[MD5: 20787A 3CC80E]毒网上的2个

qianwenxiang

[MD5: 20787A 3CC80E]

The EQs

Scan performed at: 2007-7-26 20:16:43
Scanning Log
NOD32 version 2422 (20070726) NT
Command line: C:\Documents and Settings\EQ2\桌面\Recrgrha.rar
Operating memory - is OK

Date: 26.7.2007  Time: 20:16:49
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\Recrgrha.rar
C:\Documents and Settings\EQ2\桌面\Recrgrha.rar ?RAR ?Recrgrha.exe ?NSIS ?cpush.dll - Win32/Adware.BHO.AV application - was a part of the deleted object
Number of scanned files: 3
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 20:16:49 Total scanning time: 0 sec (00:00:00)

微点卫士

费尔报木马!!!

微点:
广告软件名称:AdWare.Win32.BHO.mg

程序:
C:\PROGRAM FILES\COMMON FILES\CPUSH\CPUSH.DLL
是广告软件!
已成功阻止其运行,是否要删除此文件?
广告软件名称:AdWare.Win32.BHO.mg

程序:
C:\PROGRAM FILES\COMMON FILES\CPUSH\CPUSH.TMP
是广告软件!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.703\RECRGRHA.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\CPUSH\UNINST.EXE
是否删除木马程序及其衍生物?
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX03.781\RECRGRHA.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
然后居然安装好了,我晕

接着
C:\WINDOWS.0\SYSHOST.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:3362
远端地址:222.73.11.196(上海)
远端端口:80
怎么回事?

残缺的唯美

咖啡飘过 蜘蛛报

taitan001

F:\Recrgrha.rar:<RAR>\Recrgrha.exe : is suspected of Embedded.Trojan.NewPush

woai_jolin

dragonkf

1688388728

探测到: 广告软件 not-a-virus:AdWare.Win32.Cinmus.ab        网址: http://bbs.kafan.cn/attachment.p ... e//stream//data0001

hj5abc

另一个正常的.

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Adware.Cpush.E