某帖生成物

ykz1991

http://bbs.kafan.cn/viewthread.php?tid=241122




MS都是adware
反正OSS这样说的

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\4C.zip'
E:\新建文件夹 (2)\4C.zip
  [0] Archive type: ZIP
  --> cdn.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdnup.A.3
  --> cdnaux.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdnup.A.4
  --> cdnforie.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdnup.A.5
  --> cdnins.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdnup.A.6
  --> cdnprh.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdn.A.1
  --> cdnprot.sys
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdn.A.3
  --> cdnunins.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdnup.A.11.C
  --> cdnup.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdn.A.2
  --> idnconvs.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdnup.A.11.A
  --> setup.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdnup.A.3
      [NOTE]      The file was deleted!


End of the scan: 2008年4月25日  00:12
Used time: 00:21 min

The scan has been done completely.

      0 Scanning directories
     11 Files were scanned
     10 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

挪威的冬天

瓦靠

信息        2008-04-25  12:52:14        您此次查毒清除了1个病毒                       
信息        2008-04-25  12:52:14        您此次查毒共查出9个病毒以及危险代码                       
信息        2008-04-25  12:52:14        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件11个                       
信息        2008-04-25  12:52:14        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
风险程序        2008-04-25  12:52:14        D:\Desktop\4C.zip\setup.exe        Win32.Adware.CDN.28864        跳过，未处理       
风险程序        2008-04-25  12:52:14        D:\Desktop\4C.zip\idnconvs.dll        Win32.Adware.CDN.69824        跳过，未处理       
风险程序        2008-04-25  12:52:14        D:\Desktop\4C.zip\cdnup.exe        Win32.Adware.CDN.164032        跳过，未处理       
风险程序        2008-04-25  12:52:14        D:\Desktop\4C.zip\cdnunins.exe        Win32.Adware.CDN.156224        跳过，未处理       
风险程序        2008-04-25  12:52:14        D:\Desktop\4C.zip\cdnprh.dll        Win32.Adware.CDN.49344        跳过，未处理       
风险程序        2008-04-25  12:52:14        D:\Desktop\4C.zip\cdnforie.dll        Win32.Adware.CDN.172160        跳过，未处理       
风险程序        2008-04-25  12:52:14        D:\Desktop\4C.zip\cdnaux.dll        Win32.Adware.CDN.49344        跳过，未处理       
风险程序        2008-04-25  12:52:14        D:\Desktop\4C.zip\cdn.dll        Win32.Adware.CDN.32960        跳过，未处理       
病毒        2008-04-25  12:52:10        D:\Desktop\4C.zip\cdnprot.sys        Win32.TrojDownloader.Small.178444        清除成功

kkgh

[扫描路径] C:\Documents and Settings\zh\桌面\cdn.dll
C:\Documents and Settings\zh\桌面\cdn.dll 是广告软件 Adware.Cdn

[扫描路径] C:\Documents and Settings\zh\桌面\cdnaux.dll
C:\Documents and Settings\zh\桌面\cdnaux.dll 是广告软件 Adware.Cdn

[扫描路径] C:\Documents and Settings\zh\桌面\cdnforie.dll
C:\Documents and Settings\zh\桌面\cdnforie.dll 是广告软件 Adware.Cdn

[扫描路径] C:\Documents and Settings\zh\桌面\cdnins.dll
C:\Documents and Settings\zh\桌面\cdnins.dll 是广告软件 Adware.Cdn

[扫描路径] C:\Documents and Settings\zh\桌面\cdnprh.dll
C:\Documents and Settings\zh\桌面\cdnprh.dll 是广告软件 Adware.Cdn

[扫描路径] C:\Documents and Settings\zh\桌面\cdnprot.sys
C:\Documents and Settings\zh\桌面\cdnprot.sys 是广告软件 Adware.Cdn

[扫描路径] C:\Documents and Settings\zh\桌面\cdnunins.exe
C:\Documents and Settings\zh\桌面\cdnunins.exe 是广告软件 Adware.Cdn

[扫描路径] C:\Documents and Settings\zh\桌面\cdnup.exe
C:\Documents and Settings\zh\桌面\cdnup.exe 是广告软件 Adware.Cdn

[扫描路径] C:\Documents and Settings\zh\桌面\idnconvs.dll
C:\Documents and Settings\zh\桌面\idnconvs.dll 是广告软件 Adware.Cdn

[扫描路径] C:\Documents and Settings\zh\桌面\setup.exe
C:\Documents and Settings\zh\桌面\setup.exe 是广告软件 Adware.Cdn

-----------------------------------------------------------------------------
扫描统计
-----------------------------------------------------------------------------
已扫描对象: 12
发现受感染对象: 0
发现受变种感染对象: 0
发现可疑对象: 0
发现广告软件: 10

瑞星一个不杀

wcb46888

"Total object scanned:";"11"
"Time needed:";"less than one second"
"Errors encountered:";"0"

"Spyware"
"File";"Infection";"Result"
"D:\样本区\4C.zip:\cdn.dll";"Adware Generic.QZM";"Potentially dangerous object"
"D:\样本区\4C.zip:\cdnaux.dll";"Adware Generic.RAU";"Potentially dangerous object"
"D:\样本区\4C.zip:\cdnforie.dll";"Adware Generic.RBF";"Potentially dangerous object"
"D:\样本区\4C.zip:\cdnins.dll";"Adware Generic.RBG";"Potentially dangerous object"
"D:\样本区\4C.zip:\cdnprh.dll";"Adware Generic.RBH";"Potentially dangerous object"
"D:\样本区\4C.zip:\cdnprot.sys";"Adware Generic.RBL";"Potentially dangerous object"
"D:\样本区\4C.zip:\cdnunins.exe";"Adware Generic.SOH";"Potentially dangerous object"
"D:\样本区\4C.zip:\cdnup.exe";"Adware Generic2.AIQ";"Potentially dangerous object"
"D:\样本区\4C.zip:\idnconvs.dll";"Adware Generic.RAV";"Potentially dangerous object"
"D:\样本区\4C.zip:\setup.exe";"Adware Generic.RAW";"Potentially dangerous object"
"D:\样本区\4C.zip";"Adware Generic.QZM";"Potentially dangerous object"

28654621

K 认识1个

aerbeisi

[Found downloader]         <W32/Downldr2.CWZ (exact, not disinfectable)>        C:\test\4c.zip->cdn.dll
[Found adware]         <W32/Cdnhelper.G (exact, not disinfectable)>        C:\test\4c.zip->cdnaux.dll
[Found Trojan]         <W32/Trojan5.EOY (exact, not disinfectable)>        C:\test\4c.zip->cdnforie.dll
[Found adware]         <W32/Cdnhelper.E (exact, not disinfectable)>        C:\test\4c.zip->cdnins.dll
[Found adware]         <W32/BdSearch.gen (exact, not disinfectable)>        C:\test\4c.zip->cdnprh.dll
[Found adware]         <W32/Cdn.C (exact, not disinfectable)>        C:\test\4c.zip->cdnprot.sys
[Found Trojan]         <W32/Trojan5.EIE (exact, not disinfectable)>        C:\test\4c.zip->cdnunins.exe
[Found adware]         <W32/Cdn.gen (exact, not disinfectable)>        C:\test\4c.zip->cdnup.exe
[Found Trojan]         <W32/Trojan5.EOZ (exact, not disinfectable)>        C:\test\4c.zip->idnconvs.dll
[Found adware]         <W32/Cdnhelper.B (exact, not disinfectable)>        C:\test\4c.zip->setup.exe

残缺的唯美

D:\Documents and Settings\EKINCHENG\桌面\4C.zip » ZIP » cdnprot.sys - Win32/TrojanDownloader.Small.NPA trojan

Palkia

kv 0

IllusionWing

So easy - 广谱特征码