又是ANI，过瑞星和飞塔

显示全部楼层 · 发表于 2007-4-17 16:53:59

ANI

上报飞塔

显示全部楼层 · 发表于 2007-4-17 16:54:41

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\ani.rar'
C:\Documents and Settings\Administrator\桌面\ani.rar
  [0] Archive type: RAR
  --> ani\vip[1].js
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> ani\vip[2].js
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
   [INFO]    A backup was created as '468d8d70.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-17 16:55:30

玩ANI玩腻了。。。。不玩了

显示全部楼层 · 发表于 2007-4-17 16:57:23

detected: malware Exploit.Win32.IMG-ANI.x URL: http://bbs.kafan.cn/attachment.php?aid=56206//ani/vip[1].js

显示全部楼层 · 发表于 2007-4-17 17:01:39

顺手牵羊
http://m700.cn/mm88/hk/wm.exe

显示全部楼层 · 发表于 2007-4-17 17:17:22

Scan performed at: 2007-4-17 17:16:33
Scanning Log
NOD32 version 2196 (20070417) NT
Command line: E:\ani.rar
Operating memory - is OK

Date: 17.4.2007 Time: 17:16:55
Anti-Stealth technology is enabled.
Scanned disks, folders and files: E:\ani.rar
E:\ani.rar ?RAR ?ani\vip[1].js - a variant of Win32/TrojanDownloader.Ani.Gen trojan
E:\ani.rar ?RAR ?ani\vip[2].js - a variant of Win32/TrojanDownloader.Ani.Gen trojan
Number of scanned files: 3
Number of threats found: 2
Number of active threats: 1
Time of completion: 17:16:57 Total scanning time: 2 sec (00:00:02)

显示全部楼层 · 发表于 2007-4-17 17:26:49

江民对ANI的识别率还是很高的，下载被阻止，监控直接拦截：

显示全部楼层 · 发表于 2007-4-17 17:33:05

原帖由 lanvin 于 2007-4-17 16:53 发表
ANI
上报飞塔

还是没过AVAST

显示全部楼层 · 发表于 2007-4-17 17:33:26

金山不比江民差，哈哈

显示全部楼层 · 发表于 2007-4-17 17:44:36

给国产的一点鼓励，金山我好久没用了

[病毒样本] 又是ANI，过瑞星和飞塔

本帖子中包含更多资源

直接用卡巴扫了，ANI为什么这么流行？？？受不了，期待原创的病毒和漏洞的出现

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块