安装1月14号发布的QQ2007II版本红伞狂报警

ghjkl119

2008-1-13,20:03:15 [WARNING] Is the Trojan horse TR/IFrame.AW.1!
  C:\Documents and Settings\zxc\Local Settings\Temporary Internet Files\Content.IE5\97Q1VZLP\6655996[1].htm
      [INFO] The file will be deleted.
2008-1-13,20:08:10 [CONFIG] On-Access configuration used:
      - Files to scan:  scan files from local drives
      - Device mode:  scan files on open, scan files on close
      - Scan files with all extensions (smart)
      - Unpack runtime compressed files
      - Actions: Delete file
      - Heuristic: MACRO , WIN32 MEDIUM
      - Logfile report level 1
2008-1-13,20:21:26 Avira AntiVir PersonalEdition Premium service has been stopped!
2008-1-14,7:13:48 ---------------------------------------------------------
2008-1-14,7:13:53 Keyfile contains a valid license. The Avira AntiVir PersonalEdition Premium will run as a fully functional version!
2008-1-14,7:13:53 AntiVir Guard version: 7.00.00.82,engine version 7.6.0.46,VDF version: 7.0.1.227
2008-1-14,7:13:54 Start Filter Device.
2008-1-14,7:13:54 Avira AntiVir PersonalEdition Premium has been started successfully!
2008-1-14,7:13:54 [CONFIG] On-Access configuration used:
      - Files to scan:  scan files from local drives
      - Device mode:  scan files on open, scan files on close
      - Scan files with all extensions (smart)
      - Unpack runtime compressed files
      - Actions: Delete file
      - Heuristic: MACRO , WIN32 MEDIUM
      - Logfile report level 1
2008-1-14,7:16:14 Update process started!
2008-1-14,7:16:15 Current Engine Version: 7.6.0.46
2008-1-14,7:16:15 Current Pattern File: 7.0.1.228 from 2008-1-13, 22:35
2008-1-14,7:16:16 [CONFIG] On-Access configuration used:
      - Files to scan:  scan files from local drives
      - Device mode:  scan files on open, scan files on close
      - Scan files with all extensions (smart)
      - Unpack runtime compressed files
      - Actions: Delete file
      - Heuristic: MACRO , WIN32 MEDIUM
      - Logfile report level 1
2008-1-14,21:05:12 Avira AntiVir PersonalEdition Premium service has been stopped!
2008-1-15,7:21:15 ---------------------------------------------------------
2008-1-15,7:21:19 Keyfile contains a valid license. The Avira AntiVir PersonalEdition Premium will run as a fully functional version!
2008-1-15,7:21:19 AntiVir Guard version: 7.00.00.82,engine version 7.6.0.46,VDF version: 7.0.1.228
2008-1-15,7:21:20 Start Filter Device.
2008-1-15,7:21:21 Avira AntiVir PersonalEdition Premium has been started successfully!
2008-1-15,7:21:21 [CONFIG] On-Access configuration used:
      - Files to scan:  scan files from local drives
      - Device mode:  scan files on open, scan files on close
      - Scan files with all extensions (smart)
      - Unpack runtime compressed files
      - Actions: Delete file
      - Heuristic: MACRO , WIN32 MEDIUM
      - Logfile report level 1
2008-1-15,7:23:42 Update process started!
2008-1-15,7:23:43 Current Engine Version: 7.6.0.46
2008-1-15,7:23:43 Current Pattern File: 7.0.1.236 from 2008-1-14, 16:33
2008-1-15,7:23:44 [CONFIG] On-Access configuration used:
      - Files to scan:  scan files from local drives
      - Device mode:  scan files on open, scan files on close
      - Scan files with all extensions (smart)
      - Unpack runtime compressed files
      - Actions: Delete file
      - Heuristic: MACRO , WIN32 MEDIUM
      - Logfile report level 1
2008-1-15,8:20:06 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsq10.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:20:12 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsj13.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:24:51 [WARNING] Is the Trojan horse TR/IFrame.AW.1!
  C:\Documents and Settings\zxc\Local Settings\Temporary Internet Files\Content.IE5\RWZWEU6K\6655996[1].htm
      [INFO] The file will be deleted.
2008-1-15,8:25:26 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsd16.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:25:33 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsd16.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:25:46 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsd16.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:25:47 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsd16.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:25:47 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsd16.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:25:54 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsd16.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:25:54 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsd16.tmp\Setup_QQ.exe
      [INFO] The file will be deleted.
2008-1-15,8:37:53 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsi23.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:38:00 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsi23.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:38:02 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsi23.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:38:02 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsi23.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:38:09 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsi23.tmp\ProcDll2.dll
      [INFO] The file will be deleted.
2008-1-15,8:38:09 [WARNING] Contains detection pattern of the Ad- or Spyware ADSPY/AdPlus.B.6!
  C:\Documents and Settings\zxc\Local Settings\Temp\nsi23.tmp\Setup_QQ.exe
      [INFO] The file will be deleted.

[ 本帖最后由 ghjkl119 于 2008-1-15 08:39 编辑 ]

周杰伦

建议楼主把红伞报警的文件发上来，让我们分析看看

Graybird

广告插件~

ghjkl119

原帖由 周杰伦 于 2008-1-15 08:39 发表
建议楼主把红伞报警的文件发上来，让我们分析看看

要发啥？你去腾讯主页下个最新的QQ2007II正式版 点开安装下就行了  我抓的日志而已

周杰伦

ok，不过，可以确定应该是流氓软件了

ucfeg

qq怎么这样流氓

Ueetee

哎 QQ越来越流氓了 呵呵

desertone

是啊，我也是昨晚安装的，红伞一直狂报。

wwtd

报的基本都是广告,应该不算什么大问题

吃佛念斋

QQ不是什么好东西。用TM吧