挂毒了

显示全部楼层 · 发表于 2007-12-16 04:40:51

http://www.xjpxrz.org/

显示全部楼层 · 发表于 2007-12-16 04:44:25

A-Squared  Found nothing
AntiVir  Found HEUR/Exploit.HTML, JS/Dldr.Psyme.CN
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found nothing
BitDefender  Found nothing
ClamAV  Found nothing
CPsecure  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Ikarus  Found nothing
Kaspersky Anti-Virus  Found nothing
NOD32  Found nothing
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
Sophos Antivirus  Found nothing
VirusBuster  Found nothing
VBA32  Found nothing

显示全部楼层 · 发表于 2007-12-16 08:52:06

上报eset

显示全部楼层 · 发表于 2007-12-16 10:24:41

mp pass

显示全部楼层 · 发表于 2007-12-16 10:28:10

ESET扫到了

显示全部楼层 · 发表于 2007-12-16 10:32:53

Exp /Ani.Gen，伞报了。

显示全部楼层 · 发表于 2007-12-16 10:40:16

那段js解密出来是http://sss.969222.com/down.exe

网页那个，代码不完整

显示全部楼层 · 发表于 2007-12-16 10:48:53

原帖由 lovewei 于 2007-12-16 10:40 发表 <a href="http://bbs.kafan.cn/redirect.php?goto=findpost&pid=2284560&ptid=171793" target="_blank"><img src="http://bbs.kafan.cn/images/common/back.gif" border="0" onclick="zoom(this)" onload="attachimg(this, 'load')" alt="" /></a> 
那段js解密出来是http://sss.969222.com/down.exe 
 
网页那个，代码不完整

A-Squared Found nothing
AntiVir Found TR/Delphi.Downloader.Gen
ArcaVir Found nothing
Avast Found Win32:Delf-FKN
AVG Antivirus Found Downloader.Generic6.YHD
BitDefender Found Generic.Malware.SBdldsp.97CED6BB
ClamAV Found nothing
CPsecure Found nothing
Dr.Web Found Win32.HLLW.Autoruner.origin
F-Prot Antivirus Found Possibly a new variant of W32/SelfStarterInternetTrojan!Maximus
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Ikarus Found Trojan-Downloader.Win32.Delf.bny
Kaspersky Anti-Virus Found Worm.Win32.AutoRun.aqa
NOD32 Found a variant of Win32/AutoRun.K
Norman Virus Control Found W32/DLoader.EQMY
Panda Antivirus Found nothing
Rising Antivirus Found nothing
Sophos Antivirus Found Mal/DelpDldr-C
VirusBuster Found nothing
VBA32 Found Backdoor.XiaoBird.280 (paranoid heuristics) (probable variant)

显示全部楼层 · 发表于 2007-12-16 14:01:24

原帖由 moonsilver 于 2007-12-16 10:24 发表
mp pass

好多网马是通过系统漏洞植入进去的，打全了补丁还会报那才有问题吧，报了只能说这款杀毒软件报得太频繁！！！

显示全部楼层 · 发表于 2007-12-16 15:14:03

原帖由 cia5201314 于 2007-12-16 14:01 发表

好多网马是通过系统漏洞植入进去的，打全了补丁还会报那才有问题吧，报了只能说这款杀毒软件报得太频繁！！！

什么网马不是通过漏洞传播的呢? 谁说打了补丁就不报毒了., 打了补丁报HTML , JS 文件.

没打补丁, 报, HTML, JS , EXE 等等文件,

[已鉴定] 挂毒了