继续发被挂马的站

基哥

http://www1.v72.cn/
http://www.aixueyu.com/

NOD报了可是我还是中招了

[ 本帖最后由 基哥 于 2007-12-10 11:43 编辑 ]

y37007

  IE6 直接进

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\a.rar'
C:\Users\morgan\Documents\
  a.rar
    [0] Archive type: RAR
    --> aixueyu[1].htm
        [DETECTION] Contains suspicious code HEUR/HTML.Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> vip[1].htm
        [DETECTION] Contains detection pattern of the VBS script virus VBS/Dldr.Psyme.FM.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> spider.sav
    --> CAUFOVPM.htm
        [DETECTION] Contains detection pattern of the VBS script virus VBS/Dldr.Psyme.FM.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> index[4].htm
        [DETECTION] Contains suspicious code HEUR/HTML.Malware
        [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!


End of the scan: 2007年12月9日  20:20
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      2 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
      4 Warnings
      0 Notes

cidwu

admuncher规则过滤。可以正常看网页

jimmyleo

原帖由 mofunzone 于 2007-12-10 12:21 发表
Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\a.rar'
C:\Users\morgan\Documents\
  a.rar
    [0] Archive type: RAR
    --> aixueyu[1].htm
        [DETECTION] Contains suspici ...

V8又改变报法了？

qigang

几个网页，RX20.22.01不认为是病毒。

kellitte

我微点，comodo进去没反应，正常浏览网页

billy_xx

确实被挂马了，NOD进去有反映

kellitte

楼上的，确认有马？那我....哇哇