歐吉尚趴趴走網站被值入惡意連結。最近有瀏覽這個網頁的網友,應該要盡速檢查自己的電腦。請各位暫時不要瀏覽這個網站,以免中毒,等確認他們已經修復後,會在此更新訊息。(感謝 Jimau)
**請幫忙通知他們,謝謝**
惡意連結是放置在首頁中:
惡意程式碼的一部份為:
執行之後,有下面的行為:
[Added process]
C:\WINDOWS\System32\WScript.exe (這是正常檔案)
C:\WINDOWS\system32\cmd.exe (這是正常檔案)
[Added file]
C:\Documents and Settings\Administrator\Local Settings\Temp\gh0703.exe
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C13NVBMZ\614[1].htm
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Q08VKCK4\gh0703[1].exe
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\SEUIMLSE\gh[1].htm
C:\WINDOWS\Temp\ser.bat
C:\WINDOWS\Temp\ser.vbs
C:\WINDOWS\Temp\z.exe
到目前為止,下面的防毒軟體可以偵測到這些惡意檔案:
gh0703.exe:
[ Kaspersky ], "ARC:RarSFX, ARC:[data.rar]:RAR, [data.rar/ser.bat]:Trojan.BAT.KillAV.ec, PAK:[data.rar/z.exe]:PE_Patch.PECompact, PAK:[data.rar/z.exe]:PecBundle, PAK:[data.rar/z.exe]:PECompact"
[ Fortinet ], "suspicious"
[ Norman ], "[Heuristic Sandbox detection]:Virus W32/Malware"
gh[1].htm:
[ Alpha_Gen ], "Heur_Infrm-2"
ser.bat:
[ Kaspersky ], "Trojan.BAT.KillAV.ec"
z.exe:
[ Kaspersky ], "PAK:PE_Patch.PECompact, PAK:PecBundle, PAK:PECompact"
[ HBEDV ], "HEUR/Malware"
614[1].htm:
[ HBEDV ], "JS/Psyme.D"
[ Ewido ], "Downloader.Agent.m"-----
惡意連結是放置在首頁中:
惡意程式碼的一部份為:
執行之後,有下面的行為:
[Added process]
C:\WINDOWS\System32\WScript.exe (這是正常檔案)
C:\WINDOWS\system32\cmd.exe (這是正常檔案)
[Added file]
C:\Documents and Settings\Administrator\Local Settings\Temp\gh0703.exe
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\C13NVBMZ\614[1].htm
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Q08VKCK4\gh0703[1].exe
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\SEUIMLSE\gh[1].htm
C:\WINDOWS\Temp\ser.bat
C:\WINDOWS\Temp\ser.vbs
C:\WINDOWS\Temp\z.exe
到目前為止,下面的防毒軟體可以偵測到這些惡意檔案:
gh0703.exe:
[ Kaspersky ], "ARC:RarSFX, ARC:[data.rar]:RAR, [data.rar/ser.bat]:Trojan.BAT.KillAV.ec, PAK:[data.rar/z.exe]:PE_Patch.PECompact, PAK:[data.rar/z.exe]:PecBundle, PAK:[data.rar/z.exe]:PECompact"
[ Fortinet ], "suspicious"
[ Norman ], "[Heuristic Sandbox detection]:Virus W32/Malware"
gh[1].htm:
[ Alpha_Gen ], "Heur_Infrm-2"
ser.bat:
[ Kaspersky ], "Trojan.BAT.KillAV.ec"
z.exe:
[ Kaspersky ], "PAK:PE_Patch.PECompact, PAK:PecBundle, PAK:PECompact"
[ HBEDV ], "HEUR/Malware"
614[1].htm:
[ HBEDV ], "JS/Psyme.D"
[ Ewido ], "Downloader.Agent.m"-----文章標籤
全站熱搜
