挂马的站

显示全部楼层 · 发表于 2008-2-6 22:23:05

http://www.xp510.com/

[ 本帖最后由 snoopy2004 于 2008-2-6 22:26 编辑 ]

显示全部楼层 · 发表于 2008-2-6 22:27:55

Begin scan in 'D:\BOOK\ppp[1].rar'
D:\BOOK\ppp[1].rar
  [0] Archive type: RAR
  --> ppp[1].js
   [DETECTION] Contains detection pattern of the HTML script virus HTML/Shellcode.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-2-6 22:36:01

咖啡miss

显示全部楼层 · 发表于 2008-2-6 22:43:32

nod32无视，磁盘灯长亮，不正常啊

显示全部楼层 · 发表于 2008-2-6 22:56:19

hXXp://www.xp510.com/
进去没发现异常。
EQ+微点
2008年2月6日22：56

显示全部楼层 · 发表于 2008-2-6 23:06:48

The requested object is INFECTED. The following viruses Exploit.JS.Agent.et were found

显示全部楼层 · 发表于 2008-2-6 23:13:00

IK

I:\VS\VIRUS2\drive\I\Temporary Internet Files\Content.IE5\MXVNN9I7\xp510[1].htm - Signature 'Worm.Win32.Fujack.a' found
61 Files scanned
(3 Archives with 3 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.437

显示全部楼层 · 发表于 2008-2-6 23:13:41

Log is generated by FreShow.
[wide]http://www.xp510.com/
[script]http://%76%63%63%64%2E%63%6E -> http://vccd.cn
      [frame]http://xxx.hao1680.com/xx.htm?id=017
         [script]http://xxx.hao1680.com/wm/rl.js
            [object] http://qqq.521town.com/down.exe
         [frame]http://xxx.hao1680.com/wm/jh.htm
            [script]http://ppp.chsip.net/wm/11.js
                  [object] http://qqq.aishengho.com/down.exe
            [script]http://ppp.chsip.net/wm/bb.js Not Found
            [script]http://ppp.chsip.net/wm/ppp.js
                  [object] http://qqq.hao1658.com/down.exe
            [script]http://ppp.chsip.net/wm/lz.js
                  [object] http://qqq.521town.com/down.exe

又是老东西

显示全部楼层 · 发表于 2008-2-6 23:17:31

原帖由 rappar 于 2008-2-6 23:13 发表
Log is generated by FreShow.
[wide]http://www.xp510.com/
[script]http://%76%63%63%64%2E%63%6E -> http://vccd.cn
[frame]http://xxx.hao1680.com/xx.htm?id=017
[script]http: ...

要是会弄多好

显示全部楼层 · 发表于 2008-2-7 00:21:58

大蜘蛛无视

[已鉴定] 挂马的站