the following servers:
•129.121.133.150
•149.47.243.178
•157.14.29.12
•173.233.134.145
•178.73.226.20
•193.235.141.4
•199.204.209.178
•209.126.248.211
•64.247.184.248
•65.39.246.9
•65.75.175.62
•69.89.4.114
•69.90.113.92
•80.248.238.222
These servers cannot be reached as of this writing.
Analysis by Horea Coroiu
Top
--------------------------------------------------------------------------------
Prevention
Take these steps to help prevent infection on your computer.
Top
--------------------------------------------------------------------------------
Recovery
To detect and remove this threat and other malicious software that may be installed on your computer, run a full-system scan with an appropriate, up-to-date, security solution. The following Microsoft products detect and remove this threat:
•Microsoft Security Essentials or, for Windows 8, Windows Defender
•Microsoft Safety Scanner
Top
Provide feedback
|
楼主: 颜正强
狗仔卡
楼主
显身卡
发表于 29.5.2013 14:25:27
发表于 29.5.2013 14:37:00