瑞星又誤報了,真是無言...

蔚藍領域

Panda  S.O.S  Virus  病毒分析實驗室已證實此檔案 TEST.rar 無惡意程式行為,檔案分析結果一切正常

原文: Dear customer,

After checking in PandaLabs the content of the message you enclose,
this is the result:

The file TEST.asp contains no malware.

Subject: SOS Virus. Panda Antivirus + Firewall 2007 (6.01.00
TruPrevent)

註: Microsoft 報 Backdoor:ASP/Ace
   
      Rising 報 Backdoor.ASP.WebShell.a

Graybird

Serv-U 提升权限ASP版~

gho

咖啡，卡巴全miss

moonsilver

asp的文件啊，非误报

wangjay1980

TEST.asp - Backdoor.ASP.Ace.ey

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.ASP.WebShell.a  

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.21.61

Graybird

The file 'TEST.asp' has been determined to be 'MALWARE'. Our analysts named the threat BDS/ASP.Ace.EY. The term "BDS/" denotes a Backdoor-Server program. Backdoor-Server programs are used to spy out, modify or delete data.Detection is added to our virus definition file (VDF) starting with version 7.00.01.61.

Graybird

Starting the file scan:

Begin scan in 'E:\TEST.rar'
E:\TEST.rar
  [0] Archive type: RAR
  --> TEST.asp
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/ASP.Ace.EY Backdoor server programs
      [WARNING]   The file was ignored!

googlehack

是backdoor，脚本很复杂啊！只是不知关键代码是啥呢？