请高手分析此马（最新利用ANI漏洞）：http://mm.987999.com/23.htm

显示全部楼层 · 发表于 2007-7-19 15:59:13

大家看看，都什么能杀出此马~？

如果杀到了，请发出截图哦~~

并把情况说的详细些。

据编写此马的人介绍，只要浏览此页木马会自动进入系统，而任何杀软都无反应，我就想知道是不是真的。

请各位证实。

[ 本帖最后由 sisiya591 于 2007-7-19 16:24 编辑 ]

显示全部楼层 · 发表于 2007-7-19 16:00:14

Service Unavailable

显示全部楼层 · 发表于 2007-7-19 16:16:02

虽然是Service Unavailable
不过还是有倆exe

显示全部楼层 · 发表于 2007-7-19 16:19:29

Service Unavailable

显示全部楼层 · 发表于 2007-7-19 16:20:00

看来楼上俩兄弟都打补丁了

显示全部楼层 · 发表于 2007-7-19 16:21:18

LS的给exe地址

显示全部楼层 · 发表于 2007-7-19 16:21:51

aaaaaaaaaaa

显示全部楼层 · 发表于 2007-7-19 16:21:54

还是Service Unavailable

显示全部楼层 · 发表于 2007-7-19 16:23:07

Scan performed at: 2007-7-19 16:22:45
Scanning Log
NOD32 version 2405 (20070718) NT
Command line: C:\Documents and Settings\EQ2\桌面\2.rar
Operating memory - is OK

Date: 19.7.2007 Time: 16:22:51
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\2.rar
C:\Documents and Settings\EQ2\桌面\2.rar ?RAR ?2\soft[1].exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\2.rar ?RAR ?2\51.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 16:22:51 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-7-19 16:23:31

2007/7/19 16:21:45 eAmon file F:\v\2\51.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007/7/19 16:21:43 eAmon file F:\v\2\soft.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

请高手分析此马（最新利用ANI漏洞）：http://mm.987999.com/23.htm

本帖子中包含更多资源

回复 #7 taitan001 的帖子