中国基金网首页被挂马？？

龙井茶

红伞没反映

傻猪猪米走鸡

nod没报！

1p1

AntiVir  Found HEUR/Malware  
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found nothing
BitDefender  Found nothing
ClamAV  Found nothing
Dr.Web  Found nothing
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Kaspersky Anti-Virus  Found nothing
NOD32  Found nothing
Norman Virus Control  Found nothing
VirusBuster  Found nothing
VBA32  Found nothing
   

1p1

http://12rr.com/

病毒网页

乌龙茶

这里经常被挂马的...

龙井茶

http://12rr.com/这个网页我又进不了.

icka

那个12RR里是个病毒网页.

Antivirus Version Update Result
AntiVir 7.3.1.38 03.01.2007 HEUR/Malware
Authentium 4.93.8 03.01.2007  no virus found
Avast 4.7.936.0 03.01.2007  no virus found
AVG 7.5.0.447 03.01.2007  no virus found
BitDefender 7.2 03.02.2007  no virus found
CAT-QuickHeal 9.00 03.01.2007 (Suspicious) - DNAScan
ClamAV devel-20060426 03.02.2007  no virus found
DrWeb 4.33 03.01.2007  no virus found
eSafe 7.0.14.0 02.28.2007 Suspicious Trojan/Worm
eTrust-Vet 30.6.3446 03.02.2007  no virus found
Ewido 4.0 03.01.2007  no virus found
FileAdvisor 1 03.02.2007  no virus found
Fortinet 2.85.0.0 03.01.2007  no virus found
F-Prot 4.3.1.45 03.01.2007  no virus found
F-Secure 6.70.13030.0 03.01.2007 W32/Agent.BDGM.dropper
Ikarus T3.1.1.3 03.01.2007  no virus found
Kaspersky 4.0.2.24 03.02.2007  no virus found
McAfee 4974 03.01.2007 Downloader-AVZ
Microsoft 1.2204 03.01.2007  no virus found
NOD32v2 2087 03.01.2007  no virus found
Norman 5.80.02 03.01.2007 W32/Agent.BDGM.dropper
Panda 9.0.0.4 03.01.2007 Suspicious file
Prevx1 V2 03.02.2007  no virus found
Sophos 4.14.0 03.01.2007  no virus found
Sunbelt 2.2.907.0 03.01.2007  no virus found
Symantec 10 03.02.2007  no virus found
TheHacker 6.1.6.067 03.01.2007  no virus found
UNA 1.83 03.01.2007  no virus found
VBA32 3.11.2 03.01.2007  no virus found
VirusBuster 4.3.19:9 03.01.2007 no virus found


Aditional Information
File size: 123904 bytes
MD5: d6bdc4589f61a5cf9e85a89a545bb390
SHA1: 6a2c29368a06980fc76e104fbabfaff64de5d09f
packers: ASPACK, ASPACK, ASPACK, ASPACK, ASPACK, BINARYRES, ASPACK
packers: Aspack
norman sandbox: [ General information ]
* **IMPORTANT: PLEASE SEND THE SCANNED FILE TO: ANALYSIS@NORMAN.NO - REMEMBER TO ENCRYPT IT (E.G. ZIP WITH PASSWORD)**.
* Decompressing ASPack.
* Accesses executable file from resource section.
* Creating several executable files on hard-drive.
* Application uses MFC.DLL.
* File length: 123904 bytes.

[ Changes to filesystem ]
* Creates file C:WINDOWSSYSTEM32COMCLL.SR_.
* Creates file C:WINDOWSSYSTEM32Search.dll.

[ Signature Scanning ]
* C:WINDOWSSYSTEM32COMCLL.SR_ (49664 bytes) : W32/Agent.BDGM.

卡+饭

我的KIS反应了，怕，怕

ginepri

我用IE7,不给开啊!

小邪邪

又上去看了一下，看来并没有误报，果然有马，有好几个