红伞报一个网站

gwazy

http://www.esrichina-bj.cn/index.htm

Access to the data has been denied!Warning: A virus or unwanted program has been found in the HTTP Data. Requested URL: www.esrichina-bj.cn/index.htm Information: Contains suspicious code HEUR/HTML.Malware Generated by AntiVir WebGuard 7.02.00.02, AVE 8.0.0.43, VDF 7.0.1.27

DJ

卡巴进入不报。卖广告的？？？

无尽藏海

我的红伞P怎么什么反映都没有

[ 本帖最后由 无尽藏海 于 2007-12-1 13:13 编辑 ]

gwazy

我是s 版开得高启发。。
还有就是我是用得 8.0 测试版得。。

Graybird

有没有样本? 我的红伞也没报~

gwazy

Premium Security Suite
Report file date: 2007年12月1日星期六  13:17

Scanning for 955520 virus strains and unwanted programs.

Licensed to:      AntiVir 8 - Betatest
Serial number:    0000149992-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]
Username:         Administrator
Computer name:    225E20D6AC314C0

Version information:
BUILD.DAT     : 8.0.00.41       24707 Bytes  2007-11-28 10:56:00
AVSCAN.EXE    : 7.1.0.10       290856 Bytes  2007-11-29 11:47:40
AVSCAN.DLL    : 8.0.0.1         53288 Bytes  2007-11-22 10:05:04
LUKE.DLL      : 7.1.0.7        127016 Bytes  2007-10-29 06:20:06
LUKERES.DLL   : 7.0.6.1         10280 Bytes  2007-11-22 10:05:08
ANTIVIR0.VDF  : 6.40.0.0     11030528 Bytes   2007-7-18 03:33:34
ANTIVIR1.VDF  : 7.0.0.0       1640448 Bytes   2007-9-13 03:33:36
ANTIVIR2.VDF  : 7.0.1.30      1575424 Bytes  2007-11-30 01:03:26
ANTIVIR3.VDF  : 7.0.1.31         2048 Bytes  2007-11-30 01:03:26
Version of Engine: 8.0.0.43  
AVVDF.DLL     : 8.0.0.0        102400 Bytes  2007-11-29 11:47:40
AVSCRIPT.DLL  : 8.0.0.0        204800 Bytes  2007-11-22 08:49:08
AVSCN.DLL     : 8.0.0.1        102400 Bytes  2007-11-22 08:49:08
AVRDL.DLL     : 8.0.0.0        348160 Bytes   2007-9-25 02:55:30
AVPACK.DLL    : 8.0.0.0        344104 Bytes  2007-11-22 09:09:58
AVOFFICE.DLL  : 8.0.0.0        184320 Bytes  2007-11-22 08:49:08
AVHEUR.DLL    : 8.0.0.0        880640 Bytes  2007-11-22 08:49:08
AVHELP.DLL    : 8.0.0.0         98304 Bytes  2007-11-22 09:09:02
AVGEN.DLL     : 8.0.0.0        278528 Bytes  2007-11-22 08:49:06
AVEMU.DLL     : 8.0.0.0        405504 Bytes  2007-11-22 08:49:06
AVCORE.DLL    : 8.0.0.1        139264 Bytes  2007-11-29 11:47:16
AVWINLL.DLL   : 1.0.0.7         14376 Bytes   2007-2-26 02:36:28
AVPREF.DLL    : 7.0.2.2         25640 Bytes   2007-7-17 23:39:18
AVREP.DLL     : 7.0.0.1        155688 Bytes    2007-8-7 23:15:24
AVREG.DLL     : 7.0.1.6         30760 Bytes   2007-7-17 23:17:08
AVARKT.DLL    : 1.0.0.19       278568 Bytes   2007-8-14 07:33:26
AVEVTLOG.DLL  : 7.0.0.20        86056 Bytes   2007-7-17 23:10:20
SQLITE3.DLL   : 3.3.17.1       339968 Bytes   2007-7-23 01:37:22
SMTPLIB.DLL   : 1.2.0.17        28712 Bytes   2007-7-30 03:10:26
NETNT.DLL     : 7.0.0.0          7720 Bytes    2007-3-8 03:09:44
RCIMAGE.DLL   : 7.0.1.32      2875432 Bytes  2007-11-22 10:05:58
RCTEXT.DLL    : 7.0.60.2        86056 Bytes    2007-9-5 05:16:26

Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\d2c391e6.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: high

LUKY

我的C版没有报啊。

28654621

我的C版报
样本扫描显示可疑文件

[ 本帖最后由 28654621 于 2007-12-1 14:24 编辑 ]

Graybird

1. <iframe src=http://127.0.0.1/m.htm width=0 height=0></iframe>

复制代码

timhas266

Start of the scan: Saturday, 1 December, 2007  14:25

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\opr00CPC.rar'
C:\Documents and Settings\tim\桌面\opr00CPC.rar
  [0] Archive type: RAR
  --> opr00CPC.htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [INFO]      A backup was created as '47c2feda.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: Saturday, 1 December, 2007  14:25
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      0 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes