我正在找漏洞挂马的时候,,毒网一个

显示全部楼层 · 发表于 2007-4-19 15:57:03

原帖由 ffjjyy 于 2007-4-19 15:50 发表
AVAST阻止链接

兄弟,你也用小A啊,呵呵,这里用他的可真少

显示全部楼层 · 发表于 2007-4-19 16:06:20

:\DOCUMENTS AND SETTINGS\MASTER.MASTE\LOCAL SETTINGS\TEMP\SVCHOST.EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
:\DOCUMENTS AND SETTINGS\MASTER.MASTE\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\QN6FL8HL\SVCHOST[1].EXE C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE

显示全部楼层 · 发表于 2007-4-19 18:22:14

KIS已删除: 恶意程序 Exploit.Win32.IMG-ANI.x 文件: D:\Downloads\TEMP.rar\vip.js
已删除: 木马程序 Trojan-Downloader.Win32.Small.ege 文件: D:\Downloads\TEMP.rar\svchost.exe

显示全部楼层 · 发表于 2007-4-19 18:34:04

没装杀软..开着EQ踩进去,,没发现什么异常

显示全部楼层 · 发表于 2007-4-20 21:13:01

Begin scan in 'C:\download\bingdu\TEMP'
C:\download\bingdu\TEMP\svchost.exe
   [DETECTION] Is the Trojan horse TR/Agent.30208.13
   [INFO]    The file was deleted!
C:\download\bingdu\TEMP\test.htm
   [DETECTION] Contains signature of the HTML script virus HTML/Click.Agen.C.1
   [INFO]    The file was deleted!
C:\download\bingdu\TEMP\test.js
   [DETECTION] Contains signature of the Java script virus JS/Dldr.Small.DY
   [INFO]    The file was deleted!
C:\download\bingdu\TEMP\vip.js
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
   [INFO]    The file was deleted!
C:\download\bingdu\TEMP\xskj.htm
   [DETECTION] Contains signature of the HMTL/Dldr.Psyme.UG virus
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-21 08:32:05

确实哟！！！！毒啊！！！

显示全部楼层 · 发表于 2007-4-21 10:47:40

咖啡报了~~~

[病毒样本] 我正在找漏洞挂马的时候,,毒网一个

微点拦

本帖子中包含更多资源