天外来客电影下载，http://girlbt.com/forum-2-1.html。[clean][by 帅就是帅]

显示全部楼层 · 发表于 2012-4-4 13:07:02

本帖最后由疯狂的小鬼于 2012-4-5 12:26 编辑

天外来客电影BT下载，本来挺有名的，没想到清明节旅游归来就被人挂马了，提示下载360.exe文件，卡巴斯基kis2012提示木马，清除完毕。它会自动连接到图片里面那个网址，求高手鉴定！

显示全部楼层 · 发表于 2012-4-4 14:31:03

网站打不开了，估计管理在维护！

显示全部楼层 · 发表于 2012-4-4 15:38:49

BD+chrome没反应

显示全部楼层 · 发表于 2012-4-4 17:22:54

没发现楼主的图中木马

[Tree]
http://girlbt.com/forum-2-1.html
http://cpro.baidu.com/cpro/ui/uijs.php?tu=u63097&tn=text_default_960_90&n=lxy1868_cpr&rsi1=90&rsi0=960&rad=&rss0=%23FFFFFF&rss1=%23FFFFFF&rss2=%230000ff&rss3=%23444444&rss4=%23008000&rss5=&rss6=%23e10900&rsi5=4&ts=1&at=6&ch=0&cad=1&aurl=&rss7=&cpa=1&fv=11&cn=1&if=4&word=http%3A%2F%2Fgirlbt.com%2Fforum-2-1.html&refer=&ready=3&jk=d29ed72cb98b0aa2&jn=3&lmt=1333531147&csp=1280,800&ccd=32&chi=0&cja=false&cpl=0&cmi=0&cce=0&csl=zh-CN&did=1&rt=22&dt=1333531148&ev=67108864&c01=0&prt=1333531147595
http://cpro.baidu.com/extra/text_flash/AC_RunActiveContent.js
http://cpro.baidu.com/cpro/ui/uijs.php?tu=u63097&tn=text_default_960_90&n=lxy1868_cpr&rsi1=90&rsi0=960&rad=&rss0=%23FFFFFF&rss1=%23FFFFFF&rss2=%230000ff&rss3=%23444444&rss4=%23008000&rss5=&rss6=%23e10900&rsi5=4&ts=1&at=6&ch=0&cad=1&aurl=&rss7=&cpa=1&fv=11&cn=0&if=4&word=http%3A%2F%2Fgirlbt.com%2Fforum-2-1.html&refer=&ready=3&jk=394458a67a4f9ac0&jn=3&lmt=1333531148&csp=1280,800&ccd=32&chi=0&cja=false&cpl=0&cmi=0&cce=0&csl=zh-CN&did=2&rt=7&dt=1333531149&pn=4|text_default_960_90|6&ev=67108864&c01=0&prt=1333531147595
http://cpro.baidu.com/cpro/ui/uijs.php?tu=u63097&tn=text_default_960_90&n=lxy1868_cpr&rsi1=90&rsi0=960&rad=&rss0=%23FFFFFF&rss1=%23FFFFFF&rss2=%230000ff&rss3=%23444444&rss4=%23008000&rss5=&rss6=%23e10900&rsi5=4&ts=1&at=6&ch=0&cad=1&aurl=&rss7=&cpa=1&fv=11&cn=0&if=4&word=http%3A%2F%2Fgirlbt.com%2Fforum-2-1.html&refer=&ready=3&jk=0ebcfab0d76180ca&jn=3&lmt=1333531149&csp=1280,800&ccd=32&chi=0&cja=false&cpl=0&cmi=0&cce=0&csl=zh-CN&did=3&rt=14&dt=1333531149&pn=4:4|text_default_960_90:text_default_960_90|6:6&ev=67108864&c01=0&prt=1333531147595
http://cpro.baidu.com/extra/text_flash/AC_RunActiveContent.js
http://img9.3393.com/union/wudi789/html-2/270x200.htm?FromWebId=8391&DomainId=79190&ds8datastr=_gz_M5_E3YzMx_EzNjMy_g3YzM3_kzMTM5_A3YzMx_UzMDMx_AzOQ==
http://u.3393.com/count2click.js
http://girlbt.com/static/js/common.js?Z8O
http://girlbt.com/static/js/forum.js?Z8O
http://girlbt.com/static/js/logging.js?Z8O
http://cpro.baidu.com/cpro/ui/c.js
http://pos.baidu.com/ecom?di=u63097&tm=BAIDU_CPRO_SETJSONADSLOT&fn=BAIDU_CPRO_SETJSONADSLOT&baidu_id=
http://cpro.baidu.com/cpro/ui/c.js
http://pos.baidu.com/ecom?di=u63097&tm=BAIDU_CPRO_SETJSONADSLOT&fn=BAIDU_CPRO_SETJSONADSLOT&baidu_id=
http://cpro.baidu.com/cpro/ui/c.js
http://pos.baidu.com/ecom?di=u63097&tm=BAIDU_CPRO_SETJSONADSLOT&fn=BAIDU_CPRO_SETJSONADSLOT&baidu_id=
http://u.3393.com/showpage.php?pid=150109&show_t=2
http://s84.cnzz.com/stat.php?id=24611&web_id=24611
http://hm.baidu.com/h.js?0db1a6bd1acde8a9225bac703fb64a1f
http://girlbt.com/home.php?mod=misc&ac=sendmail&rand=1333531107
[Payload]
[Page Info]
Charset: gb2312
Cookie: 1eNX_2132_lastvisit=1333526801; 1eNX_2132_sid=WQ8hZI; 1eNX_2132_lastact=1333531118%09home.php%09misc; 1eNX_2132_forum_lastvisit=D_2_1333531107; 1eNX_2132_visitedfid=2; 1eNX_2132_sendmail=1; cnzz_a24611=1; sin24611; rtime=0; ltime=1333531151042; cnzz_eid=36932389-1333529024-; Hm_lvt_0db1a6bd1acde8a9225bac703fb64a1f=1333531155859; Hm_lpvt_0db1a6bd1acde8a9225bac703fb64a1f=1333531155859; Cookier1=Filter
Domain: girlbt.com
LastModified: 04/04/2012 17:20:24
Url: http://girlbt.com/forum-2-1.html

复制代码

显示全部楼层 · 发表于 2012-4-4 19:21:34

估计管理员已经维护好了吧。。。

显示全部楼层 · 发表于 2012-4-5 12:23:34

已经好了，请封帖，谢谢！

[已鉴定] 天外来客电影下载，http://girlbt.com/forum-2-1.html。[clean][by 帅就是帅]