Attack (Attack ID：302022)

Release Date：03/14/2012

Attack Name：Detected WebShell ShuangYunBanYue ASP Shell

Severity：

BUG ID：

CVE ID：

 

Description：

ShuangYunBanYue ASP WebShell is a web-based Trojan running in ASP environment which is designed to compromise Web servers without being noticed. It can breach firewalls and monitor Web servers through Internet remotely. The main functions include:
File management, host information reconnaissance, web proxy, remote command and script execution, database operation, webpage trojaning, privilege escalation, etc.

Affected system:
Windows IIS Web servers

 

Solution：

Delete the ASP Trojan webpage and fix the vulnerability.