http://www.internetcashstream.com/ListAllArticles/article/ListAll.html

显示全部楼层 · 发表于 2012-9-22 22:46:04

Category: Trojan

Description: This program is dangerous and executes commands from an attacker.

Recommended action: Remove this software immediately.

Items:
file:C:\Sandbox\S\Browser\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0FI30ACI\ListAll[1].htm

Get more information about this item online.

记得Fan{过}{滤}Qiang

显示全部楼层 · 发表于 2012-9-22 22:49:11

Category: Intrusion Prevention
Date & Time,Risk,Activity,Status,Recommended Action,IPS Alert Name,Default Action,Action Taken,Attacking Computer,Attacker URL,Destination Address,Source Address,Traffic Description
22/9/2012 22:48:52,High,An intrusion attempt by www.internetcashstream.com was blocked.,Blocked,No Action Required,Web Attack: Mass Injection Website,No Action Required,No Action Required,"www.internetcashstream.com (174.132.89.2, 80)",www.internetcashstream.com/ListAllArticles/article/ListAll.html,"HECHUJIAN-PC (192.168.129.62, 2129)",174.132.89.2 (174.132.89.2),"TCP, www-http"
Network traffic from www.internetcashstream.com/ListAllArticles/article/ListAll.html matches the signature of a known attack. The attack was resulted from \DEVICE\HARDDISKVOLUME5\USERS\ADMINISTRATOR\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE. To stop being notified for this type of traffic, in the Actions panel, click Stop Notifying Me.

[未鉴定] http://www.internetcashstream.com/ListAllArticles/article/ListAll.html