WTF is this site doing? Virus detection needed

**Juicy D. Links** · 09-13-2007, 03:10 PM

detected: malware Exploit.Win32.IMG-ANI.gen (modification) URL: http://search-biz.org/2.ani

**sortie** · 09-13-2007, 03:11 PM

this was on one site in the code :

#SUB1|OBJECT61# #SUB1|OBJECT62# #SUB1|OBJECT63# #SUB1|OBJECT64#

I'm guessing this is replaced with something when a surfer actually loads the page.

I didn't load the page in my browser because I don't have good anti virus on this laptop I'm on right now.

**sortie** · 09-13-2007, 03:13 PM

Originally posted by Juicy D. Links

detected: malware Exploit.Win32.IMG-ANI.gen (modification) URL: http://search-biz.org/2.ani

Yeah, I figure it was a shit site, I'm just wondering what they are trying to do with my domain. They either send fakes hits or are hotlinking in a way that I don't see it.

**sortie** · 09-13-2007, 03:15 PM

Tell people not to click the virus link. I almost clicked it.

**_mC_** · 09-13-2007, 03:16 PM

It's giving out rainbows and sunshine!

**StarkReality** · 09-13-2007, 03:22 PM

Originally posted by Juicy D. Links

detected: malware Exploit.Win32.IMG-ANI.gen (modification) URL: http://search-biz.org/2.ani

Are you using IE and Avira ? I ask because this combo will report almost every animated cursor file as malicious, even if it isn't, it's a common fake alert.

**StarkReality** · 09-13-2007, 03:23 PM

http://www.microsoft.com/technet/sec.../MS07-017.mspx

**sortie** · 09-13-2007, 03:27 PM

Originally posted by StarkReality

http://www.microsoft.com/technet/sec.../MS07-017.mspx

Ok, but why are they sending hits to my site?

**sortie** · 09-13-2007, 03:52 PM

I wanna know what smokeythebear thinks about this.

He's probably got some shit to handle this.

WTF is this site doing? Virus detection needed

WTF is this site doing? Virus detection needed

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment

Comment