也来个网马999宝藏网

显示全部楼层 · 发表于 2008-2-7 23:46:35

我再加一个...
hxxp://ok.service-google.cn/vip/ok_ok.htm
hxxp://ok.service-google.cn/vip/wm2/8.gif
http://20080203.service-google.cn/real2.exe

显示全部楼层 · 发表于 2008-2-8 00:01:32

其实我这里都有了

http://bbs.kafan.cn/viewthread.php?tid=198204&extra=page%3D3

显示全部楼层 · 发表于 2008-2-8 00:02:18

原帖由 qianwenxiang 于 2008-2-7 23:46 发表
我再加一个...
hxxp://ok.service-google.cn/vip/ok_ok.htm
hxxp://ok.service-google.cn/vip/wm2/8.gif
http://20080203.service-google.cn/real2.exe

请问如何根据GIF得到EXE呢？谢谢。

[ 本帖最后由 zxkf 于 2008-2-8 00:03 编辑 ]

显示全部楼层 · 发表于 2008-2-8 00:04:50

GIF只是一个幌子。
IE有一个BUG，就是无论文件格式是什么，只要其中存在HTML代码就会执行。
只要用记事本查看GIF文件就可以了。或者用Freshow来check!

显示全部楼层 · 发表于 2008-2-8 00:10:39

多谢LS回帖

显示全部楼层 · 发表于 2008-2-8 02:15:37

真垃圾..999管理员想钱想疯了..挂马!!BS

显示全部楼层 · 发表于 2008-2-8 02:19:45

原帖由 apje 于 2008-2-8 02:15 发表
真垃圾..999管理员想钱想疯了..挂马!!BS

“垃圾”不要随便说哦

以免给扣分了就不好！新年嘛！

你可以选择用其他词代替的！

显示全部楼层 · 发表于 2008-2-8 07:35:53

Starting the file scan:

Begin scan in 'E:\qvod.exe'
E:\qvod.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [INFO]    The file was deleted!
Begin scan in 'E:\baidu.cab'
E:\baidu.cab
  [0] Archive type: CAB (Microsoft)
  --> baidu.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [INFO]    The file was deleted!
Begin scan in 'E:\pps.exe'
E:\pps.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [INFO]    The file was deleted!
Begin scan in 'E:\bf.exe'
E:\bf.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [INFO]    The file was deleted!
Begin scan in 'E:\614.exe'
E:\614.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [INFO]    The file was deleted!
Begin scan in 'E:\lz3.exe'
E:\lz3.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [INFO]    The file was deleted!
Begin scan in 'E:\real2.exe'
E:\real2.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [INFO]    The file was deleted!

End of the scan: 2008年2月8日  07:36
Used time: 00:24 min

The scan has been done completely.

   0 Scanning directories
   8 Files were scanned
   7 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   7 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-8 16:26:40

原帖由 rappar 于 2008-2-8 00:04 发表
GIF只是一个幌子。
IE有一个BUG，就是无论文件格式是什么，只要其中存在HTML代码就会执行。
只要用记事本查看GIF文件就可以了。或者用Freshow来check!

多谢14楼MM的回答~

赶紧去试试~

显示全部楼层 · 发表于 2008-2-8 17:09:56

老面孔了......

[已鉴定] 也来个网马999宝藏网

回复 5楼 zzh161 的帖子