捆捆绑了,带毒了

流清泉

本来好像是个取色软件
捆了7个流氓程序
http://softdown.xinhuasoft.com/dzh_2008v5.exe

Sebastian

Starting the file scan:

Begin scan in 'D:\kafan\dzh_2008v5.rar'
D:\kafan\dzh_2008v5.rar
  [0] Archive type: RAR
    --> dzh_2008v5.exe
      [1] Archive type: NSIS
      --> [TempDir]/small66.exe
        --> Object
          [DETECTION] Contains recognition pattern of the ADSPY/Agent.XA adware or spyware
      --> [TempDir]/kzd2009.exe
        [DETECTION] Is the TR/Dropper.Gen Trojan
      --> [TempDir]/svchosts.exe
        [2] Archive type: RSRC
        [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
      --> [TempDir]/lqbz82.exe
        [DETECTION] Is the TR/Drop.Agent.PAL Trojan
      --> [TempDir]/llly66.exe
        [2] Archive type: NSIS
        --> [UnknownDir]/setup.exe
          [DETECTION] Is the TR/Agent.fwq.1 Trojan
        --> [UnknownDir]/sysmain.dat
          [DETECTION] Is the TR/Kaba.73278 Trojan
      --> [TempDir]/spools.exe
        [DETECTION] Is the TR/ATRAPS.Gen Trojan
      --> [TempDir]/install_205412.exe
        [DETECTION] Is the TR/Dldr.Agent.brcr Trojan
    [NOTE]      A backup was created as '4a64f707.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2009年5月3日  09:42
Used time: 00:02 Minute(s)

The scan has been done completely.

      0 Scanned directories
     15 Files were scanned
      8 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      1 files were deleted
      0 Viruses and unwanted programs were repaired
      1 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
      7 Files not concerned
      3 Archives were scanned
      0 Warnings
      1 Notes

kkgh

费尔  Worm.AutoRun.fro.gxll.arc

schumi小粉

McAfee 已自动阻止和删除 特洛伊木马程序。

关于此 特洛伊木马程序
已检测到: Generic Downloader.x!bi (特洛伊木马程序), Generic Downloader.x!bi (特洛伊木马程序)
位置: C:\Documents and Settings\Administrator\桌面\新建文件夹\7\svchosts.exe

McAfee 已自动阻止和删除 特洛伊木马程序。

关于此 特洛伊木马程序
已检测到: Generic.dx (特洛伊木马程序), Generic.dx (特洛伊木马程序)
位置: C:\Documents and Settings\Administrator\桌面\新建文件夹\7\install_205412.exe

McAfee 已自动阻止和删除 特洛伊木马程序。

关于此 特洛伊木马程序
已检测到: Artemis!D2A5E6616C9B (特洛伊木马程序), Artemis!D2A5E6616C9B (特洛伊木马程序)
位置: C:\Documents and Settings\Administrator\桌面\新建文件夹\7\small66.exe

McAfee 已自动阻止和删除 病毒。

关于此 病毒
已检测到: Artemis!377AA98E7729 (病毒), Artemis!377AA98E7729 (病毒)
位置: C:\Documents and Settings\Administrator\桌面\新建文件夹\7\spools.exe

qingjiangpu

ik kill

文件名: 7[1].zip
初始路径: c:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\63QRC5AD\
文件大小: 462.14 KB
病毒名称: Backdoor.Win32.PoisonIvy
建议: 已删除的

wobushiscam

卡巴报

zhanyuchenbobo

熊猫云7个全部kill

1688388728

发现病毒: Trojan.Generic.1427234, Trojan.Obfuscated.MQ, Rootkit.15982, Trojan.Adclicker.HG, Dropped:Trojan.Agent.AGTR (Engine A), Win32:Delf-LWX [Drp], Win32:Koutodoor [Rtk], Win32:Agent-ACQC [Trj], Win32:Agent-ADMW [Rtk] (2x), Win32:Spyware-gen [Trj] (2x) (Engine B)

下载网页内容时发现病毒V。

地址: bbs.kafan.cn

sam.to

The requested URL could not be retrieved

URL:

http://softdown.xinhuasoft.com/dzh_2008v
5.exe

Access to requested object is forbidden

卡巴清空

kalynn84

AVAST KILL ALL