4个，可能是ad

qianwenxiang

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.Dyfuca.bm        File: C:\Documents and Settings\Owner\×ÀÃæ\120403.rar/UniDist.CAB/UniDist.ocx
detected: Trojan program Trojan-Downloader.Win32.Dyfuca.x        File: C:\Documents and Settings\Owner\×ÀÃæ\120403.rar/MultiDistFC.CAB/MulDist.ocx

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\120403.rar'
C:\Documents and Settings\Administrator\桌面\120403.rar
  [0] Archive type: RAR
  --> SrchPlug.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/ZSearch.G
  --> SearchPluginInstaller.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/ZSearch.C
    --> UniDist.cab
      [1] Archive type: CAB (Microsoft)
      --> UniDist.ocx
          [DETECTION] Is the Trojan horse TR/Dldr.Dyfuca.BM
    --> MultiDistFC.cab
      [1] Archive type: CAB (Microsoft)
      --> MulDist.ocx
          [DETECTION] Is the Trojan horse TR/Dldr.Dyfuca.X
      --> MulDist.inf
          [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Dyfuca.A
      [INFO]      The file was deleted!


End of the scan: 星期二 2007年12月4日  22:36
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      5 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      3 Archives were scanned
      0 Warnings
      0 Notes

nosferatu

AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at:        22:38:04 2007-12-4

+ Scan result:       



C:\Documents and Settings\Administrator\桌面\120403.rar/MultiDistFC.CAB/MulDist.inf -> Adware.Dyfuca : Cleaned.
C:\Documents and Settings\Administrator\桌面\120403.rar/UniDist.CAB/UniDist.ocx -> Downloader.Dyfuca.bm : Cleaned.
C:\Documents and Settings\Administrator\桌面\120403.rar/MultiDistFC.CAB/MulDist.ocx -> Downloader.Dyfuca.x : Cleaned.


::Report end

红伞
[0] Archive type: RAR
    --> UniDist.cab
      [1] Archive type: CAB (Microsoft)
      --> UniDist.ocx
          [DETECTION] Is the Trojan horse TR/Dldr.Dyfuca.BM
    --> MultiDistFC.cab
      [1] Archive type: CAB (Microsoft)
      --> MulDist.ocx
          [DETECTION] Is the Trojan horse TR/Dldr.Dyfuca.X
      [INFO]      The file was deleted!

jimmyleo

D:\Download\Scan\MultiDistFC.CAB >>> suspicion for Trojan-Downloader.Win32.Dyfuca.x ( 0FB5AB94 0B1C16DF 002619C0 00294405 18450)
D:\Download\Scan\UniDist.CAB >>> suspicion for Trojan-Downloader.Win32.Dyfuca.bm ( 0FB1B76E 0BA4F3B0 00252A27 00232B38 16582)
D:\Download\Scan\UniDist.CAB/{CAB}/UniDist.inf >>>>> Trojan-Downloader.Win32.Dyfuca.as

sam.to

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Dyfuca.x        檔案: C:\Documents and Settings\kato9096\桌面\166353\MultiDistFC.CAB/MulDist.ocx
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Dyfuca.bm        檔案: C:\Documents and Settings\kato9096\桌面\166353\UniDist.CAB/UniDist.ocx
沒报的已上报

scottxzt

木马名称:Trojan-Downloader.Win32.Dyfuca.bm

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\UNIDIST.OCX
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Dyfuca.x

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\MULDIST.OCX
是木马程序!
已成功阻止其运行,是否要删除此文件?

gogo8989

没装杀软,解压后没发现有程序运行,运行SearchPluginInstaller.exe后没见到进程.

28654621

\120403.rar\UniDist.CAB\UniDist.ocx [L] Win32:DyfucDldr-J [Trj] (0)
\120403.rar\MultiDistFC.CAB\MulDist.ocx [L] Win32:DyfucDldr-J [Trj] (0)