自制MS14-065挂马网站

显示全部楼层 · 发表于 2018-3-29 04:08:29

地址：http://114.115.146.121/MS14-065.html

IE浏览器MS14-065远程代码执行漏洞

显示全部楼层 · 发表于 2018-3-29 06:58:48

火绒应该把这个网址拉黑了
你发一个我叫火绒拉黑一个域名

显示全部楼层 · 发表于 2018-3-29 07:11:03

Kaspersky Internet Security

Access denied

The requested URL cannot be provided

Object URL:

http://114.115.146.121/MS14-065.html

Reason: the object is infected by Exploit.VBS.CVE-2014-6332.a

Message generated on: 2018/3/29 7:10:40

显示全部楼层 · 发表于 2018-3-29 10:28:57

本帖最后由 ELOHIM 于 2018-3-29 10:30 编辑

SCEP : TrojanDownloader:HTML/Adodb.gen!A

Threat behavior
TrojanDownloader:HTML/Adodb.gen!A is generic detection for an HTML script trojan that exploits a vulnerability in Microsoft Data Access Components (MDAC) that allows code execution (MS06-014). This trojan attempts to download and execute malware (currently detected as Backdoor:Win32/Agent) from the website "real.kav2008.com".
Installation
This trojan is encountered when a user visits a malicious web page that contains the script. HTML/Adodb.gen!A exploits a vulnerability in the ActiveX Data Object (ADO) RDS.Dataspace ActiveX control, allowing the trojan to download and execute arbitrary programs or malware.
Additional Information
Computers that are out-of-date with the latest security updates may be at risk. The minimum security update to mitigate this vector is Microsoft Security Bulletin MS06-014, initially published April 2006.

显示全部楼层 · 发表于 2018-3-29 10:32:36

ns 阻止

显示全部楼层 · 发表于 2018-3-29 10:43:14

显示全部楼层 · 发表于 2018-3-29 22:20:10

卡巴火绒全拦截！

显示全部楼层 · 发表于 2018-3-29 22:36:42

显示全部楼层 · 发表于 2018-3-29 23:49:09

nis

显示全部楼层 · 发表于 2018-7-3 08:28:40

打不开网站

[原创] 自制MS14-065挂马网站