1   1  /  1  页   跳转

[求助] 最新木马C:\00002E24\196343

最新木马C:\00002E24\196343

最新木马C:\00002E24\196343
00002E24好像是随硬件的什么序列号生成的
196343文件里的代码为:
36
http://bally1.bally-bally.net/laco1.exe
http://bally1.bally-bally.net/laco2.exe
http://bally1.bally-bally.net/laco3.exe
http://bally1.bally-bally.net/laco4.exe
http://bally1.bally-bally.net/laco5.exe
http://bally1.bally-bally.net/laco6.exe
http://bally1.bally-bally.net/laco7.exe
http://bally2.bally-bally.net/laco9.exe
http://bally2.bally-bally.net/laco10.exe
http://bally2.bally-bally.net/laco11.exe
http://bally2.bally-bally.net/laco12.exe
http://bally2.bally-bally.net/laco13.exe
http://bally2.bally-bally.net/laco14.exe
http://bally2.bally-bally.net/laco15.exe
http://bally2.bally-bally.net/laco16.exe
http://bally2.bally-bally.net/laco17.exe
http://bally2.bally-bally.net/laco18.exe
http://bally2.bally-bally.net/laco19.exe
http://bally2.bally-bally.net/laco20.exe
http://bally2.bally-bally.net/laco21.exe
http://bally2.bally-bally.net/laco22.exe
http://bally2.bally-bally.net/laco23.exe
http://bally2.bally-bally.net/laco24.exe
http://bally2.bally-bally.net/laco25.exe
http://bally2.bally-bally.net/laco26.exe
http://bally2.bally-bally.net/laco27.exe
http://bally2.bally-bally.net/laco28.exe
http://bally2.bally-bally.net/laco29.exe
http://bally2.bally-bally.net/laco30.exe
http://bally2.bally-bally.net/laco31.exe
http://bally2.bally-bally.net/laco32.exe
http://bally2.bally-bally.net/laco33.exe
http://bally2.bally-bally.net/laco34.exe
http://bally2.bally-bally.net/laco35.exe



用户系统信息:Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)
最后编辑超级游戏迷 最后编辑于 2008-07-27 17:43:45
分享到:
gototop
 

回复: 最新木马C:\00002E24\196343

bally2.bally-bally.net >> 219.129.239.108
  • 本站主数据:广东省茂名市 电信
  • 查询结果2:广东省茂名市 电信
  • 查询结果3:广东省茂名市 电信IDC机房



请网友看到这个域名进行xxx!
妈的,电信xxx赚钱也不看看是什么钱!
这样的垃圾机子也放到电信的机房里!
gototop
 

回复: 最新木马C:\00002E24\196343

请把C:\00002E24\196343这个文件压缩,把压缩包上传上来。

顺便按版规上传SRENG扫描日志,谢谢

PS:这个病毒我好象碰到过……
打酱油的……
gototop
 
1   1  /  1  页   跳转
页面顶部
Powered by Discuz!NT