帮忙看看是什么

lty8282003

2008-6-17 16:57:38 HTTP 过滤器 文件 http://www.myyiso.com/internet/promote.dll Win32/Adware.Agent.AJS 应用程序 的变种 连接中断 - 已隔离 LENOVO-DAA20C57\Administrator 通过应用程序访问 web 时检测到威胁: C:\Program Files\Internet Explorer\IEXPLORE.EXE.

2008-6-12 18:54:24 HTTP 过滤器 文件 http://www.ppliveds.cn/down.exe Win32/Spy.Delf.NIL 特洛伊木马 的变种 连接中断 - 已隔离 LENOVO-DAA20C57\Administrator 通过应用程序访问 web 时检测到威胁: C:\Program Files\Internet Explorer\IEXPLORE.EXE.

2008-6-17 21:09:59 文件系统实时防护 文件 C:\WINDOWS\system32\inf\scsys16_080610.dll Win32/Spy.Pophot.NAC 特洛伊木马 通过删除清除 - 已隔离 NT AUTHORITY\SYSTEM 在应用程序新建的文件上发生事件: C:\WINDOWS\system\sgcxcxxaspf080610.exe.
nod32检测出来的

电影结束了

F:\down.exe                   Trojan.KillAV.aam.xgjd  木马
对象: promote.dll
        路径: F:
        Status: 已发现病毒
        病毒: not-a-virus:AdWare.Win32.Agent.bmt (KAV 引擎)

solcroft

应该是系统中毒了，有NOD32查不出的下载者

Kitman

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:        http://www.myyiso.com/internet/promote.dll
Information:        Contains detection pattern of the Ad- or Spyware ADSPY/Agent.bmt.1
Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.55, VDF 7.0.4.210

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:        http://www.ppliveds.cn/down.exe
Information:        Is the Trojan horse TR/Dropper.Gen
Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.55, VDF 7.0.4.210

sam.to

已偵測: 廣告軟體 not-a-virus:AdWare.Win32.Agent.bmt        檔案: C:\Documents and Settings\kato9096\桌面\promote.dll


不报的已上报

sam.to

Hello,

down.exe_, wicheck080513.exe_ - Trojan-Dropper.Win32.Agent.tby

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.