麻烦大家测一下，这个网站！Macfee报了，怀疑误报。

solcroft

pop.js又能下了，奇怪
把这个东西丢到Malware Listserv上去

Antivirus	Version	Update	Result
AhnLab-V3	2007.6.16.0	06.19.2007 [td]no virus found
AntiVir	7.4.0.32	06.19.2007	HEUR/Malware
Authentium	4.93.8	06.18.2007 [td]no virus found
Avast	4.7.997.0	06.18.2007 [td]no virus found
AVG	7.5.0.467	06.18.2007 [td]no virus found
BitDefender	7.2	06.19.2007 [td]no virus found
CAT-QuickHeal	9.00	06.18.2007 [td]no virus found
ClamAV	devel-20070416	06.19.2007 [td]no virus found
DrWeb	4.33	06.19.2007	DLOADER.Trojan
eSafe	7.0.15.0	06.19.2007 [td]no virus found
eTrust-Vet	30.7.3727	06.19.2007 [td]no virus found
Ewido	4.0	06.18.2007	Worm.Butileg.a
FileAdvisor	1	06.19.2007 [td]no virus found
Fortinet	2.91.0.0	06.19.2007 [td]no virus found
F-Prot	4.3.2.48	06.18.2007 [td]no virus found
F-Secure	6.70.13030.0	06.19.2007 [td]no virus found
Ikarus	T3.1.1.8	06.19.2007 [td]no virus found
Kaspersky	4.0.2.24	06.19.2007 [td]no virus found
McAfee	5055	06.18.2007 [td]no virus found
Microsoft	1.2607	06.19.2007 [td]no virus found
NOD32v2	2337	06.18.2007	a variant of Win32/Butileg
Norman	5.80.02	06.18.2007 [td]no virus found
Panda	9.0.0.4	06.19.2007	Suspicious file
Prevx1	V2	06.19.2007 [td]no virus found
Sophos	4.18.0	06.12.2007	Mal/Packer
Sunbelt	2.2.907.0	06.16.2007 [td]no virus found
Symantec	10	06.19.2007 [td]no virus found
TheHacker	6.1.6.134	06.18.2007 [td]no virus found
VBA32	3.12.0.2	06.19.2007 [td]no virus found
VirusBuster	4.3.23:9	06.18.2007 [td]no virus found
Webwasher-Gateway	6.0.1	06.19.2007	Heuristic.Malware

蓝色牛仔裤

郁闷，怎么蜘蛛旧引擎可杀了。!!
其实就是这个帖子里面的样本，呵呵～
http://bbs.kafan.cn/viewthread.php?tid=98321&extra=page%3D1

蓝色牛仔裤

dr.web分析样本用的是新引擎。。

Dear jphuang,

This message has been automatically generated in response to
the creation of your request regarding:
        "[SPAM] table",
a summary of which appears below.

There is no need to reply to this message right now.
Your request has been assigned an ID of [drweb.com #295981].

Please include the string:

        [drweb.com #295981].

in the subject line of all future correspondence about this issue.
To do so, you may reply to this message.

Thank you for the cooperation


-------------------Request-----------------------------------------------
table.zip - archive ZIP (password infected)
>table.zip/table/table.exe packed by BINARYRES
>>table.zip/table/table.exe packed by UPACK
>>>table.zip/table/table.exe - Ok
-------------------------------------------------------------------------


--
Yours sincerely,
Virus Monitoring Service Doctor Web Ltd.

mofunzone

This message has been automatically generated in response to
the creation of your request regarding:
        "[SPAM] table",
a summary of which appears below.

solcroft

DrWeb老是这个样子的
每次上报都先来个自动回复

mofunzone

我知道，他们是告诉你他们收到样本了，以前我也经常给蜘蛛上报的
不过ls的ls的ls貌似误以为那是回复了已经。。

蓝色牛仔裤

我的重点是指他们发回来的扫描报告，跟VT上不一样。。
所以说是用新引擎分析。

蓝色牛仔裤

自动回复跟处理结果我还能分得清～

dgww

各位，那就是说pop.js会下载病毒了？？？？？

也就是说网站真的出问题啦？？？？？？？？？？

傻猪猪米走鸡

ls的该不是进去了什么反应都没有 吧？！