各位帮我看一下这个ASP源代码

显示全部楼层 · 发表于 2007-10-13 12:34:42

NOD32报 ASP/Ace.F木马，我自已又看不懂ASP代码，麻烦懂的人帮我看看这段代码是做了些什么操作的，这个是从网上下载的一个整站源码的一个文件

显示全部楼层 · 发表于 2007-10-13 12:35:58

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\upload_config.rar'
C:\Users\morgan\Documents\
  upload_config.rar
  upload_config.rar:Zone.Identifier
[0] Archive type: RAR
--> upload_config.asp
      [DETECTION] Contains detection pattern of the HTML script virus HTML/ADODB.Exploit.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-10-13 12:36:58

是ASP的源代码，懂ASP语言的人应该能看出来是做什么操作的吧

显示全部楼层 · 发表于 2007-10-13 12:37:28

觉得有些像是误报？？
扔给antivir了

显示全部楼层 · 发表于 2007-10-13 12:38:48

这个是文件上传设置用的asp，我反正是没看出什么问题。。

显示全部楼层 · 发表于 2007-10-13 12:40:28

怀疑会XX这个asp是因为用了ADOdb，但是我个人认为这个代码是都ok了。。

显示全部楼层 · 发表于 2007-10-13 12:40:30

Start of the scan: Saturday, 13 October, 2007  12:40

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\upload_config.rar'
C:\Documents and Settings\tim\桌面\upload_config.rar
  [0] Archive type: RAR
  --> upload_config.asp
   [DETECTION] Contains detection pattern of the HTML script virus HTML/ADODB.Exploit.Gen
   [INFO]    A backup was created as '477c4ca3.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: Saturday, 13 October, 2007  12:40
Used time: 00:01 min

The scan has been done completely.

   0 Scanning directories
   2 Files were scanned
   0 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-10-13 15:34:59

只报了三个，应该是误报？

显示全部楼层 · 发表于 2007-10-13 15:40:23

无问题。鉴定完毕

[可疑文件] 各位帮我看一下这个ASP源代码

本帖子中包含更多资源

本帖子中包含更多资源