7ge[MD5: F13E53 14098A 49648F 571111 9C10E9 604E24 404479]

promised

1

yurius

C:\virus\
  样本2.rar
  样本2.rar:Zone.Identifier
    [0] Archive type: RAR
    --> IEXPLORE32.win
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> IEXPLORE32.Dak
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> WinSys64.Sys
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bov
        [WARNING]   Infected files in archives cannot be repaired!
    --> winpop.exe
        [DETECTION] Is the Trojan horse TR/Popwin.DE
        [WARNING]   Infected files in archives cannot be repaired!
    --> popinstall.exe
        [DETECTION] Is the Trojan horse TR/Popwin.DE.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> UnInstall.exe
        [DETECTION] Is the Trojan horse TR/Small.OA
        [WARNING]   Infected files in archives cannot be repaired!
    --> IEXPLORE32.New
        [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

zzx129

[:14:] [:14:]

wenfe

卡巴这样处理

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.Delf.pnh
病毒： Trojan.PSW.Win32.QQPass.tqu
病毒： Adware.Win32.Agent.nuk   
病毒： Adware.Win32.Agent.nuk   

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.39.62

微点卫士

微点：
广告软件名称:AdWare.Win32.Rond.d

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本2\WINPOP.EXE
是广告软件!
已成功阻止其运行,是否要删除此文件?
广告软件名称:AdWare.Win32.Rond.f

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本2\POPINSTALL.EXE
是广告软件!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Small.aau

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本2\UNINSTALL.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.ceh

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本2\IEXPLORE32.NEW
是木马程序!
已成功阻止其运行,是否要删除此文件?

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4081
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\IEXPLORE32.win - Suspicious of Win32.Trojan-Spy.Delf.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\IEXPLORE32.Dak - Suspicious of Win32.Trojan-Spy.Delf.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\WinSys64.Sys - Suspicious of Win32.Trojan-PSW.QQPass.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\winpop.exe - Infected with PDB-2144 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\popinstall.exe - Infected with PDB-2254 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\UnInstall.exe - Infected with PDB-2015 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\IEXPLORE32.New - Suspicious of Win32.Trojan-Downloader.Zlob.1

7 Files scanned
3 Infected files found
4 Suspicious files found
0 Files cured
3 Files deleted

taihuxian

检测到：木马程序 Trojan-PSW.Win32.OnLineGames.bov        URL: http://bbs.kafan.cn/attachment.php?aid=125762//WinSys64.Sys

风野胤

看卡巴的报告
好多坏了。。。。。。

东京时空

微点表现似乎很不错。。。