On Jan 4, 2008 9:19 PM, zamri <[EMAIL PROTECTED]> wrote: > I tried to access certain sites and it has been detected containing virus. I > use dansguardian s.9.9.2 + clamav 0.92. I remember one right now. If you > have found one, pls list here so I can check it out for testing. > > 1. www.myviper.net
Yes, it has some javascript at the bottom which references the url http://www.flycheburoshki.com/countbanner/, which (I believe) tries to do a WebViewFolderIcon exploit. Lots of obfuscated javascript. Doesn't look good. Could be wrong, though. Dave M > zamri > Linux System Administrator > Kolej ShahPutra Kuantan > Pahang Malaysia > Tel : 609.573.777.7 ext 119 > web : http://muhdzamri.blogspot.com _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://lurker.clamav.net/list/clamav-users.html