|
|
发表于 2004-12-15 15:22:18
|
显示全部楼层
ViRUS NAME ：JS_BAIDU.A6 ?1 Z8 h, y U7 g
8 {/ M% Q6 | _! g2 u2 p# d- `
3 y. T5 h+ a/ \/ ~% ~ R' H: IQUICK LINKS Solution | Understanding New Pattern Format 5 c- i7 Q7 o6 l2 z9 v; c& O
2 ?$ B$ K4 E2 G. D. l
--------------------------------------------------------------------------------
2 T$ q- ^: P. J% @& {
8 }/ \4 s, D5 m' H( k! h" qVirus type: JavaScript
S! y5 k& @, d; J3 Y6 S' B 0 g3 Z. C8 }! ]0 S
Destructive: No k! d* E2 h$ ^+ }) R
2 n/ t: j- P$ ]
Pattern file needed: 2.292.08 + a% {/ ?4 Q/ D0 ~( M p! `; C+ C7 C
# @' G# i& m+ ^. c: v. ~Scan engine needed: 6.810
2 _5 h' a9 Q3 u X9 b* Y% d0 N
0 Q# p2 s9 p! W7 ~ Overall risk rating: Very Low % |* w0 X7 h2 d! E) s5 `
, I7 p# g+ Z& p
--------------------------------------------------------------------------------
2 [' C- T: b# i) q) I' V
( }/ I- }+ @! e4 CReported infections: Low - B3 S3 ~* ?& @- A) z
- Z' i$ A4 I0 P: q6 PDamage Potential: Low
' M4 U. d) u$ c' b1 k9 b% f
. m$ S% @# s0 X) @Distribution Potential: Low # I9 m2 t1 d2 R( V
* p0 d1 K5 ^( D
# k' P' o% W* G/ d5 j: B+ J) o9 F7 z" u& l% O' @7 L E
--------------------------------------------------------------------------------2 M/ v+ b2 z4 }: v/ g1 w- s
4 @8 g/ N( R- @6 e9 t
Description:& ] u& N: ^+ ]7 {
/ L, |( Q% x" f0 ^3 D) @
# I. N( H" ?0 F j, b7 Y T* s- b) u, L6 ?& f0 q0 ^+ w
This malicious JS script may reside in an HTML file or in a malicious Web site. 6 t7 c$ n: ?1 ~, a* g+ A7 J1 T4 B
/ e1 i1 `$ Y' N/ P1 ^Upon execution, this JS script automatically downloads from the URL http://barai<BLOCKED>.com/update/Search.cab.
# c) B4 J' U& W2 p" E" P% Q& g- u5 c8 K0 O
It exploits a codebase vulnerability in Internet Explorer, which allows automatic execution of files.
% T# l' Z& b ~5 P2 | x" ], ~6 o3 A( I
It runs on Windows 95, 98, ME, NT, 2000, and XP. |
|
楼主