http://thora2u.com/

显示全部楼层 · 发表于 2012-9-16 22:54:20

Category: Trojan

Description: This program is dangerous and executes commands from an attacker.

Recommended action: Remove this software immediately.

Items:
file:C:\Users\S\AppData\Roaming\SogouExplorer\Temp\__SEHttpCache__\10896\6548\%2f[26699].html

Get more information about this item online.

显示全部楼层 · 发表于 2012-9-17 00:27:22

显示全部楼层 · 发表于 2012-9-17 09:29:46

类别：入侵防护
日期和时间,风险,活动,状态,推荐的操作,IPS 警报名称,默认操作,采取的操作,攻击电脑,攻击者网址,目标地址,源地址,通信说明
17/9/2012 9:29:08,高,阻止了 thora2u.com 的入侵企图,已阻止,不需要操作,Web Attack: Mass Injection Website,不需要操作,不需要操作,"thora2u.com (122.155.10.171, 80)",thora2u.com/,"HECHUJIAN-PC (192.168.129.62, 1643)",122.155.10.171 (122.155.10.171),"TCP, www-http"
来自 thora2u.com/ 的网络通信与已知攻击的特征相匹配。攻击由 \DEVICE\HARDDISKVOLUME5\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE 引起。要停止接收有关此类通信的通知，请在“操作”面板中单击“不再提醒我”。

[未鉴定] http://thora2u.com/