小马一只

显示全部楼层 · 发表于 2008-8-25 12:34:15

小马一只

文件 05.rar 接收于 2008.08.25 05:51:35 (CET)

结果: 13/36 (36.12%)
反病毒引擎版本最后更新扫描结果
AhnLab-V3 2008.8.21.0 2008.08.25 -
AntiVir 7.8.1.23 2008.08.24 HTML/Rce.Gen
Authentium 5.1.0.4 2008.08.25 -
Avast 4.8.1195.0 2008.08.24 VBS:Obfuscated-gen
AVG 8.0.0.161 2008.08.24 JS/Downloader.Agent
BitDefender 7.2 2008.08.25 -
CAT-QuickHeal 9.50 2008.08.22 -
ClamAV 0.93.1 2008.08.25 JS.Psyme-36
DrWeb 4.44.0.09170 2008.08.24 -
eSafe 7.0.17.0 2008.08.24 -
eTrust-Vet 31.6.6044 2008.08.23 -
Ewido 4.0 2008.08.24 Downloader.AniLoad.nae
F-Prot 4.4.4.56 2008.08.25 -
F-Secure 7.60.13501.0 2008.08.25 VBS/Psyme.BF
Fortinet 3.14.0.0 2008.08.25 -
GData 2.0.7306.1023 2008.08.20 VBS:Obfuscated-gen
Ikarus T3.1.1.34.0 2008.08.24 Virus.VBS.Obfuscated
K7AntiVirus 7.10.427 2008.08.23 -
Kaspersky 7.0.0.125 2008.08.25 -
McAfee 5368 2008.08.22 -
Microsoft 1.3807 2008.08.25 TrojanDownloader:VBS/Psyme.gen!D
NOD32v2 3383 2008.08.24 VBS/TrojanDownloader.Psyme.NEO
Norman 5.80.02 2008.08.22 -
Panda 9.0.0.4 2008.08.24 -
PCTools 4.4.2.0 2008.08.24 HTML.Psyme.Gen
Prevx1 V2 2008.08.25 -
Rising 20.58.62.00 2008.08.24 -
Sophos 4.32.0 2008.08.25 -
Sunbelt 3.1.1575.1 2008.08.23 -
Symantec 10 2008.08.25 -
TheHacker 6.3.0.6.060 2008.08.23 -
TrendMicro 8.700.0.1004 2008.08.23 -
VBA32 3.12.8.4 2008.08.23 -
ViRobot 2008.8.22.1346 2008.08.22 -
VirusBuster 4.5.11.0 2008.08.24 HTML.Psyme.Gen
Webwasher-Gateway 6.6.2 2008.08.25 Script.Rce.Gen
附加信息
File size: 2067 bytes
MD5...: 9742d1eb5672f11170fc515c3c26a72c
SHA1..: 8a9f170224185aacdee2100f2c8546c577aa5ef7
SHA256: a8580c85830a8bce569fb7aa621f6f1dd9136f54b58f1a0fdec4c1fa29c07cdb
SHA512: 22a3de129e3a141394bd4bfe94647a193256b17c94d3b4742ef709590b4eb02c
c0b7dc917b583fd7f68a596c9b9a510fd331dac0d41e9cce3dcc8d91a4d607f5
PEiD..: -
PEInfo: -

VirSCAN.org Scanned Report :
Scanned time : 2008/08/25 11:51:40 (CST)
Scanner results: 25%的杀软(9/36)报告发现病毒
File Name    : 05.rar
File Size    : 2067 byte
File Type    : RAR archive data, v1d, os
MD5          : 9742d1eb5672f11170fc515c3c26a72c
SHA1          : 8a9f170224185aacdee2100f2c8546c577aa5ef7
Online report  : ht tp://virscan.org/report/b0a67729147141cca272bcc772e4df24.html

Scanner       Engine Ver    Sig Ver          Sig Date Time Scan result
a-squared    3.5.0.22       2008.08.24       2008-08-24  2.52 -
安博士V3    2008.08.23.00 2008.08.23       2008-08-23  0.88 -
AntiVir       7.8.1.23       7.0.6.61       2008-08-24  2.17 HTML/Rce.Gen
Arcavir       1.0.5          200808241228    2008-08-24  1.17 -
AVAST!       3.0.1          080824-0       2008-08-24  0.69 VBS:Obfuscated-gen [Trj]
AVG          7.5.51.442    270.6.7/1631    2008-08-24  1.52 -
BitDefender 7.60825.1574870 7.20661          2008-08-25  2.84 -
CA (VET)    9.0.0.143    31.6.6044       2008-08-23  5.40 -
ClamAV       0.93.3       8083             2008-08-25  0.00 JS.Psyme-36
Comodo       2.11          2.0.0.626       2008-08-24  0.40 -
CP Secure    1.1.0.715    2008.08.21       2008-08-21  6.17 Troj.Downloader.JS.Psyme.aw
Dr.Web       4.44.0.9170    2008.08.24       2008-08-24  3.09 -
ewido       4.0.0.2       2008.08.24       2008-08-24  2.47 Downloader.AniLoad.nae
F-Prot       4.4.4.56       20080823       2008-08-23  0.98 -
F-Secure    5.51.6100    2008.08.24.01    2008-08-24  3.07 -
飞塔          2.81-3.11    9.470          2008-08-25  1.73 -
ViRobot       20080822       2008.08.22       2008-08-22  0.41 -
Ikarus       T3.1.01.34    2008.08.24.71332  2008-08-24  3.47 Virus.VBS.Obfuscated
江民杀毒    11.0.706       2008.08.24       2008-08-24  1.19 -
卡巴斯基    5.5.10       2008.08.25       2008-08-25  0.02 -
金山毒霸    2008.1.14.15 2008.8.25.10    2008-08-25  0.58 -
迈克菲       5.2.00       5368             2008-08-22  2.53 -
Microsoft    1.3807       2008.08.24       2008-08-24  4.45 TrojanDownloader:VBS/Psyme.gen!D
mks_vir       2.01          2008.08.19       2008-08-19  2.48 -
Norman       5.93.01       5.93.00          2008-08-22  5.13 VBS/Psyme.BF
熊猫卫士    9.05.01       2008.08.24       2008-08-24  2.00 -
趋势科技    8.700-1004    5.496.25       2008-08-24  0.02 -
Quick Heal    9.50          2008.08.22       2008-08-22  1.96 -
瑞星          20.0          20.58.62.00    2008-08-24  0.41 -
Sophos       2.77.0       4.32             2008-08-25  1.92 -
Sunbelt       3.1.1575.1    2202             2008-08-22  0.64 -
赛门铁克    1.3.0.24       20080824.007    2008-08-24  0.06 -
nProtect    2008-08-22.00 1909009          2008-08-22  3.48 -
The Hacker    6.3.0.6       v00060          2008-08-22  0.65 -
VBA32       3.12.8.4       20080823.1106    2008-08-23  1.11 -
VirusBuster 4.5.11.10    10.84.10/598500 2008-08-24  0.78 HTML.Psyme.Gen

显示全部楼层 · 发表于 2008-8-25 12:49:27

卡巴2009 无视之！

显示全部楼层 · 发表于 2008-8-25 12:52:52

怎么是html的网址啊？网页挂马？

显示全部楼层 · 发表于 2008-8-25 12:56:11

原帖由 jefffire 于 2008-8-25 12:52 发表
怎么是html的网址啊？网页挂马？

是搜狐的天龙八部一打开后才知道又被挂了马儿，这会没有脚本出错。

显示全部楼层 · 发表于 2008-8-25 12:58:18

内容是：
/* */

？

显示全部楼层 · 发表于 2008-8-25 13:17:01

http://user1.16-m6.net/ms06014.css

显示全部楼层 · 发表于 2008-8-25 13:17:40

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Information: Contains recognition pattern of the HTML/Rce.Gen HTML script virus

显示全部楼层 · 发表于 2008-8-25 13:40:40

Requested URL: http://user1.16-m6.net/ms06014.css
Information: Is the TR/Downloader.Gen Trojan

Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.23, VDF 7.0.6.61

显示全部楼层 · 发表于 2008-8-25 13:59:41

测试一下试试

显示全部楼层 · 发表于 2008-8-25 14:47:26

微点拦截

[病毒样本] 小马一只