可疑网址

显示全部楼层 · 发表于 2008-3-27 22:46:02

看来的我漏洞不少

=====================

[ 本帖最后由冷冷于 2008-3-27 22:53 编辑 ]

显示全部楼层 · 发表于 2008-3-27 22:48:49

原帖由 tanlimo 于 2008-3-27 22:24 发表
问题很大啊，点里面的连接

http://www.yzdir.com/tiggle.com

226721

只解析了一下，没进去点那。

显示全部楼层 · 发表于 2008-3-27 22:50:22

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOnline.arc

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.37.32

显示全部楼层 · 发表于 2008-3-27 22:55:48

那个电梯整人的文本换个编码就能看了

显示全部楼层 · 发表于 2008-3-27 22:58:08

detected: Trojan program Trojan-PSW.Win32.Nilage.cgg URL: http://bbs.kafan.cn/attachment.p ... gle.com//data.rar//®à±.exe//data.rar//av.com

显示全部楼层 · 发表于 2008-3-27 23:26:34

回复 9楼冷冷的帖子

还会冷吗？功课有进步吗

没利用漏洞，里面的连接全指向病毒文件

回复 7楼tanlimo 的帖子
漂亮哦, 干得好,真有你

[ 本帖最后由 pcreg 于 2008-3-27 23:28 编辑 ]

显示全部楼层 · 发表于 2008-3-28 03:02:44

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\桌面.rar'
C:\Documents and Settings\Administrator\My Documents\
  桌面.rar
[0] Archive type: RAR
--> esc32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
--> temp.dll
      [DETECTION] Contains suspicious code HEUR/Malware
--> winescs.exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.cgg
--> av.com
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.cgg
   --> ￗ￀ￃ￦.exe
      [1] Archive type: RAR SFX (self extracting)
      --> ﾹqﾱ￨ﾾ￣ﾤH.TXT
      --> av.com
         [DETECTION] Is the Trojan horse TR/PSW.Nilage.cgg
         [WARNING] Infected files in archives cannot be repaired!
   [WARNING] The file was ignored!
  桌面.rar:Zone.Identifier

End of the scan: 2008年3月27日  12:02
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   9 Files were scanned
   3 viruses and/or unwanted programs were found
   2 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   6 Files not concerned
   2 Archives were scanned
   2 Warnings
   0 Notes

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\tiggle.rar'
C:\Documents and Settings\Administrator\My Documents\
  tiggle.rar
[0] Archive type: RAR
   --> tiggle.com
      [1] Archive type: RAR SFX (self extracting)
      --> ﾮ￠ﾭﾱ.exe
      [2] Archive type: RAR SFX (self extracting)
      --> ﾹqﾱ￨ﾾ￣ﾤH.TXT
      --> av.com
            [DETECTION] Is the Trojan horse TR/PSW.Nilage.cgg
            [WARNING] Infected files in archives cannot be repaired!
      --> ﾹqﾱ￨ﾾ￣ﾤH.TXT
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-3-28 03:16:19

是不是里面的网页都被挂马了

[已鉴定] 可疑网址

回复 10楼 tanlimo 的帖子

5/1