被捆绑了……

ashe_vaan

从新浪下载网下的，Nullsoft Copy，NOD32报毒。自解压格式的，里面有个open.exe
http://www.virustotal.com/zh-cn/analisis/205815ab4124dc5a008addcd3a04d68f
文件 nscopy.exe 接收于 2008.11.08 15:26:51 (CET)
当前状态: 完成
结果: 24/36 (66.67%)

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.11.7.1	2008.11.08	-
AntiVir	7.9.0.26	2008.11.07	TR/Dldr.Morans
Authentium	5.1.0.4	2008.11.07	W32/Adware.MXO
Avast	4.8.1248.0	2008.11.07	Win32:Trojan-gen {Other}
AVG	8.0.0.161	2008.11.08	Generic.UBL
BitDefender	7.2	2008.11.08	Adware.BBT
CAT-QuickHeal	9.50	2008.11.08	-
ClamAV	0.94.1	2008.11.08	-
DrWeb	4.44.0.09170	2008.11.08	Adware.Bbt
eSafe	7.0.17.0	2008.11.06	Suspicious File
eTrust-Vet	31.6.6198	2008.11.07	-
Ewido	4.0	2008.11.08	-
F-Prot	4.4.4.56	2008.11.07	W32/Adware.MXO
F-Secure	8.0.14332.0	2008.11.08	AdWare.Win32.VB.d
Fortinet	3.117.0.0	2008.11.08	Adware/PUP
GData	19	2008.11.08	Adware.BBT
Ikarus	T3.1.1.45.0	2008.11.08	Trojan-Banker.Win32.Bancos
K7AntiVirus	7.10.520	2008.11.08	Non-Virus:AdWare.Win32.VB.d
Kaspersky	7.0.0.125	2008.11.08	not-a-virus:AdWare.Win32.VB.d
McAfee	5427	2008.11.07	potentially unwanted program Generic PUP
Microsoft	1.4104	2008.11.08	-
NOD32	3596	2008.11.07	a variant of Win32/TrojanClicker.VB.LC
Norman	5.80.02	2008.11.07	W32/Agent.SBE.dropper
Panda	9.0.0.4	2008.11.08	Trj/Downloader.MDW
PCTools	4.4.2.0	2008.11.08	Adware.VB.EAY
Prevx1	V2	2008.11.08	-
Rising	21.02.52.00	2008.11.08	Trojan.Clicker.Btad.b
SecureWeb-Gateway	6.7.6	2008.11.08	Trojan.Dldr.Morans
Sophos	4.35.0	2008.11.08	-
Sunbelt	3.1.1785.2	2008.11.08	-
Symantec	10	2008.11.08	-
TheHacker	6.3.1.1.145	2008.11.08	-
TrendMicro	8.700.0.1004	2008.11.07	TROJ_ADLOAD.AG
VBA32	3.12.8.9	2008.11.07	AdWare.VB.d
ViRobot	2008.11.7.1457	2008.11.07	-
VirusBuster	4.5.11.0	2008.11.08	Adware.VB.EAY

328397663

2008-11-8 22:41:07        检测到威胁: not-a-virus:AdWare.Win32.VB.d        C:\Documents and Settings\Administrator\桌面\nscopy.rar/nscopy.exe/open.exe               
2008-11-8 22:41:07        已删除: not-a-virus:AdWare.Win32.VB.d        C:\Documents and Settings\Administrator\桌面\nscopy.rar/nscopy.exe

Palkia

Trojan.Clicker.Btad.b

多引擎上也升级引擎了

woai_jolin

2008-11-8 23:24:40        Real-time file system protection        file        G:\v\nscopy.exe        a variant of Win32/TrojanClicker.VB.LC trojan        deleted - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

失翼天使

Is the TR/Dldr.Morans Trojan

BING126

McAfee  Generic PUP