banner

[Rule] Rules  [Home] Main Forum  [Portal] Portal  
[Members] Member Listing  [Statistics] Statistics  [Search] Search  [Reading Room] Reading Room 
[Register] Register  
[Login] Loginhttp  | https  ]
 
Messages posted by: 0cbxm0  XML
Profile for 0cbxm0 Messages posted by 0cbxm0 [ number of posts not being displayed on this page: 0 ]
 
ví dụ = hình ảnh smilie

tình hình là e muốn change cái Apache Version Header giông như google,server google là gws hay của hva là Epecha mod_jk/1.2.28
sau 1 hồi search thì kím được cái này nhưng e complie ko chạy được
If you wish to set your own server version for Apache too somthing else that maybe fits into your company name, its actually a very simple process but it does involve adjusting the apache source.An example of what it looks like after you have edited is google.com

HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html
path=/; domain=.google.com
Server: GWS/2.1
Content-Length: 0
Date: Wed, 16 Nov 2005 21:33:28 GMT

As you see it returns GWS, speculation says its Google Web Server however watching as the versions go on they match the Apache releases, so they either use a heavily modded apache version or just the simple change that I am about to show.

Apache does have this feature somewhat built in already and all we are changing is one line.

if (ap_server_tokens == SrvTk_PRODUCT_ONLY) {
ap_add_version_component(pconf, AP_SERVER_BASEPRODUCT);
}
else if (ap_server_tokens == SrvTk_MINIMAL) {
ap_add_version_component(pconf, AP_SERVER_BASEVERSION);
}
else if (ap_server_tokens == SrvTk_MINOR) {
ap_add_version_component(pconf, AP_SERVER_BASEPRODUCT “/” AP_SERVER_MINORREVISION);
}
else if (ap_server_tokens == SrvTk_MAJOR) {
ap_add_version_component(pconf, AP_SERVER_BASEPRODUCT “/” AP_SERVER_MAJORVERSION);
}
else {
ap_add_version_component(pconf, AP_SERVER_BASEVERSION ” (” PLATFORM “)”);
}

This is where it sets the product version, and if you set it to Prod it will only return the base_product with nothing else, so all we have to do is adjust the base_product. Anyway enough babbling and lets get straight to the point.

Firstly, you will need to grab a copy of apache from http://www.apache.org and untar it,

Now we need to modify include/ap_release.h before compiling

nano include/ap_release.h

Find

#define AP_SERVER_BASEPRODUCT “Apache”

and replace it with

#define AP_SERVER_BASEPRODUCT “HostGeekZ”

Obviously replacing HostGeekZ with the version you wish to use.

Now compile and install apache

./configure –prefix=/usr/hostgeekz
make
make install

Now want to set httpd.conf to read the first statement of server_baseproduct only to do this open httpd.conf, the path will depend on what you set –prefix to, as we used /usr/hostgeekz this is where httpd.conf will be

nano /usr/hostgeekz/conf/httpd.conf

Now find

ServerSig
and set this too

ServerSig off

Then add this below

ServerTokens Prod

Then start apache, you are now complete and it should return 

ai có kink nghiệm xin chỉ giáo,và với cpanel là easyapache có làm được ko
http://httpd.apache.org/docs/1.3/misc/FAQ-E.html#serverheader 
tải mấy thằng antispyware +dùng FF
e nghe đồn là nó khai thác lỗi IE ver cũ-->update ie

kamikazeq wrote:
Bạn cho biết: Path, Size của Rundll32.exe và System.exe
Up 2 file đó lên đây luôn http://www.mediafire.com/

làm fieenf bác tí nha
link nè :
http://www.mediafire.com/download.php?h5nnzzzqyoi
pác đổi tên thành file rar nhé.pass=cbxm
smilie
các bro giúp e chặn con này lại.e ko hiểu tai sao nó lây vào máy mình.e cài đóng băng hết các ổ.lướt web 1 lúc thì bị dinh.lúc đầu tương do vào mấy trang crack.nhưng rết lại chỉ đánh word mà vẫn bị.
E thấy nó gọi rundll32.ễ,rồi thì xuất hiện system.exe
scan băng total víu thì
Antivirus Version Last Update Result
AntiVir - - TR/Thief.MultiFirst.P
Avast - - Win32:Trojan-gen {Other}
AVG - - PSW.OnlineGames.BEHN
BitDefender - - Trojan.PWS.Agent.SGD
CAT-QuickHeal - - TrojanGameThief.MultiFirst.p
DrWeb - - Trojan.Siggen.337
eTrust-Vet - - Win32/Lolyda.DP
F-Secure - - Trojan-GameThief.Win32.MultiFirst.p
Fortinet - - Spy/MultiFirst
GData - - Trojan.PWS.Agent.SGD
Ikarus - - PWS.Win32.Lolyda.M
K7AntiVirus - - Trojan-PSW.Win32.MultiFirst.p
Kaspersky - - Trojan-GameThief.Win32.MultiFirst.p
McAfee - - PWS-Mmorpg.gen
Microsoft - - PWS:Win32/Lolyda.M
NOD32 - - Win32/PSW.OnLineGames.NRF
Norman - - W32/Malware.EGYO
Panda - - Trj/Lineage.BZE
PCTools - - Trojan-Spy.Onlinegame!sd6
Prevx1 - - Worm
Rising - - Trojan.Win32.KillAV.adz
SecureWeb-Gateway - - Trojan.Thief.MultiFirst.P
Sophos - - Mal/Generic-A
Sunbelt - - Trojan-GameThief.Win32.MultiFirst.p
Symantec - - Infostealer.Hibik.A
TrendMicro - - TROJ_GAMETHI.CN
VBA32 - - Trojan-GameThief.Win32.MultiFirst.p
ViRobot - - Trojan.Win32.PSWMultiFirst.7680

Additional information
MD5: 7b309f704781fd100c58f9a03d534351
SHA1: d53aa81ebb345986f5acd64908565a9e87b295ef
SHA256: 36ffaa8967cfef72f74ff0e47479e7476897dc8aad52d9daf1462ae77b3f3a5e


nó chạy bằng quyền user system nên fair dung ATP mới kill đươc.
cài Kapersky thì chặn được rundll32.exe
các bro chỉ cho tại sao nó chạy rundll32.exe được khi e có nối lan mà ko vào web,cũng ko có chương trình nào kết nối web..có fair nó dính ở server hay gateway ko
thank
smilie
 

Powered by JForum - Extended by HVAOnline
 hvaonline.net  |  hvaforum.net  |  hvazone.net  |  hvanews.net  |  vnhacker.org
1999 - 2013 © v2012|0504|218|