一个网页

显示全部楼层 · 发表于 2007-9-6 14:32:01

文件: C:\Documents and Settings\moonsilver\桌面\fuckpps.html
大小: 1246 字节
修改时间: 2007年9月6日, 14:30:43
MD5: AB23D1041D20C71F0C4B4F9CE152B79B
SHA1: AC871FFEE1C56E5160189E0903383511C8F5678E
CRC32: D10286AB

显示全部楼层 · 发表于 2007-9-6 14:36:15

卡巴斯基反病毒 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=124148 is infected with Exploit.HTML.IframeBof virus

显示全部楼层 · 发表于 2007-9-6 14:53:00

AhnLab-V3	2007.9.5.0	2007.09.06	-
AntiVir	7.6.0.5	2007.09.05	HTML/Shellcode.Gen
Authentium	4.93.8	2007.09.06	-
Avast	4.7.1029.0	2007.09.05	-
AVG	7.5.0.485	2007.09.05	-
BitDefender	7.2	2007.09.06	-
CAT-QuickHeal	9.00	2007.09.05	-
ClamAV	0.91.2	2007.09.06	-
DrWeb	4.33	2007.09.05	-
eSafe	7.0.15.0	2007.09.04	-
eTrust-Vet	31.1.5113	2007.09.06	-
Ewido	4.0	2007.09.05	-
FileAdvisor	1	2007.09.06	-
Fortinet	3.11.0.0	2007.09.06	-
F-Prot	4.3.2.48	2007.09.06	-
F-Secure	6.70.13030.0	2007.09.06	Exploit.HTML.IframeBof
Ikarus	T3.1.1.12	2007.09.06	Exploit.HTML.IframeBof
Kaspersky	4.0.2.24	2007.09.06	Exploit.HTML.IframeBof
McAfee	5113	2007.09.05	-
Microsoft	1.2803	2007.09.06	-
NOD32v2	2508	2007.09.06	-
Norman	5.80.02	2007.09.05	-
Panda	9.0.0.4	2007.09.06	-
Prevx1	V2	2007.09.06	-
Rising	19.39.31.00	2007.09.06	Trojan.JS.Agent.ar
Sophos	4.21.0	2007.09.06	-
Sunbelt	2.2.907.0	2007.09.06	-
Symantec	10	2007.09.06	-
TheHacker	6.1.9.178	2007.09.05	-
VBA32	3.12.2.4	2007.09.06	Exploit.HTML.Ashell.a
VirusBuster	4.3.26:9	2007.09.05	-
Webwasher-Gateway	6.0.1	2007.09.06	Script.Shellcode.Gen

显示全部楼层 · 发表于 2007-9-6 14:56:19

秒杀

显示全部楼层 · 发表于 2007-9-6 18:16:59

NOD32 Found nothing

显示全部楼层 · 发表于 2007-9-6 18:36:33

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3303
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\fuckpps.html

C:\Documents and Settings\uhthn\Desktop\fuckpps.html - Infected with PDB-1159 Malware program - Deleted

1 Files scanned
1 Infected files found
0 Suspicious files found
0 Files cured
1 Files deleted

显示全部楼层 · 发表于 2007-9-6 20:43:05

07004 删掉了,后面的图片显示的代码!

http://www.12d.com/x.exe 下载的病毒,不过,好像打不开了!

显示全部楼层 · 发表于 2007-9-6 20:45:54

结果: 找到 1 恶意软件
Exploit.HTML.IframeBof (病毒)
C:\Documents and Settings\ssy\桌面\fuckpps.rar\fuckpps.html

显示全部楼层 · 发表于 2007-9-6 20:47:06

是用这个东西做出来的吧

显示全部楼层 · 发表于 2007-9-6 21:18:52

HTML/Shellcode.Gen

[病毒样本] 一个网页

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源