http://imprimanta-cartuse.ro/Lexmark-E220

显示全部楼层 · 发表于 2012-10-1 15:55:13

Virus: Trojan.JS.Agent.GCI (Engine A)

An attempt was made to open an infected file.

File: Lexmark-E220.html
Directory: C:\Sandbox\S\Browser\user\current\AppData\Roaming\SogouExplorer\Temp\__SEHttpCache__\4952\3524

显示全部楼层 · 发表于 2012-10-1 17:33:44

本帖最后由 said411f 于 2012-10-1 18:19 编辑

js 檔mse皆判有毒
catalog/view/javascript/jquery/jquery-1.6.1.min.js
catalog/view/javascript/jquery/ui/jquery-ui-1.8.9.custom.min.js
catalog/view/javascript/jquery/ui/external/jquery.cookie.js
catalog/view/javascript/jquery/fancybox/jquery.fancybox-1.3.4.pack.js
catalog/view/javascript/jquery/tabs.js
catalog/view/javascript/common.js
catalog/view/theme/octheme4/jquery/jquery.carouFredSel-4.3.3-packed.js
catalog/view/javascript/DD_belatedPNG_0.0.8a-min.js
imprimanta-cartuse.ro/lexmark-e220/404testpage4525d2fdc
imprimanta-cartuse.ro/lexmark-e220/404javascript.js

可疑挂马地址
hxxp://hitx.statistics.ro/hitx2.js
fx.gtop.ro/js/gTOP.js?v=2

包括含可疑威脅連結:
ww w.imprimanta-cartuse.ro/index.php?route=common/home
ww w.imprimanta-cartuse.ro/index.php?route=account/account
ww w.imprimanta-cartuse.ro/index.php?route=checkout/cart
ww w.imprimanta-cartuse.ro/index.php?route=checkout/checkout
ww w.imprimanta-cartuse.ro/accesorii
ww w.imprimanta-cartuse.ro/accesorii/medii-stocare

[未鉴定] http://imprimanta-cartuse.ro/Lexmark-E220

好毒.........