What is JS/Agent.zbq/JS-Downloader?

Viruses and worms
1

This site is infected according to a sucuri scan: malware found in the url here:
-http://bosssanitary.com/cgi-bin/ [cgi-bin filename ADS]
Nothing found here: http://www.urlvoid.com/scan/bosssanitary.com
Suspicious according to: http://urlquery.net/report.php?id=9641

What malware is this? Is this a Heuristic Malware Family Detection for TestSignature.VBS.TrojanDownloader.Psyme.~RN?

polonus

2

I can’t access -http://bosssanitary.com/cgi-bin/.
The main page’s source leads to other sub-directories

http://i795.photobucket.com/albums/yy238/Donovansrb10/bosssanitaryMain.png

Also notable: -http://bosssanitary.com/_vti_inf.html

http://i795.photobucket.com/albums/yy238/Donovansrb10/bosssanitaryEXEs.png

Nothing suspicious to me. Could be referenced to an earlier detection.

3

Hi Donovansrb10

Do you suggest it has been a HTML Script.inf. Malware type: Virus/Worm?

polonus

4

I checked the whole server. ;D

http://i795.photobucket.com/albums/yy238/Donovansrb10/bosssanitaryOverview.png

Maybe, I’m not fond of backtracking. :-\