NIS2009查到的downloader！

jpzy

发出来给大家看看，是误报？还是的确有问题！

这个是在我的c:\windows\system32下面查出来的！昨天新装的NIS2009发现的~~之前一直单奔微点来着~~~

欠妳緈諨

HEUR/Malware

wangjay1980

记得是个广告

TO KL

sltgr

File:	promote.dll
Status:	INFECTED/MALWARE
MD5:	4171788f6363ae24ccc769cac8db0963
Packers detected:	-
Scanner results
Scan taken on 26 Sep 2008 03:37:16 (GMT)
A-Squared	Found nothing
AntiVir	Found HEUR/Malware
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found nothing
BitDefender	Found nothing
ClamAV	Found nothing
CPsecure	Found nothing
Dr.Web	Found Adware.Promo
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
G DATA	Found nothing
Ikarus	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found nothing
Norman Virus Control	Found W32/DLoader.JSHH
Panda Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

chow2006

费尔报木马

嘁。不稀罕~

http://www.threatexpert.com/report.aspx?md5=4171788f6363ae24ccc769cac8db0963
毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒毒

wangjay1980

卡巴不收

promote.dll,

No malicious code were found in these files.

Please quote all when answering.
--Best regards, Andrey LadikovVirus
analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/
http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

jpzy

难道是误报？！可惜不知道这个东西是什么程序生成的，没法运行它~~~

西风萧雨

难道是卡巴不报生成物，是不是因为觉得没危害所以不入库啊？？》

kingmuro

驱逐舰报