挂马网站！！！！！！

显示全部楼层 · 发表于 2009-4-23 10:44:40

此网站可以导致卡巴退出 ----小心测试

http://www.shaolinkungfu.edu.cn

显示全部楼层 · 发表于 2009-4-23 11:04:35

关于:hxxp://www.shaolinkungfu.edu.cn/解密的日志(全体输出 -  25):

Level  0>http://www.shaolinkungfu.edu.cn/
Level  1>http://q.94saomm.com/js.js
Level  2>http://www.10555.com/sing/fs.htm
Level  3>http://www.10555.com/sing/all.htm
Level  4>http://www.10555.com/sing/all.js
Level  5>http://www.10555.com/sing/4.htm
Level  6>http://b.wuc9.com/ac.css  ●
Level  5>http://www.10555.com/sing/3.htm
Level  4>http://www.10555.com/sing/7.htm
Level  4>http://www.10555.com/sing/2.htm
Level  4>http://www.10555.com/sing/uss.htm
Level  4>http://www.10555.com/sing/cx.htm
Level  4>http://www.10555.com/sing/bf.htm
Level  4>http://www.10555.com/sing/office.htm
Level  4>http://www.10555.com/sing/s.htm
Level  4>http://www.10555.com/sing/newlz.htm
Level  4>http://www.10555.com/sing/1.htm
Level  3>http://www.10555.com/sing/ie.swf  ●
Level  4>http://www.10555.com/sing/win%209,0,115,0i.swf  ●
Level  5>http://b.wuc9.com/ac.css  ●
Level  1>http://www.shaolinkungfu.edu.cn/mm_menu.js
Level  1>http://www.shaolinkungfu.edu.cn/images/11.swf  ●
Level  1>http://www.shaolinkungfu.edu.cn/tools/js/js.js
Level  1>http://www.shaolinkungfu.edu.cn/i_rolls.js
Level  1>http://www.shaolinkungfu.edu.cn/tools/js/js.js

网页分析：cchao21(打点的均为真实木马地址)

显示全部楼层 · 发表于 2009-4-23 11:10:40

小红伞拦截

显示全部楼层 · 发表于 2009-4-23 12:38:06

卡巴能拦截啊

显示全部楼层 · 发表于 2009-4-23 16:21:34

hxxp://b.wuc9.com/ac.css

下载物，kaba miss ，to kill ！（地址上报！）

Hello,

ac.css - Trojan-Dropper.Win32.Mudrop.abi

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

[ 本帖最后由幸福的猪猪于 2009-4-24 06:25 编辑 ]

显示全部楼层 · 发表于 2009-4-23 18:24:18

呃我还是不尝试了
用的红伞但是我是菜鸟一只老老实实的就好

显示全部楼层 · 发表于 2009-4-23 19:22:43

楼主想去少林？确实网站不干净

显示全部楼层 · 发表于 2009-4-23 21:28:51

没有报毒用的瑞星

显示全部楼层 · 发表于 2009-4-23 21:39:28

2009-4-23 21:38:50 http://sqvip.wq998.com/ha/all.htm Internet Explorer 检测到威胁: HEUR:Exploit.Script.Generic

显示全部楼层 · 发表于 2009-4-24 08:49:08

Hello,

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

Exploit.JS.Agent.ags

>
>
> hxxp://sqvip.wq998.com/ha/all.htm
>
>
>
>
--------------------
Regards, Vitaly Yakutenko
Virus analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[ 本帖最后由幸福的猪猪于 2009-4-24 08:50 编辑 ]

[其它] 挂马网站！！！！！！

回复 2楼 cchao21 的帖子

回复 9楼 xxl 的帖子