China DOS Union

-- Unite DOS · Advance DOS · Grow DOS --
Union site: www.cn-dos.net　Forum site: www.cn-dos.net/forum

中国DOS联盟论坛
The time now is 2026-09-19 09:59

47,812 topics / 349,917 posts / today 0 new / 48,270 members

意见反馈 & 网友交流 » Report: There is a Trojan virus on the alliance homepage!!!!!

Floor1　bush	Posted 2004-06-15 00:00
银牌会员　Posts 730　Credits 2,165
I found that: as long as (when Active Scripting is not disabled in IE) opening the union homepage dos.e-stone.cn, it will automatically chain to http://833200.com/index/ to execute an HTML application of lhxyhta.hta, which will further generate the win.hta file under the root directory of the C drive, and finally generate a program of intrenat.exe under the WINDOWS system directory, and run (resident) and modify the registry to start with WINDOWS. This program is shelled, and it seems to be stealing passwords or something. Why is this?!

Floor2　Wengier	Posted 2004-06-16 00:00
系统支持　Posts 10,521　Credits 27,736
Oh, I really don't know who did it. Just now I checked the homepage and have deleted that code segment inside (I remember there didn't seem to be this extra code before). Thanks for reporting!

Floor3　Kinglion	Posted 2004-06-16 00:00
铂金会员　Posts 1,924　Credits 5,798　From 金獅電腦軟體工作室
Nowadays, viruses are really powerful. Everyone still needs to be more careful.

Floor4　bush	Posted 2004-06-18 00:00
银牌会员　Posts 730　Credits 2,165
Two more points were omitted: This Trojan horse will also generate two files in the system directory: WinSocks.dll and SYSTEMwin.exe (at first glance, it seems like system files). Please friends who visited the DOS Union homepage a while ago carefully check your own computers. c. Be more careful in the future

Floor5　Michael	Posted 2004-06-19 00:00
钻石会员　Posts 3,041　Credits 10,056
No way, luckily I'm in an internet café. But it's also very dangerous.