Re: Can Exploit-ANIfile.c infect JPG files?



From: "Russell L. Smith" <r dot l dot smith at caci dot com>

| A recent VirusScan log showed that VirusScan found a JPG file on my web site
| infected with Exploit-ANIfile.c (Trojan). I read the Microsoft security
| bulletin, the info on the McAfee site, and searched the net - I can find no
| mention of this virus infecting JPG files. Can anybody point me to
| documentation that mentions this virus infecting JPG files? Thanks for your
| assistance.


It isn't a JPG file. Exploits don't "infect". I don't need to point to you to ANY
documentation. I have seen many web sites alreadt using files named *.JPG that are
ANI-Exploit files. I bet the JPG file is less then 2KB and most likely between .5KB and
1KB in size.

If a JPG was was found on YOUR web site that had the "Exploit-ANIfile.c" then most likely
your web site has been hacked, the JPG was placed there and there is a HTML file with a
Javascipt or someother script being using to infect computers that access your web site.

You web server needs to be removed from the internet, the system thoroughly scanned and
all vulnerabilities that led to teh systenm being hacked mitigated ASAP !

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm


.



Relevant Pages