大家看看这个什么毒！卡巴斯基KIS6.0不报！

foundking

网上找Photoshop　CS2的汉化补丁。
终于找到一个。下来好像不太对劲。运行后东西没汉化。好像中了毒。
请大家看看那个所谓的汉化补丁是个什么毒？
（因为病毒大，所以打了两个包）


附件下载网址：
http://www.52ddown.com/soft_52xunlei/78237.html#Photoshop
严重鄙视这个网站！

[ 本帖最后由 foundking 于 2007-8-10 12:04 编辑 ]

foundking

两个包放一起解压。就是我下的那个所谓汉化补丁。

[ 本帖最后由 foundking 于 2007-8-10 11:56 编辑 ]

liaoying112

小Ａ拦截了，哈哈

nod拦截。。。。。。。多重感染

zxy900906

Scan performed at: 2007/08/10 11:57:13
Scanning Log
NOD32 version 2448 (20070809) NT
Command line: C:\Documents and Settings\Administrator\桌面\Setup\Setup.exe

Date: 10.8.2007  Time: 11:57:14
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\Setup\Setup.exe
C:\Documents and Settings\Administrator\桌面\Setup\Setup.exe ?RAR ?SkypeClient.exe ?UPX v12_m2 - is OK
C:\Documents and Settings\Administrator\桌面\Setup\Setup.exe ?RAR ?1005_1017_0501_1-231.exe ?ASPack v2.12 - is OK
C:\Documents and Settings\Administrator\桌面\Setup\Setup.exe ?RAR ?dodolook150.exe ?NSIS ?System.dll - is OK
C:\Documents and Settings\Administrator\桌面\Setup\Setup.exe ?RAR ?dodolook150.exe ?NSIS ?1464.exe ?NSIS ?System.dll - is OK
C:\Documents and Settings\Administrator\桌面\Setup\Setup.exe ?RAR ?dodolook150.exe ?NSIS ?1464.exe ?NSIS ?DoSSSetup.dll - is OK
C:\Documents and Settings\Administrator\桌面\Setup\Setup.exe ?RAR ?dodolook150.exe ?NSIS ?1464.exe ?NSIS ?acpidisk.sys - a variant of Win32/Adware.Cinmus application - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Setup\Setup.exe ?RAR ?my_70121.exe - probably a variant of Win32/TrojanDownloader.QQHelper.NDD trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Setup\Setup.exe ?RAR ?okgogogo.exe ?NSIS ?Banner.dll - is OK
C:\Documents and Settings\Administrator\桌面\Setup\Setup.exe ?RAR ?okgogogo.exe ?NSIS ?scvhost.exe - is OK
Number of scanned files: 10
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 11:57:18 Total scanning time: 4 sec (00:00:04)

promised

大半是流氓

foundking

卡巴不报！
AVG也不报！

promised

运行了的话
还是上sreng报告吧
不要做任何改动

[ 本帖最后由 promised 于 2007-8-10 12:05 编辑 ]

foundking

用Winrar打开并就地解压如下图：

[ 本帖最后由 foundking 于 2007-8-10 13:08 编辑 ]

yurius

C:\virus\Setup\1005_1017_0501_1-231.exe - is an AdWare program Adware.Cdn