还是广告 4个

qianwenxiang

发现用GOOGLE搜广告软件不错 运气好还能附带弄几个木马下来

残缺的唯美

C:\Users\Administrator\Desktop\ad.rar » RAR » GInstaller.exe.vir - a variant of Win32/Adware.WinFixer application
C:\Users\Administrator\Desktop\ad.rar » RAR » YazzleActiveX.ocx.vir - a variant of Win32/TrojanDownloader.PurityScan trojan
C:\Users\Administrator\Desktop\ad.rar » RAR » SbCIe02b.dll.vir - a variant of Win32/Adware.BHO.SideStep application
C:\Users\Administrator\Desktop\ad.rar - multiple threats - deleted - quarantined

Nerazzurri

扫描进行于：2007-10-4 17:33:36
扫描日志
NOD32版本 2570 (20071003) NT
命令行： F:\Documents and Settings\kafan\桌面\ad.rar

日期： 4.10.2007  时间：17:33:39
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\Documents and Settings\kafan\桌面\ad.rar
F:\Documents and Settings\kafan\桌面\ad.rar >>RAR >>GInstaller.exe.vir - Win32/Adware.WinFixer 应用程序的变种
F:\Documents and Settings\kafan\桌面\ad.rar >>RAR >>YazzleActiveX.ocx.vir - Win32/TrojanDownloader.PurityScan 木马的变种
F:\Documents and Settings\kafan\桌面\ad.rar >>RAR >>SbCIe02b.dll.vir - Win32/Adware.BHO.SideStep 应用程序的变种
已扫描的文件数目：4
已发现的病毒数目：3
完成时间： 17:33:44 总扫描时间：5 秒 (00:00:05)

Nerazzurri

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at:        17:34:18 2007-10-4

+ Scan result:       



F:\Documents and Settings\kafan\桌面\ad.rar/YazzleActiveX.ocx.vir -> Adware.MediaTickets : No action taken.
F:\Documents and Settings\kafan\桌面\ad.rar/msnnames.ocx.vir -> Adware.SearchTwo : No action taken.
F:\Documents and Settings\kafan\桌面\ad.rar/SbCIe02b.dll.vir -> Adware.SideStep : No action taken.
F:\Documents and Settings\kafan\桌面\ad.rar/GInstaller.exe.vir -> Not-A-Virus.Downloader.Win32.WinFixer.m : No action taken.


::Report end

红心王子

007-10-4        18:37:26        1191494246        Administrator        3024        Sign of "Win32:Adware-gen. [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\ad.rar\GInstaller.exe.vir" file.  
2007-10-4        18:37:29        1191494249        Administrator        3024        Sign of "Win32:PurityScan-AF [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\ad.rar\YazzleActiveX.ocx.vir\[Embedded#OIN_SETUP]\[PECompact]\[Embedded#AD_ENG_UNINST]" file.  
2007-10-4        18:37:29        1191494249        Administrator        3024        Sign of "Win32:MediaTickets-B [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\ad.rar\YazzleActiveX.ocx.vir\[Embedded#YAX_UNINST]\[UPX]" file.  
2007-10-4        18:37:29        1191494249        Administrator        3024        Sign of "Win32:MediaTickets [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\ad.rar\YazzleActiveX.ocx.vir" file.  
2007-10-4        18:37:29        1191494249        Administrator        3024        Sign of "Win32:Adware-gen. [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\ad.rar\msnnames.ocx.vir" file.  
2007-10-4        18:37:29        1191494249        Administrator        3024        Sign of "Win32:Spyware-gen. [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\ad.rar\SbCIe02b.dll.vir" file.

残缺的唯美

Result: 3 malware found
AdWare.Win32.MediaTickets.z (adware)
C:\Users\Administrator\Desktop\ad.rar\YazzleActiveX.ocx.vir
AdWare.Win32.2Search.a (adware)
C:\Users\Administrator\Desktop\ad.rar\msnnames.ocx.vir
AdWare.Win32.SideStep.f (adware)
C:\Users\Administrator\Desktop\ad.rar\SbCIe02b.dll.vir


Riskware found
Downloader.Win32.WinFixer.bb (riskware)
C:\Users\Administrator\Desktop\ad.rar\GInstaller.exe.vir
fs杀广告不错

timhas266

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\ad.rar'
C:\Documents and Settings\tim\桌面\ad.rar
  [0] Archive type: RAR
  --> GInstaller.exe.vir
      [DETECTION] Contains detection pattern of the SPR/Dldr.WinFixer.M.9 program
  --> YazzleActiveX.ocx.vir
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/MediaTick.W.8
  --> msnnames.ocx.vir
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/2Search.dll
  --> SbCIe02b.dll.vir
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bho.SideSte.B
      [INFO]      A backup was created as '4732d29d.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: Thursday, 4 October, 2007  19:44
Used time: 00:02 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      4 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

微点卫士

C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\GINSTALLER.EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:4010
远端地址:85.17.4.104(荷兰)
远端端口:80
，然后要我安装东西

tcgg1983

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Adware.Win32.SideStep.f  

用户来源：局域网

软件版本：20.12.30  瑞星就查到1个  真垃圾

woai_jolin

Protokol o skenováníDatum: 4. ?jna 2007 19:49:55Cíl:
G:\V\ad.rar
Možnosti:

Skenovací metoda	Všechny soubory
Heuristika	Povoleno
Použít virtuální počítač	Ano
Skenovat archívy	Ano
Použít vyřazené přípony	Ne
Vyřazené přípony	Není definováno
Použít vyřazené objekty	Ne
Vyřazené objekty	Není definováno

Verze antiviru:
TrustPort Workstation Antivirus 2.7.0.1419
Výsledky:
Soubory:

Cesta	Výsledek skenování	Jméno viru	Provedená akce
G:\V\ad.rar:\GInstaller.exe.vir	Infikováno!	WinFixer.BQ	Do karantény
G:\V\ad.rar:\YazzleActiveX.ocx.vir	Infikováno!	Generic.SLL	Do karantény
G:\V\ad.rar:\msnnames.ocx.vir	Infikováno!	Generic.VJP	Do karantény
G:\V\ad.rar:\SbCIe02b.dll.vir	Infikováno!	Generic.OQL	Do karantény
G:\V\ad.rar	Infikováno!	WinFixer.BQ	Karanténa

Statistika
Zaváděcí sektory:

Oskenováno:	0
Infikováno:	0
Opraveno:	0

Soubory:

Oskenováno:	6
Infikováno:	4
Opraveno:	0
Přejmenováno:	0
Přesunuto do karantény:	1
Smazáno:	0

Registry:

Oskenováno:	0
Infikováno:	0
Opraveno:	0
Smazáno:	0