红伞挂拉[MD5: 1e44aa ]

promised

Scan taken on 28 Jun 2007 06:20:15 (GMT)
A-Squared	Found nothing
AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found Win32:Trojan-gen. {Other}
AVG Antivirus	Found nothing
BitDefender	Found Trojan.Downloader.Agent.BGL, Adware.ToolBar888.B, Adware.Softomate.S, Adware.Softomate.BG, Trojan.Downloader.Small.BSU, Application.HttpGet.A
ClamAV	Found nothing
Dr.Web	Found Tool.ProcessKill, Trojan.DownLoader.14336, Trojan.DownLoader.14123, Adware.IWantSearch, Trojan.DownLoader.12773, Trojan.DownLoader.14934
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found not-a-virus:AdWare.Win32.Softomate.u (4, 1, 400), Trojan-Downloader.Win32.Small.dtt, Trojan-Downloader.Win32.Small.dnb
Fortinet	Found nothing
Kaspersky Anti-Virus	Found not-a-virus:AdWare.Win32.Softomate.u, Trojan-Downloader.Win32.Small.dtt, Trojan-Downloader.Win32.Small.dnb
NOD32	Found Win32/Adware.Softomate application, Win32/TrojanDownloader.Small.DTT, Win32/TrojanDownloader.Small.DNB
Norman Virus Control	Found W32/Agent.AMIS
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found Trojan-Downloader.Win32.Small.dnb, Trojan-Downloader.Win32.Small.dtt, AdWare.Win32.Softomate.u

The EQs

Scan performed at: 2007-6-28 14:24:13
Scanning Log
NOD32 version 2360 (20070628) NT
Command line: C:\Documents and Settings\EQ2\桌面\tubar888
Operating memory - is OK

Date: 28.6.2007  Time: 14:24:17
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\tubar888\
C:\Documents and Settings\EQ2\桌面\tubar888\tubar888.exe ?NSIS ?install.exe ?NSIS ?Update.exe - Win32/Adware.Softomate application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\tubar888\tubar888.exe ?NSIS ?install.exe ?NSIS ?services.dll - Win32/Adware.Softomate application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\tubar888\tubar888.exe ?NSIS ?install.exe ?NSIS ?MyToolBar.dll - Win32/Adware.Softomate application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\tubar888\tubar888.exe ?NSIS ?HttpGetyuletx.exe - Win32/TrojanDownloader.Small.DTT trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\tubar888\tubar888.exe ?NSIS ?HttpGet.exe - Win32/TrojanDownloader.Small.DNB trojan - was a part of the deleted object
Number of scanned files: 13
Number of threats found: 5
Number of files cleaned: 1
Time of completion: 14:24:17 Total scanning time: 0 sec (00:00:00)

mofunzone

nsis。。。
没办法。。

1688388728

感染: not-a-virus:AdWare.Win32.Softomate.u (4x), Trojan-Downloader.Win32.Small.dtt, Trojan-Downloader.Win32.Small.dnb
文件: tubar888[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PVD325CG
进程: GreenBrowser.exe

微笑的前奏

热烈庆祝把小红伞干掉

mofunzone

运行后4个，没有漏下的，把这个上报一下就好

Whkroran

deleted: adware not-a-virus:AdWare.Win32.Softomate.u        File: E:\virus sample\tubar888.rar/tubar888.exe//stream//data0001//stream//data0003
deleted: adware not-a-virus:AdWare.Win32.Softomate.u        File: E:\virus sample\tubar888.rar/tubar888.exe//stream//data0001//stream//data0004
deleted: adware not-a-virus:AdWare.Win32.Softomate.u        File: E:\virus sample\tubar888.rar/tubar888.exe//stream//data0001//stream//data0005
deleted: adware not-a-virus:AdWare.Win32.Softomate.u        File: E:\virus sample\tubar888.rar/tubar888.exe//stream//data0001//stream//data0007
deleted: Trojan program Trojan-Downloader.Win32.Small.dtt        File: E:\virus sample\tubar888.rar/tubar888.exe//stream//data0002
deleted: Trojan program Trojan-Downloader.Win32.Small.dnb        File: E:\virus sample\tubar888.rar/tubar888.exe//stream//data0004

yashoo

咖啡也飘过了。。

红心王子

deleted: adware not-a-virus:AdWare.Win32.Softomate.u        File: C:\Documents and Settings\Administrator\×ÀÃæ\tubar888.rar/tubar888.exe//stream//data0001//stream//data0003
deleted: adware not-a-virus:AdWare.Win32.Softomate.u        File: C:\Documents and Settings\Administrator\×ÀÃæ\tubar888.rar/tubar888.exe//stream//data0001//stream//data0004
deleted: adware not-a-virus:AdWare.Win32.Softomate.u        File: C:\Documents and Settings\Administrator\×ÀÃæ\tubar888.rar/tubar888.exe//stream//data0001//stream//data0005
deleted: adware not-a-virus:AdWare.Win32.Softomate.u        File: C:\Documents and Settings\Administrator\×ÀÃæ\tubar888.rar/tubar888.exe//stream//data0001//stream//data0007
deleted: Trojan program Trojan-Downloader.Win32.Small.dtt        File: C:\Documents and Settings\Administrator\×ÀÃæ\tubar888.rar/tubar888.exe//stream//data0002
deleted: Trojan program Trojan-Downloader.Win32.Small.dnb        File: C:\Documents and Settings\Administrator\×ÀÃæ\tubar888.rar/tubar888.exe//stream//data0004

taihuxian

Virus: not-a-virus:AdWare.Win32.Softomate.u (4x), Trojan-Downloader.Win32.Small.dtt, Trojan-Downloader.Win32.Small.dnb

Virus found while downloading Web content.

Address: bbs.kafan.cn