Dr.Xue
2005-11-19, 01:49 AM
这几天我的电脑中了木马,主要症状表现为:地址栏的光标来回不停地跑,浏览器右边的滑条一直往下拉，我已控制不了IE浏览器,当断开网络点击"关机",鼠标却指向"待机"一直关不了,只能强行关掉电源.
到了昨天,终于发生自己的账户被窃,密码被修改的事件,昨天白天显示器出现故障拿去修理,晚上拿回来后,上网登陆DOMAINSITE账户,发现账户和密码都不对,无法登陆.赶紧到自己的电子邮件去看,发现DOMAINSITE发给我内容一样的3封邮件,邮件的内容如下:
There was a failed login attempt from 220.160.70.219 into the account XXXXXX.
This is just a notice and there is probably no cause for alarm. We will
automatically block all IP addresses that have more than 10 failed log in
attempts. If you are concerned, you may want to change the password to your
account and/or contact [email protected].
Thank you,
DomainSite.com
后来,DOMAINSITE发给我第四封的电子邮件,其内容如下:
Dear Customer,
We have performed a upgrade to our systems. For security purposes,
we are requiring users to update their account passwords.
Please use this new password to login to your Domainsite.com account
and update your password:
First four letters of your username: fjdo
New password: a61a33b25b
URL: https://www.domainsite.com
If you have any questions please email us at [email protected].
Thank you,
Domainsite.com
红色的地方是邮件的账户和密码都被修改了,后来我就用这个被骇客修改后的账户和密码重新登陆自己的账户,马上又把用户名和密码再修改一遍,接下来花了将近三个多小时的时间把自己所有相关网站的账户和密码重新再修改一遍,直到今天凌晨两点多才做完.后来在朋友的指点下,在自己的进程表里查到一个木马程序,这个木马程序是:MoveSearch 我进入注册表通过手动一一把MoveSearch相关的文件删除掉,真是太可怕了,我的电脑上装有瑞星杀毒软件和天网防火墙,还是没法阻挡木马进入自己的电脑,还请各位版友多多小心. ~tear
到了昨天,终于发生自己的账户被窃,密码被修改的事件,昨天白天显示器出现故障拿去修理,晚上拿回来后,上网登陆DOMAINSITE账户,发现账户和密码都不对,无法登陆.赶紧到自己的电子邮件去看,发现DOMAINSITE发给我内容一样的3封邮件,邮件的内容如下:
There was a failed login attempt from 220.160.70.219 into the account XXXXXX.
This is just a notice and there is probably no cause for alarm. We will
automatically block all IP addresses that have more than 10 failed log in
attempts. If you are concerned, you may want to change the password to your
account and/or contact [email protected].
Thank you,
DomainSite.com
后来,DOMAINSITE发给我第四封的电子邮件,其内容如下:
Dear Customer,
We have performed a upgrade to our systems. For security purposes,
we are requiring users to update their account passwords.
Please use this new password to login to your Domainsite.com account
and update your password:
First four letters of your username: fjdo
New password: a61a33b25b
URL: https://www.domainsite.com
If you have any questions please email us at [email protected].
Thank you,
Domainsite.com
红色的地方是邮件的账户和密码都被修改了,后来我就用这个被骇客修改后的账户和密码重新登陆自己的账户,马上又把用户名和密码再修改一遍,接下来花了将近三个多小时的时间把自己所有相关网站的账户和密码重新再修改一遍,直到今天凌晨两点多才做完.后来在朋友的指点下,在自己的进程表里查到一个木马程序,这个木马程序是:MoveSearch 我进入注册表通过手动一一把MoveSearch相关的文件删除掉,真是太可怕了,我的电脑上装有瑞星杀毒软件和天网防火墙,还是没法阻挡木马进入自己的电脑,还请各位版友多多小心. ~tear