4个ik,sophos，avira都挂了

haol

mcafee found 2 threats
FakeAlert-R.dll ！！

http://us.mcafee.com/virusInfo/d ... &virus_k=143278

wangjay1980

AutoSearch.dll, AutoSearchHelper.dll, jcsyh0578.exe_, sibrwin07.exe_ - not-a-virus:AdWare.Win32.AutoSearch.e

gho

C:\Documents and Settings\gho\桌面\AutoSearchHelper.dll        FakeAlert-R.dll (Trojan)
2007-12-8        19:21:41        Deleted         WHUT-D067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\jcsyh0578.exe        FakeAlert-R.dll (Trojan)

gho

deleted: adware not-a-virus:AdWare.Win32.AutoSearch.e        File: C:\Documents and Settings\gho\×ÀÃæ\sibrwin07.exe
deleted: adware not-a-virus:AdWare.Win32.AutoSearch.e        File: C:\Documents and Settings\gho\×ÀÃæ\AutoSearch.dll

adonis219

C:\Documents and Settings\Administrator\桌面\样本1.rar » RAR » jeokbt22.sys - a variant of Win32/Agent.ABE trojan

jianjianliu1983

诺顿有反映～～～

qigang

RX20.21.52未杀一个！

scottxzt

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1056
Paranoia Database - 49719
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder

C:\Documents and Settings\Uhthn\Desktop\New Folder\AutoSearch.dll - Infected GENERIC.MALWARE.5B8.17000 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\AutoSearchHelper.dll - Infected GENERIC.MALWARE.0DE.D000 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\jcsyh0578.exe - Infected GENERIC.MALWARE.41E.F800 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\sibrwin07.exe - Infected GENERIC.MALWARE.E8B.5000 - Deleted

4 Files scanned
4 Infected files found
0 Suspected files found
0 Files disinfected
4 Files deleted

Graybird

The file 'AutoSearch.dll' has been determined to be 'MALWARE'. Our analysts named the threat ADSPY/AutoSearch.E. The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or by using of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 7.00.01.61.

The file 'AutoSearchHelper.dll' has been determined to be 'MALWARE'. Our analysts named the threat ADSPY/AutoSearch.E.1. The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or by using of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 7.00.01.61.

The file 'jcsyh0578.exe' has been determined to be 'MALWARE'. Our analysts named the threat ADSPY/AutoSearch.E.2. The term "ADSPY/" denotes adware or spyware. This type of malware is able to change browser settings for example by manipulating registry settings or by using of NTFS-streams. Very often IEexploits are used to manipulate the browserhelp.dll.Detection is added to our virus definition file (VDF) starting with version 7.00.01.61.