请高手分析此马（最新利用ANI漏洞）：http://mm.987999.com/23.htm

hj5abc

点了几个..onlinegames.

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\2.rar'
F:\病毒样本\2.rar
  [0] Archive type: RAR
  --> 2\soft.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Age.24324.A
  --> 2\51.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Age.24324.A
      [INFO]      The file was deleted!

欠妳緈諨

woai_jolin

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/18 08:11:18 (811592 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 831933
Command line: "@C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~OD4.tmp"
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------
- Scanning files in the directory: F:\v\2\
        0 ms F:\v\2\51.exe                                                Security Risk W32/Suspicious_U.gen ()
        0 ms F:\v\2\soft.exe                                              Security Risk W32/Suspicious_U.gen ()
- File F:\v\2\51.exe quarantined.
- File F:\v\2\51.exe deleted.
- File F:\v\2\soft.exe quarantined.
- File F:\v\2\soft.exe deleted.

===================================================================================================

The scanning started: 2007/07/19 19:02:04
               ended: 2007/07/19 19:02:04
Logged on as        : Administrator
on hostname         : BE29C0E1C4C9406

Scanning results:
   Total number of files found..............................:       2
   Number of files scanned..................................:       2
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       0
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       2

Copyright (c) 1993-2005 Norman ASA.

sharkkong

Service Unavailable

金头石子

ZA拦了，打不开

zane_xzz

原帖由 promised 于 2007-7-19 16:50 发表
我解出来也是如此
他好像不是用解的

那两个是同一个