给大家看看这个

显示全部楼层 · 发表于 2008-7-4 20:33:19

McAfee报了2个

显示全部楼层 · 发表于 2008-7-4 21:22:40

Sent to Avira
Begin scan in 'C:\Documents and Settings\Administrator\桌面\setup'
C:\Documents and Settings\Administrator\桌面\setup\setup.exe
  [0] Archive type: RAR SFX (self extracting)
  --> map2.exe
   [DETECTION] Contains detection pattern of the dropper DR/BHO.apu.30
--> 691368.exe
   [1] Archive type: RAR SFX (self extracting)
   --> setup1368.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
   [NOTE]    A backup was created as '48e22468.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

End of the scan: 2008年7月4日  21:22
Used time: 00:02 min

The scan has been done completely.

   1 Scanning directories
   7 Files were scanned
   1 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   6 Files not concerned
   2 Archives were scanned
   0 Warnings
   1 Notes

25066364

setup.exe

429.88 KB

UNDER ANALYSIS

[ 本帖最后由 Kitman 于 2008-7-4 21:26 编辑 ]

显示全部楼层 · 发表于 2008-7-4 22:21:51

没有是沙盘真是不敢裸跑这种毒
中了以后基本上只能重装系统了.....如果不是高手的话

显示全部楼层 · 发表于 2008-7-4 22:26:15

原帖由 fcerebel 于 2008-7-4 22:21 发表
没有是沙盘真是不敢裸跑这种毒
中了以后基本上只能重装系统了.....如果不是高手的话

原帖由 zwl2828 于 2008-7-4 19:34 发表
1、可以使用金山清理专家检查恶评软件；
2、检查完毕后，请使用里面的系统修复工具；
3、也可以用以下方法手动杀毒。
删除以下文件：
%ProgramFiles%\Common Files\CPUSH\cpush.dll
%ProgramFiles%\Common ...

显示全部楼层 · 发表于 2008-7-4 22:59:29

厉害啊~~~学习中~~~

显示全部楼层 · 发表于 2008-7-4 23:01:25

最近广告频繁呀

KasperskyInternet Security 2009
Access denied
The requested URL could not be retrieved

While trying to retrieve the URL:

http://bbs.kafan.cn/attachment.php?aid=
302844&k=4b3858aee4f9d2e0fb09b108bffcb0d
0&t=1215183595

The following error was encountered:

The requested object is INFECTED with the following viruses: not-a-virus:AdWare.Win32.BHO.apu

Please contact your service provider if you consider it incorrect.
Generated:
Fri Jul 04 23:00:46 2008
Kaspersky Internet Security 2009

显示全部楼层 · 发表于 2008-7-4 23:06:49

扫描系统区域...
扫描所选择的目录和文件...
对象: setup.exe/map2.exe data0002
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\setup.rar
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.apu (KAV 引擎)
对象: setup.exe/691368.exe setup1368.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\setup.rar
Status: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.adio (KAV 引擎)
对象: setup.exe=>(RAR Sfx o)=>map2.exe=>(NSIS o) bzip2_solid_nsis0000
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\setup.rar
Status: 已发现病毒
病毒: Adware.CPush.AC (BD 引擎)
对象: setup.exe=>(RAR Sfx o)=>map2.exe=>(NSIS o) bzip2_solid_nsis0001
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\setup.rar
Status: 已发现病毒
病毒: Adware.Sogou.Gen (BD 引擎)
对象: setup.exe=>(RAR Sfx o)=>yoyo1060.exe=>(NSIS o) zlib_nsis0002
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\setup.rar
Status: 已发现病毒
病毒: Trojan.Agent.AITX (BD 引擎)
对象: setup.exe=>(RAR Sfx o)=>yoyo1060.exe=>(NSIS o) zlib_nsis0003
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\setup.rar
Status: 可疑病毒
病毒: Trojan.Obfuscated.KU (BD 引擎)
对象: setup.rar
路径: C:\Documents and Settings\wangcheng\桌面
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.apu, Trojan-PSW.Win32.OnLineGames.adio (KAV 引擎), Adware.CPush.AC, Adware.Sogou.Gen, Trojan.Agent.AITX, Trojan.Obfuscated.KU (BD 引擎)
扫描完成: 2008-7-4 23:06
已检查 1 个文件
已发现 1 个染毒文件
发现 0 个可疑文件

显示全部楼层 · 发表于 2008-7-5 17:06:21

原帖由 zwl2828 于 2008-7-4 19:34 发表

1、可以使用金山清理专家检查恶评软件；
2、检查完毕后，请使用里面的系统修复工具；
3、也可以用以下方法手动杀毒。

删除以下文件：
%ProgramFiles%\Common Files\CPUSH\cpush.dll
%ProgramFiles%\Common ...

比较复杂，谢谢。

显示全部楼层 · 发表于 2008-7-5 19:45:23

没敢点，呵呵

[病毒样本] 给大家看看这个

本帖子中包含更多资源

本帖子中包含更多资源