山寨杀软外加木马群 （解压密码为：virus）

幸福的猪猪

山寨杀软为英文界面，我没点击扫描，它就自动帮我扫描（kaba全盘扫描都查不出什么东东，它刚扫描就查出3个！右下角弹出久违的安全中心提示的图标，说我没安装杀毒软件。郁闷，那我电脑上面的kis8在它眼中只是摆设吗？）

kaba miss 3x，hrue 3x 。to kill ！

Hello,

hh.exe_ - Trojan-Downloader.Win32.Agent.bqpx,
pcdef.exe_ - Trojan-Banker.Win32.Banker.aghm,
wjh.exe_ - Trojan-Downloader.Win32.Agent.bqpy

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.








[ 本帖最后由 幸福的猪猪 于 2009-4-6 11:28 编辑 ]

Palkia

上报 4个到金山

Sebastian

miss3
Starting the file scan:

Begin scan in 'D:\kafan\pcdef'
Begin scan in 'D:\kafan\TDDOWNLOAD'
D:\kafan\TDDOWNLOAD\wcb.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      A backup was created as '4a3b75da.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wcs.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      A backup was created as '4a4c75da.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wdh2.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Is the TR/PSW.32256 Trojan
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      A backup was created as '4a4175dc.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wdj.exe
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      A backup was created as '4a4375dc.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wdnf.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Is the TR/Agent2.hfu Trojan
      --> Object
        [DETECTION] Is the TR/PSW.OnlineGames.uuwf Trojan
    [NOTE]      A backup was created as '4a4775dc.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\whx2.exe
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      A backup was created as '4a5175e0.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wjxsj.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Is the TR/PSW.24576 Trojan
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      A backup was created as '4a5175e2.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wkxol.exe
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      A backup was created as '4a5175e3.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wmhuan.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      A backup was created as '4a4175e5.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wmwmwm.exe
    [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
    [NOTE]      A backup was created as '4a5075e5.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wmy.exe
    [DETECTION] Contains code of the W32/Parite Windows virus
    [NOTE]      A backup was created as '4a5275e5.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wqqhx.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4a4a75e9.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wqqsg.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Is the TR/Agent2.gxl Trojan
      --> Object
        [DETECTION] Is the TR/PSW.26112.1 Trojan
    [NOTE]      A backup was created as '4b3ceefa.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wqqxx.exe
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      A backup was created as '4a4a75ea.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wrxcq.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      A backup was created as '4a5175eb.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wtl.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      A backup was created as '4a4575ed.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wwd.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a3d75f0.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wwl.exe
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      A backup was created as '4a4575f0.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wwmgj.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4a4675f0.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wwow.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a4875f0.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wwz.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      A backup was created as '4a5375f0.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wzt.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      A backup was created as '4a4d75f3.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\wzyhx.exe
    [DETECTION] Contains code of the W32/Parite Windows virus
    [NOTE]      A backup was created as '4a5275f3.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\kafan\TDDOWNLOAD\xx.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4a0775f1.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2009年4月6日  11:22
Used time: 00:02 Minute(s)

The scan has been done completely.

      2 Scanned directories
     27 Files were scanned
     26 Viruses and/or unwanted programs were found
      2 Files were classified as suspicious
     24 files were deleted
      0 Viruses and unwanted programs were repaired
     24 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
     -1 Files not concerned
      0 Archives were scanned
      0 Warnings
     24 Notes

ledled

VB Kill 10

kingsheet

微点20

kingsheet

卡巴22

schumi小粉

to avast

索马里海盗

看来你安装的杀软没起多大作用，楼主可以试试其它杀软。很些杀软还是挺不错的。

pierrerouge

NOD32  解压过程中kill all

tangxingyong

没啥大用   找点好的