JS/Psyme.QM

显示全部楼层 · 发表于 2008-6-30 15:01:56

AhnLab-V3	2008.6.27.1	2008.06.30	-
AntiVir	7.8.0.59	2008.06.30	HEUR/HTML.Malware
Authentium	5.1.0.4	2008.06.29	-
Avast	4.8.1195.0	2008.06.28	-
AVG	7.5.0.516	2008.06.29	JS/Psyme.QM
BitDefender	7.2	2008.06.30	Trojan.Iframe.CI
CAT-QuickHeal	9.50	2008.06.28	JS/Agent.H1
ClamAV	0.93.1	2008.06.30	HTML.Iframe-20
DrWeb	4.44.0.09170	2008.06.30	-
eSafe	7.0.17.0	2008.06.29	JS.Agent.jy.
eTrust-Vet	31.6.5911	2008.06.27	-
Ewido	4.0	2008.06.27	-
F-Prot	4.4.4.56	2008.06.29	-
F-Secure	7.60.13501.0	2008.06.26	-
Fortinet	3.14.0.0	2008.06.30	-
GData	2.0.7306.1023	2008.06.30	-
Ikarus	T3.1.1.26.0	2008.06.30	-
Kaspersky	7.0.0.125	2008.06.30	-
McAfee	5327	2008.06.27	JS/Psyme
Microsoft	1.3704	2008.06.30	TrojanDownloader:JS/Psyme.gen
NOD32v2	3225	2008.06.29	-
Norman	5.80.02	2008.06.27	-
Panda	9.0.0.4	2008.06.29	-
Prevx1	V2	2008.06.30	-
Rising	20.51.00.00	2008.06.30	-
Sophos	4.30.0	2008.06.30	Mal/ObfJS-C
Sunbelt	3.0.1176.1	2008.06.26	-
Symantec	10	2008.06.30	-
TheHacker	6.2.96.364	2008.06.28	-
TrendMicro	8.700.0.1004	2008.06.30	HTML_IFRAME.QJ
VBA32	3.12.6.8	2008.06.29	-
VirusBuster	4.5.11.0	2008.06.30	-
Webwasher-Gateway	6.6.2	2008.06.30	Heuristic.HTML.Malware

显示全部楼层 · 发表于 2008-6-30 15:12:51

启发

显示全部楼层 · 发表于 2008-6-30 15:56:48

结尾有调用其他网页的代码，不过访问不了
>>http://77.221.133.188/.if/go.html?1234552 (无法访问)

显示全部楼层 · 发表于 2008-6-30 19:03:58

我的小红伞没报

显示全部楼层 · 发表于 2008-6-30 20:56:57

Log is generated by FreShow.
[script]http://www.blog.edu.cn/popunder.js
[script]http://ads.adbrite.com/mb/text_group.php?sid=355255&zs=3132305f363030

显示全部楼层 · 发表于 2008-6-30 21:11:51

kv 0

显示全部楼层 · 发表于 2008-6-30 22:20:06

物件: kkk.html
在壓縮檔中: E:\kkk.rar
狀態: 已偵測病毒
病毒: Trojan.Iframe.CI (引擎 B)

显示全部楼层 · 发表于 2008-6-30 23:33:18

[病毒样本] JS/Psyme.QM