所有杀软都不报,除了AVG AS

显示全部楼层 · 发表于 2007-4-21 21:05:44

原帖由 黑衣~魂 于 2007-4-21 21:02 发表
Ewido報Downloader.Agent.dq這倒是沒什麼,該惡意網頁用ASCII加密,
解密一部分代碼,我將這段代碼存檔命名為test.txt後NOD32就會警報了(NOD32不會解密)
http://aycu16.webshots.com/image/12815/20057389027417 ...

我上报给卡巴看下

显示全部楼层 · 发表于 2007-4-21 21:16:38

恩,我自己也會回報,一般正常網頁很少會用ASCII加密的,我認為是有惡意指令碼~!

看來Ewido不是報ASCII加密的,單純的ASCII加密那段代碼解密以下AV會報~

显示全部楼层 · 发表于 2007-4-21 21:19:40

原帖由 黑衣~魂 于 2007-4-21 21:16 发表
恩,我自己也會回報,一般正常網頁很少會用ASCII加密的,我認為是有惡意指令碼~!

看來Ewido不是報ASCII加密的,單純的ASCII加密那段代碼解密以下AV會報~
http://aycu22.webshots.com/image/12421/2005419777561 ...

Not FoundThe requested URL /codebase/dff was not found on this server. Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

显示全部楼层 · 发表于 2007-4-21 21:28:02

會有av報的原因是因為有偵測到惡意代碼,原檔執行伺服器錯誤,檔案一樣有惡意代碼,所以一樣會有av軟件偵測到惡意代碼就是這種狀況~

[ 本帖最后由黑衣~魂于 2007-4-21 21:30 编辑 ]

显示全部楼层 · 发表于 2007-4-22 12:15:48

原帖由 promised 于 2007-4-21 21:19 发表
Not FoundThe requested URL /codebase/dff was not found on this server.Additionally, a 404 Not Found error was encountered while trying to usean ErrorDocument to handle the request.

無法連上伺服器,不代表檔案損毀...還拿來這個來判斷有沒有威脅,實在誇張~

Hello,
test.htm_ - Exploit.HTML.VML.i
New malicious software was found in this file. It's detection will be
included in the next update. Thank you for your help.
Please quote all when answering.
--
Best regards, Alexander Romanenko
Virus analyst, Kaspersky Lab.

[ 本帖最后由黑衣~魂于 2007-4-22 12:19 编辑 ]

显示全部楼层 · 发表于 2007-4-22 16:02:16

KIS7.0过～～～

AVG杀～～～～

[病毒样本] 所有杀软都不报,除了AVG AS

回复 #11 tracydk 的帖子

回复 #13 promised 的帖子