请看看这个是不是马?

显示全部楼层 · 发表于 2008-5-26 01:01:12

我昨晚在本栏的“卡巴斯基6.0KEY被封解决办法（亲测可用）”一贴下载了“卡巴斯基各版本通用破译器.rar”，运行后的确能解决卡巴6.0KEY被封的问题。但今天早上一开机，发现在桌面上多了一个“index.htm”文件，而且硬盘灯长时间闪亮。怀疑是被挂了木马。
现上传这个文件请大家分析一下。

<HTML>
<HEAD>
<title>SEDOWN.COM</title>
<link type="text/css" rel="stylesheet" href="parking.css">
</HEAD>
<body bgcolor="#d8d8d8">
<form name="id_main_form" method="post" action="Default.aspx" id="id_main_form">
<input type="hidden" name="__VIEWSTATE" value="dDwxODk1NTE5Nzg1Ozs+45m+Bmi8Bgc/L2NWGaFpARoQPXc=" />

<table align=center width="740" border="0" cellspacing="0" cellpadding="0">

<tr height="30">
  <td align="left" style="font-size:17px;font-weight:normal;" >SEDOWN.COM</td>
</tr>
<tr><td style="font-size:2px;" bgcolor="#a9c2d0"> </td></tr>
<tr height="25">
  <td style="border-bottom: 1px solid white;" align="center" bgcolor="#C9E2F0" height="25">
  <table width=100% border="0" cellspacing="0" cellpadding="0">
  <tr>
<td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_9 href="default.aspx?name_query=Job+Search&kxH2qZVQp=xRr33CxEX">Job Search</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_10 href="default.aspx?name_query=Antiques&ICmF4Sz=Av2vyCCE8E">Antiques</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_11 href="default.aspx?name_query=Fashion&WT6kI=cKhvV76JCnW699">Fashion</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_12 href="default.aspx?name_query=Watches&QzZNQ0nziQM3Bx=HK4sPuuo7Q">Watches</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_13 href="default.aspx?name_query=Plasma+Televisions&XcncI0Tb=khboQ8zu79rpzK">Plasma Televisions</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_14 href="default.aspx?name_query=Gardening&1rAQgcjBnRdt7B=2mQzqQ">Gardening</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_15 href="default.aspx?name_query=Download+Ringtones&C2JNqj0=MWCHYTa">Download Ringtones</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_16 href="default.aspx?name_query=Used+Cars&lDqWqDk5=xtoDZqKcHz2NQ">Used Cars</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_17 href="default.aspx?name_query=Hawaii&qNrFMxxamPxsHq=fuDZQSp3D">Hawaii</a></td>

  </tr>
  </table>
  </td>
</tr>
<tr>
  <td>

<table bgcolor=white border="0" width=100% cellspacing="0" cellpadding="0">
<tr>
<td width=100% valign=top>

<table width=100% border="0" cellspacing="0" cellpadding="0">

<tr><td style="padding:5px;border-bottom:1px dashed #a9c2d0;" bgcolor=#dfEfFf width=100> </td><td style="padding:5px;border-bottom:1px dashed #a9c2d0"><a id=id_search_0 href="default.aspx?name_query=Las+Vegas&9UCncc1j=Y636HHNOqQp">LAS VEGAS</a></td></tr><tr><td style="padding:5px;border-bottom:1px dashed #a9c2d0;" bgcolor=#dfEfFf width=100> </td><td style="padding:5px;border-bottom:1px dashed #a9c2d0"><a id=id_search_1 href="default.aspx?name_query=Se&Bhou8TiYtqHu=aAZDru">SE</a></td></tr><tr><td style="padding:5px;border-bottom:1px dashed #a9c2d0;" bgcolor=#dfEfFf width=100> </td><td style="padding:5px;border-bottom:1px dashed #a9c2d0"><a id=id_search_2 href="default.aspx?name_query=Airline+Tickets&XGphT5UjG=7OLJjzGzn2X">AIRLINE TICKETS</a></td></tr><tr><td style="padding:5px;border-bottom:1px dashed #a9c2d0;" bgcolor=#dfEfFf width=100> </td><td style="padding:5px;border-bottom:1px dashed #a9c2d0"><a id=id_search_3 href="default.aspx?name_query=Apartments&gUzVUc=u49x6Dly">APARTMENTS</a></td></tr><tr><td style="padding:5px;border-bottom:1px dashed #a9c2d0;" bgcolor=#dfEfFf width=100> </td><td style="padding:5px;border-bottom:1px dashed #a9c2d0"><a id=id_search_4 href="default.aspx?name_query=Dating+Services&Jt063ntu=BiQubFfY">DATING SERVICES</a></td></tr><tr><td style="padding:5px;border-bottom:1px dashed #a9c2d0;" bgcolor=#dfEfFf width=100> </td><td style="padding:5px;border-bottom:1px dashed #a9c2d0"><a id=id_search_5 href="default.aspx?name_query=Chat+Rooms&QG6AnkaP=0gF8rgZAc41">CHAT ROOMS</a></td></tr><tr><td style="padding:5px;border-bottom:1px dashed #a9c2d0;" bgcolor=#dfEfFf width=100> </td><td style="padding:5px;border-bottom:1px dashed #a9c2d0"><a id=id_search_6 href="default.aspx?name_query=Travel+Guides&1EgdXfUqUxyWH=Ew6SN">TRAVEL GUIDES</a></td></tr><tr><td style="padding:5px;border-bottom:1px dashed #a9c2d0;" bgcolor=#dfEfFf width=100> </td><td style="padding:5px;border-bottom:1px dashed #a9c2d0"><a id=id_search_7 href="default.aspx?name_query=Desktop+Computers&xKu331tj=DcbDgKjS">DESKTOP COMPUTERS</a></td></tr><tr><td style="padding:5px;border-bottom:1px dashed #a9c2d0;" bgcolor=#dfEfFf width=100> </td><td style="padding:5px;border-bottom:1px dashed #a9c2d0"><a id=id_search_8 href="default.aspx?name_query=Marketing&G7VPaFpfxx=ZBGyhIfvvn">MARKETING</a></td></tr>

<tr>
   <td align=center style="padding-top:10px;padding-left:10px;" colspan=2 >

   <span style="font-size:20px;"><br></span>

   <table border="0" cellspacing="0" cellpadding="0"><tr><td><input name="id_query" type="text" maxlength="64" id="id_query" class="text" /> </td><td><input type="submit" name="_ctl1" value="Search" class="my_button" /></td></tr></table>
   </td>
</tr>
</table>
</td>

<td><img src="http://zoo.parkingspa.com/deniska/parkmain.jpg" border="0"></td>
</tr>
</table>

  </td>
</tr>

<tr height="25">
  <td align="center" bgcolor="#C9E2F0" style="border-top: 1px solid white;" width="740" height="25">
<table width=100% border="0" cellspacing="0" cellpadding="0">
<tr>
<td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_18 href="default.aspx?name_query=Car+Accessories&Ela4jWsXvq=8wbKyrFP">Car Accessories</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_19 href="default.aspx?name_query=Healthy+Diet&EbJvmgkuw=37bPnkeQgo">Healthy Diet</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_20 href="default.aspx?name_query=Home+Business&OaqnayxpvFTxc=yI8T9sjXApSKRq">Home Business</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_21 href="default.aspx?name_query=Cellular+Accessories&rHEWz6uJ9ol=8FwmHr6zHu7s3">Cellular Accessories</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_22 href="default.aspx?name_query=Cell+Phone+Deals&NK3SSJxZx=e5eXq80">Cell Phone Deals</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_23 href="default.aspx?name_query=Gift+Ideas&NQfyAXyPPS=8SjPEiY">Gift Ideas</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_24 href="default.aspx?name_query=Business+Services&aWOOfv0bZ=kxDoLREH">Business Services</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_25 href="default.aspx?name_query=Video+Games&5oJptG6bc2cLH=gA7s4wXZnvOm">Video Games</a></td><td width=1% style="padding-top:3px;padding-bottom:3px;padding-left:5px;padding-right:5px;" align=center><a id=id_search_26 href="default.aspx?name_query=Pet+Supply&o1iXoM=JJDzY5x0GUmWO">Pet Supply</a></td>
</tr>
</table>
  </td>
</tr>
<tr><td style="font-size:2px;" bgcolor="#a9c2d0"> </td></tr>
<tr>
  <td style="padding-top:3px;">
  <table  border="0" cellspacing="0" width="100%" cellpadding="0">
  <tr>
<td class=disc><a href="disclaimer.htm" target="_blank">Disclaimer</a></td>

<td align="right"><b>» </b><a href="javascript:window.external.AddFavorite('http://SEDOWN.COM','SEDOWN.COM')">Bookmark This Page</a></td>
  </tr>
  </table>
  </td>
</tr>
</table>
<script language="javascript">
</script>
</form>
</body>
</HTML>

显示全部楼层 · 发表于 2008-5-26 01:18:47

看不出，但是貌似指向的是一个类似百度，google之类的工具条国外网站。这个html本身不带任何可执行脚本。

[病毒样本] 请看看这个是不是马?

浏览过的版块