EpicBot - REAL?

[thr0wback]

Ok, most people here prob. got the email about EpicBot.com

I haven't tested it yet.
Some1 has?


For all people in-experienced with virtual machines, etc do not download epic bot for now


Anubis incoming


EDIT:

ANUBIS:

It maps
C:\WINDOWS\system32\winlogon.exe - Common for viruses
C:\WINDOWS\system32\wsock32.dll - For connection to a server

Also changes proxy settings

Last but not least; connection with some scammy screensaver site.

[=============================================================================]
    3.d) epicbot_52.exe - Network Activities
[=============================================================================]
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
    DNS Queries:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
        Name: [ dl.installiq.com ], Query Type: [ DNS_TYPE_A ],
            Query Result: [ 66.77.96.107 ], Successful: [ YES ], Protocol: [ udp ]
        Name: [ wpad ], Query Type: [ DNS_TYPE_A ],
            Query Result: [  ], Successful: [ NO ], Protocol: [  ]

[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
    HTTP Conversations:
[=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=]
        From ANUBIS:1039 to 66.77.96.107:80 - [ dl.installiq.com ]
             Request: [ GET /api/detectionrequest.aspx?keyid=1&shortname=epicbot&langid=0x0409 ], Response: [ 200 "OK" ]

http://dl.installiq.com/api/detectionrequest.aspx
http://anubis.iseclab.org/?action=result&task_id=146d1375df41f2154e528baccb26fb222&format=html


To bad ;/


VirtualMachine: Doesn't work.

 

[Blackiichan]

I've tested this, its still very new though

But at least its a new client plus like 2417416 free scripts lol

I have a proggy, but am I allowed to post it?

Cheers