暴雪玩家论坛被挂马

显示全部楼层 · 发表于 2008-4-11 14:41:58

[wide]http://bngamer.com/bbs
[script]http://bngamer.com/adfile/globalfooter2.js
[frame]http://x1.315666.net/m10.html?bng1
[frame]http://x1.315666.net/news.html
[script]http://user1.33220.net/ms06014.js
[object]http://user1.33220.net/bak.css
[frame]http://user1.33220.net/Thunder.html
[object]http://user1.33220.net/bak.css
[frame]http://user1.33220.net/GLWORLD.html
[object]http://user1.33225.net/bak.css
[frame]http://user1.33220.net/StormII.html
[object]http://user1.33220.net/bak.css
[frame]http://user1.33220.net/Real.html
[object]http://user1.33220.net/bak.css
[script]http://x1.315666.net/http://user1.33220.net/real.js
[object]http://user1.33220.net/bak.css

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\virus.rar
  [0] Archive type: RAR
  --> bak.css
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-4-11 14:48:48

[Found possible security risk] <W32/Heuristic-224!Eldorado (damaged, not disinfectable)> C:\test\virus.rar->bak.css->(UPack)

显示全部楼层 · 发表于 2008-4-11 15:06:37

【直接看图】

显示全部楼层 · 发表于 2008-4-11 15:27:36

C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > bak.css - 可能是 Win32/TrojanDownloader.Agent.NWV 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\virus.rar - 可能是 Win32/TrojanDownloader.Agent.NWV 特洛伊木马的变种 - 已删除 - 已隔离

显示全部楼层 · 发表于 2008-4-11 15:30:17

显示全部楼层 · 发表于 2008-4-11 20:00:42

rising20.39.42未杀！

显示全部楼层 · 发表于 2008-4-11 20:02:40

D:\download\virus.rar>>bak.css TrojanPSW.OnLineGames.wlu.kjdk 木马还未处理

[已鉴定] 暴雪玩家论坛被挂马

3/0